
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json)
Hash identifier: 0vwMHtrbABO84v3LQn/x1sW57BqbQpgtir1Cn4wTsKQ=
Subject key identifier: 67:05:B1:9A:8C:D5:BE:ED:64:13:AC:4E:46:39:7F:29:B7:9E:D7:04
Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2
Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
Manifest number: 022B
Signing time: Wed 25 Mar 2026 02:04:16 +0000
Manifest this update: Wed 25 Mar 2026 02:04:15 +0000
Manifest next update: Wed 01 Apr 2026 02:04:15 +0000
Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: SHvv7+oLYhA3kM1S2OdWuPCudF6E2y9BdxkOowHImsc=)
2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: ayWEsS+ZrZ8bPfPsMRSq4bj/hoO5bdoB3syH3D04L4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl
rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2
Validity
Not Before: Mar 25 02:04:15 2026 GMT
Not After : Apr 1 02:04:15 2026 GMT
Subject: CN=69c3429f-8dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:4e:3d:f1:15:96:a3:89:c6:27:b4:c8:1d:
8c:b7:7e:a2:5d:4b:22:20:a8:e6:e6:04:32:d3:2b:
0d:b8:40:85:24:d5:b8:61:1f:e5:1b:0d:e7:80:5d:
9e:09:2d:c0:91:ac:5b:39:7d:b7:27:b0:0c:0d:9a:
54:d4:cb:7f:f7:21:7b:1f:6d:f8:5a:91:cd:e2:09:
84:27:90:e8:f2:1f:ec:f1:08:8c:f0:2f:59:94:ec:
fd:7a:83:75:f0:6c:74:07:74:9d:35:85:5f:d3:bf:
c4:ab:98:58:71:ae:fc:ab:fc:69:5e:2f:93:2e:57:
25:e0:5f:55:39:45:56:a3:b2:ad:2f:b7:09:ac:f9:
e2:e9:87:d1:1c:f6:11:85:44:d7:66:03:c7:88:0e:
cc:fe:47:55:ec:3a:ef:48:aa:64:6e:f7:32:c7:f4:
57:6f:ec:de:65:26:e4:12:1a:a8:fe:ae:ff:6f:40:
6e:1d:98:ba:a5:dd:31:3f:04:77:17:71:be:44:c9:
3e:d0:a2:ba:54:85:1b:65:04:9c:01:34:2f:e1:b1:
fc:b3:c8:8e:be:e2:44:b4:60:e9:68:73:b6:de:9e:
4f:31:6a:b2:f0:e1:3f:85:aa:cf:53:b2:b1:34:01:
c4:c3:ea:56:84:09:7b:9f:8a:ee:b0:2a:11:ce:31:
4c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:05:B1:9A:8C:D5:BE:ED:64:13:AC:4E:46:39:7F:29:B7:9E:D7:04
X509v3 Authority Key Identifier:
keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:71:7d:ba:86:de:7e:9b:76:d4:89:2c:e2:a0:32:bf:49:ff:
08:2e:ce:fd:75:8c:ba:40:a8:71:17:c7:9f:3e:98:f5:56:f2:
db:57:8f:6b:5f:92:f1:dc:21:0b:03:e4:85:e6:26:e1:4f:42:
c4:e0:68:92:b6:5d:9a:0e:ed:c3:6b:a1:84:d6:46:4e:e8:4f:
64:fc:ee:f1:1c:9e:23:a3:e3:d4:7d:b3:22:56:2c:ee:a3:ee:
78:6a:26:44:30:47:9a:6d:b6:0b:75:ec:0a:16:d5:e9:e2:d1:
11:4d:d2:c6:6b:a4:ad:37:4d:8e:d5:62:a4:a6:0b:5c:f4:44:
09:44:b7:6c:45:a2:7f:bd:cd:96:ac:d9:1e:44:e0:13:b1:c9:
8d:ca:fd:aa:35:16:80:ba:fc:7c:8a:a8:21:76:5b:fa:04:3d:
30:08:06:6f:df:4f:51:b8:8d:21:23:9f:ad:bb:05:e4:9b:0e:
aa:f8:e8:f7:17:b6:5b:d8:bb:c5:7e:90:97:fb:fd:57:5b:d0:
a2:85:66:44:90:e9:0a:53:05:c0:ca:c1:1b:56:4f:ba:98:93:
d4:7a:ae:71:01:2a:16:42:0b:f4:c6:a8:7d:c6:f3:6e:79:46:
1f:b5:30:cf:b9:2e:db:3a:1f:8f:1b:29:0d:00:f7:f0:be:f9:
ca:77:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:49:37 2026 by rpki-client