
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
File: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft (raw, json)
Hash identifier: q6N2C64upJbYC2xuTtYjOiRa+zZDEDywvZuLTOkMF30=
Subject key identifier: 0A:1F:A7:F8:C2:1C:F0:DD:18:94:D7:4E:94:CE:F0:4B:B9:ED:22:4F
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
Manifest number: D6
Signing time: Thu 23 Jul 2026 08:55:26 +0000
Manifest this update: Thu 23 Jul 2026 08:55:25 +0000
Manifest next update: Thu 30 Jul 2026 08:55:25 +0000
Files and hashes: 1: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl (hash: F8si0I58tS+FZ75UqfKE5ZX0Z0PCWjk01ZlmAsRim3g=)
2: 880DD06A13C411F1A59637CD0A3D8C67.roa (hash: IRzwW31IFK0aM/X6hDs/vAqartR5Du8EA+bgcPRQw4c=)
3: 6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (hash: hpB6XWjWMWxSngM0RUJyt0B9skfR+aSywNyweLCVrOU=)
4: B3D7207C0CCE11F18D20135B323D8C67.roa (hash: goJQ6WHTbtjm3owLcaK0Ly1P0RrZQSDux7VE6q6D1CE=)
5: 0B4068BEC55D11F0B9FDE586C4F9AE02.roa (hash: Q5D67jNmugqmuZx6Mln1BqBj64RHtIaLCMbnVw/ZKoU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Validity
Not Before: Jul 23 08:55:25 2026 GMT
Not After : Jul 30 08:55:25 2026 GMT
Subject: CN=6a61d6fe-1a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:3e:79:b6:c2:9f:3d:ca:d9:07:3c:30:df:
76:66:74:e4:31:cb:64:47:7a:fe:1b:77:53:c3:3d:
bb:2e:f1:f1:62:10:72:5e:92:c2:4d:85:9b:25:10:
ca:d6:1c:d9:bb:e9:b6:5a:fb:01:a5:27:7e:c1:f5:
9a:c5:b7:1c:4a:73:cd:bf:d8:cd:94:5b:52:d5:cb:
d6:37:a4:0b:b5:84:89:2d:d6:52:73:1c:f9:80:40:
a8:61:b0:90:1d:27:ed:b6:af:40:4e:91:19:8e:d1:
7e:48:4d:3b:c0:a9:34:34:ce:d0:14:19:c4:32:c0:
19:32:93:14:cc:3f:cb:72:a3:4d:12:19:38:0b:59:
37:09:53:85:7f:de:02:43:11:e3:a9:06:04:80:84:
0c:2d:75:5e:e9:bf:90:7d:c5:05:6f:7a:af:45:01:
8f:02:89:61:86:71:00:7e:1b:87:30:6b:96:50:03:
bc:e8:dc:a9:e9:76:2b:d3:66:09:d9:bb:64:40:09:
8d:b0:c4:71:a4:94:b7:6b:cd:8c:ef:f9:3c:6f:96:
e3:a9:84:b1:3b:c1:a8:07:7d:69:0f:84:de:fd:a5:
14:70:dd:72:2a:9c:16:14:3f:c8:c0:a8:8c:db:6d:
6a:32:76:3d:e2:39:90:a5:72:f4:72:64:e9:72:8c:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1F:A7:F8:C2:1C:F0:DD:18:94:D7:4E:94:CE:F0:4B:B9:ED:22:4F
X509v3 Authority Key Identifier:
keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3a:32:8e:91:8a:2c:62:07:57:9a:eb:a0:7a:22:60:a0:7e:
00:e7:ad:45:d1:ee:4a:ea:b8:a6:7c:f2:49:5a:f4:ca:ea:3c:
a4:84:04:f7:d3:e9:96:bb:cf:6a:80:93:f3:24:7b:93:95:3c:
80:84:95:10:d5:cb:61:67:35:ef:05:7b:96:ab:88:0e:fa:c1:
78:bb:10:ff:10:b6:a0:3f:a0:00:09:8c:15:3c:23:2c:3f:9f:
4c:bc:9e:a0:44:18:98:6f:2c:65:d3:a6:d2:54:4b:a9:d5:56:
d2:9f:11:a2:db:18:14:d5:0d:4c:1a:3d:8b:1d:1a:e0:df:e1:
74:61:05:ec:14:0f:3f:bb:7e:a5:20:17:59:90:3b:6b:37:34:
b8:8b:3b:0a:0f:11:21:0d:24:74:3a:f7:3c:9d:22:2b:63:e8:
d1:8f:d7:32:99:41:3d:c9:b4:2e:49:a7:52:e5:4b:cc:91:fc:
74:54:2f:fe:37:0c:72:4b:c7:4a:77:51:74:18:62:be:95:7d:
73:ce:4b:0d:9d:c9:c1:a6:c6:5b:06:31:4a:0f:09:35:1c:98:
ec:0a:72:a2:5a:00:a2:23:b7:54:68:77:c8:81:2d:0c:64:a0:
50:ab:29:81:26:a8:f0:da:38:ef:5d:74:6a:00:43:8a:23:6f:
57:0b:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:05 2026 by rpki-client