
$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json)
Hash identifier: 5OdrwPLjTcQSRanAy7pCGEBA8i6B/mQQT6eKjt8t5Jg=
Subject key identifier: 2B:BF:D0:64:81:6E:4A:C6:94:1D:63:D5:6B:85:00:73:0E:86:E3:C1
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
Manifest number: 013B
Signing time: Wed 13 May 2026 05:52:37 +0000
Manifest this update: Wed 13 May 2026 05:52:36 +0000
Manifest next update: Wed 20 May 2026 05:52:36 +0000
Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: bGgGmBml3zMTwcP4wGwgrCBt6m49xjETJ977w5gMTrg=)
2: 90C06632E59811F0B79FD920496F56BC.roa (hash: Z/MTCzTXGo9DzTVFAZ1qXdgIiz2vNTTF/MPMd5PghNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Validity
Not Before: May 13 05:52:36 2026 GMT
Not After : May 20 05:52:36 2026 GMT
Subject: CN=6a0411a5-56eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:b4:84:1e:53:df:c7:99:55:be:09:ea:75:
53:9f:31:41:e9:90:8e:9e:89:03:fc:79:8e:e4:8f:
a9:88:9c:d9:25:69:aa:7a:f8:c1:80:7b:b1:69:af:
dc:c7:d4:df:79:70:75:50:cf:83:8e:4d:ee:ea:89:
7d:12:86:47:6c:f9:2d:c3:b8:c7:79:f0:94:5b:fe:
d9:4f:eb:30:88:6d:14:3f:88:5d:87:cd:b2:a1:4d:
60:0a:66:58:be:aa:c4:b7:93:7b:39:99:5f:7b:31:
1f:95:a4:a0:65:84:6a:e3:39:4b:b1:78:a3:2a:d8:
ee:f0:21:27:2b:7d:6f:90:a8:3e:d5:bd:f6:c3:42:
8e:1f:6a:b8:52:2f:e0:6b:c8:f9:8a:a8:b0:e4:75:
44:64:ab:8a:58:32:bb:4c:dd:29:9b:cd:2c:75:8d:
60:dd:b8:db:6e:ec:09:0b:53:f1:69:a4:18:61:09:
15:e9:65:cd:dc:d2:7d:94:1a:45:47:00:81:ec:ab:
d4:b8:4b:29:bd:29:2e:13:b5:58:82:5f:98:42:8e:
d1:46:37:43:3b:7b:58:5b:48:0f:f8:17:1f:b1:dc:
94:b9:12:65:b6:6f:c0:d0:14:e5:47:3c:6a:e7:a4:
63:fa:99:5e:75:f3:46:7e:87:61:8b:66:ce:e9:92:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BF:D0:64:81:6E:4A:C6:94:1D:63:D5:6B:85:00:73:0E:86:E3:C1
X509v3 Authority Key Identifier:
keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4f:cd:e4:ee:ee:07:04:07:f9:5c:e9:65:63:18:e6:c0:65:
05:dd:95:ea:4e:f9:fb:91:4b:34:85:1e:05:cf:a8:c3:8e:e2:
c9:27:9e:b5:26:2a:58:d8:63:a2:e9:35:83:36:c7:d1:dd:0e:
d2:7d:cb:4e:14:25:9c:f3:48:ef:4f:4c:8e:1a:58:22:08:12:
22:e6:db:c5:fc:6b:9b:52:90:fc:7a:ab:e0:5b:ed:00:c0:1b:
2b:38:a4:d3:e3:10:fe:98:c2:ad:d1:61:ff:34:5d:5f:64:74:
0d:fb:bd:77:f3:4f:6b:63:b9:f7:0f:be:43:3b:2c:2e:87:7d:
20:16:8b:45:79:1c:2f:96:b5:40:95:b2:ba:03:0d:81:9a:b1:
fa:c8:dc:a2:f7:32:42:38:31:92:3c:78:31:05:c2:82:75:c8:
79:8a:dd:c9:54:2b:cf:f1:b1:51:28:db:26:b7:54:3d:28:82:
32:4c:49:da:77:7a:f7:8d:30:3e:3a:39:bb:17:7f:4e:cb:0c:
e9:5d:30:88:28:bb:32:42:4a:5a:f8:52:e5:bd:c9:2f:6d:c8:
bb:88:f5:32:b2:d5:49:8a:bc:a7:fd:fe:20:4f:f3:2c:aa:a7:
e2:8d:95:a5:56:93:04:07:72:32:a5:97:b7:d1:5c:ac:4c:d7:
36:81:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:39:39 2026 by rpki-client