
$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json)
Hash identifier: oBWwu2Fmfs+yl8naygfEDxF04TMrgNBpuSXuyuM+pP0=
Subject key identifier: FB:7E:76:B5:BE:A4:83:66:8D:FD:6F:B1:E5:CE:E2:29:12:EA:B4:17
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
Manifest number: 0122
Signing time: Wed 25 Mar 2026 05:16:59 +0000
Manifest this update: Wed 25 Mar 2026 05:16:58 +0000
Manifest next update: Wed 01 Apr 2026 05:16:58 +0000
Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: saH+CsEj8WEap4ghCz3eQItD5+6WUU/zmhz8xbFrutA=)
2: 90C06632E59811F0B79FD920496F56BC.roa (hash: Z/MTCzTXGo9DzTVFAZ1qXdgIiz2vNTTF/MPMd5PghNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Validity
Not Before: Mar 25 05:16:58 2026 GMT
Not After : Apr 1 05:16:58 2026 GMT
Subject: CN=69c36fcb-2962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:b6:07:b3:1c:03:cd:b0:48:ce:ad:6e:cc:
1b:8a:d2:72:e8:7d:ae:25:d2:db:41:b1:f3:22:4d:
6f:26:11:57:e2:73:b5:8d:4a:ce:47:3e:77:bb:8d:
fc:b1:a3:04:6c:8d:b4:94:7e:5f:fe:98:81:9f:7d:
c4:6e:08:a9:33:43:46:86:c7:98:a9:25:05:7f:81:
d6:33:87:00:91:e9:e0:fa:89:05:bb:69:cd:64:12:
55:3b:65:fb:5d:db:62:07:ff:98:68:8a:a7:d1:d0:
e0:0b:25:16:ed:78:6d:d4:e8:0d:9e:32:9e:da:b4:
c4:b6:c0:b7:0b:ad:63:34:7c:c8:f6:32:00:c9:81:
be:79:b0:d8:1b:a2:07:e0:ca:2d:8a:40:89:05:59:
45:85:31:3c:ca:62:ac:7b:8c:b9:f9:c8:e9:6d:9d:
de:96:84:1c:f8:b7:cd:4b:ab:99:6e:67:3a:69:72:
f8:91:92:94:06:bc:ee:8e:b9:16:de:4a:03:bd:36:
b7:a0:52:15:23:c9:ef:d0:51:4d:8d:5a:1c:75:dd:
d4:27:3a:6b:73:8d:03:83:2f:db:21:db:90:88:0b:
53:cd:c4:d2:ec:0d:68:ee:17:f1:1f:82:14:38:45:
8a:63:06:84:4a:c5:f4:22:94:09:b8:b0:33:30:02:
69:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:76:B5:BE:A4:83:66:8D:FD:6F:B1:E5:CE:E2:29:12:EA:B4:17
X509v3 Authority Key Identifier:
keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:8d:1b:d0:23:e6:1f:79:a5:63:84:ff:31:46:45:68:a8:48:
3a:38:61:4e:c8:af:16:82:39:28:6d:1f:e8:14:03:e4:8f:02:
16:2d:29:9e:0a:9b:d4:60:d3:6f:18:d8:06:00:e0:62:22:32:
79:50:d3:8a:b5:9e:c0:90:70:fa:c2:dd:3d:96:bb:a1:b0:37:
de:19:a9:61:b3:8c:b7:6f:1f:bb:fa:25:8f:c1:2a:3f:b6:d5:
3b:ee:38:ed:08:80:7c:a3:71:e6:f0:37:6f:dc:0d:d0:63:d5:
92:dc:87:ea:ef:d1:18:0d:00:b6:b2:b1:a1:47:46:d8:54:81:
45:4b:6f:ec:96:b1:5f:81:99:8d:81:60:48:00:42:43:9c:0a:
a2:8f:b3:4d:df:ab:56:88:13:99:24:f1:a0:5b:dd:32:0d:58:
f8:da:d8:7f:ec:57:5e:db:9b:68:4c:d2:69:74:bf:0e:1a:5f:
f2:fd:b6:73:b0:24:4c:90:28:17:48:7a:20:8f:b2:30:9c:e9:
56:ff:80:6c:55:c4:6a:f4:59:0e:9c:a7:3a:55:10:de:ef:83:
ea:aa:6f:d1:ac:8d:bb:7d:bc:18:b8:4c:cc:c1:c4:5c:ee:d1:
c1:aa:6d:9b:71:1e:9c:20:9f:f5:d1:ef:38:b0:13:bd:49:41:
2f:44:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:16 2026 by rpki-client