
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
File: 2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json)
Hash identifier: 6kUi9u5Ic9RudaSKrPemmlb3g8kODf3gShreUdSTD40=
Subject key identifier: A1:1B:6B:AF:C4:89:60:3C:C1:48:B5:4A:96:03:1E:AB:21:A2:4A:67
Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
Certificate issuer: /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Certificate serial: 0472
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
Manifest number: 046A
Signing time: Wed 13 May 2026 00:14:34 +0000
Manifest this update: Wed 13 May 2026 00:14:33 +0000
Manifest next update: Wed 20 May 2026 00:14:33 +0000
Files and hashes: 1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: 1oGtS2SjuH9LF7vUzpAFnS2oWJ9lD2HRbLOg1lUmkzs=)
2: 97D35382924311EC927C972FC4F9AE02.roa (hash: aAWOfNb/dnXkGDMyjT0RYtdEn0OfU/UmCUamSuOloZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1138 (0x472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Validity
Not Before: May 13 00:14:33 2026 GMT
Not After : May 20 00:14:33 2026 GMT
Subject: CN=6a03c26a-adec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:b2:d1:52:6b:81:e4:e8:8a:39:a7:8b:53:
90:92:2f:ae:12:8b:db:fe:f4:3e:4b:7a:f1:32:ef:
09:6f:33:59:ed:8d:6d:bd:c2:90:bf:7c:fe:70:0b:
06:95:28:bc:fb:8e:fb:06:70:dd:27:e9:60:c7:eb:
03:ab:fe:ad:27:d8:24:73:69:78:36:2c:50:6f:81:
2d:49:b7:ac:c3:4e:12:9f:4e:ea:1a:87:03:b7:9e:
69:9e:bc:af:78:79:14:72:cf:38:80:a3:50:d9:91:
18:76:ca:ab:e3:51:8c:2c:37:fa:2d:60:81:66:88:
35:b5:57:60:94:50:b9:59:5d:dd:1f:33:b8:02:68:
09:50:ee:b0:14:59:74:8c:87:49:0f:47:be:60:ed:
51:40:09:82:27:1b:2f:bc:f0:a7:57:76:fe:82:81:
18:eb:62:c5:03:4c:8d:ac:e6:f1:67:9f:42:18:f7:
cf:51:de:00:3c:4e:97:95:e4:53:38:3c:ed:ce:06:
4a:53:5b:9f:fc:51:68:11:82:eb:32:c5:a0:2a:a2:
af:d8:65:36:a3:f3:a0:35:3e:33:8c:2e:97:1f:26:
a9:ff:19:55:e2:15:f3:c9:d0:44:53:56:7a:4b:e1:
6a:cd:2d:f5:21:b0:94:52:55:a3:5e:2b:3a:46:e4:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:6B:AF:C4:89:60:3C:C1:48:B5:4A:96:03:1E:AB:21:A2:4A:67
X509v3 Authority Key Identifier:
keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a0:d8:24:4f:3f:72:54:d3:ab:3a:6b:93:b2:7c:e5:11:84:
eb:aa:47:d1:0c:a5:19:b8:d8:69:9c:31:cd:00:e5:35:54:ae:
60:74:19:e1:a7:d8:34:63:dd:3b:80:77:d7:33:0c:68:ec:ce:
9b:2e:47:0a:c7:82:e5:6b:5c:76:f4:08:26:88:34:29:8f:fe:
28:20:98:4a:b7:15:0a:ae:91:ee:9c:10:53:20:e8:7b:65:5d:
9b:fc:b2:16:a6:4f:af:c9:ea:5b:31:8e:92:99:09:77:30:36:
a8:61:fb:24:03:77:17:5b:1c:7f:c6:59:7e:bc:5d:f2:73:7f:
c1:19:2b:9d:7b:36:44:6b:3b:41:4c:8f:41:cc:af:db:5f:95:
b0:17:19:8b:11:7b:10:1b:cf:55:63:d7:92:f4:06:90:7a:7f:
92:22:a2:d6:dd:d8:34:75:14:61:45:3e:11:89:60:d2:dc:37:
ba:db:fd:68:22:72:56:17:2e:78:09:d1:37:f1:27:c9:5b:05:
87:22:dd:10:b1:0b:fa:e7:5d:0c:8c:93:0d:46:c8:4e:39:8f:
e6:38:2c:4f:87:c8:31:7f:a2:f1:e5:ad:32:78:f6:93:55:fa:
09:b7:22:f3:1f:67:8e:52:c6:66:94:74:41:91:89:39:de:85:
b6:64:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:38 2026 by rpki-client