
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
File: 2wYwePe5d1L7gdAPqb18UjsclwM.mft (raw, json)
Hash identifier: LKoij45/s3njLdVYZ3SOGjwMhzH6GldSk/8VTmwIODQ=
Subject key identifier: BE:D7:AC:6F:7F:34:83:96:0D:3D:A1:89:E7:1F:61:5C:6E:E7:DC:D7
Authority key identifier: DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03
Certificate issuer: /CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
Manifest number: 015A
Signing time: Fri 27 Mar 2026 04:29:17 +0000
Manifest this update: Fri 27 Mar 2026 04:29:17 +0000
Manifest next update: Fri 03 Apr 2026 04:29:17 +0000
Files and hashes: 1: 2wYwePe5d1L7gdAPqb18UjsclwM.crl (hash: W7oYreymm/lSBkSDUqwlrlKBCtRytrOMxOIv6EMIZeM=)
2: CE042A841E5611EFBEDD1F39C4F9AE02.roa (hash: k9o+QZZOY/GVuUjyky+6WbWrZg7L8fx0wCEliNfXDKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl
rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192698, serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703
Validity
Not Before: Mar 27 04:29:17 2026 GMT
Not After : Apr 3 04:29:17 2026 GMT
Subject: CN=69c6079d-73de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:a2:61:40:00:bd:36:56:3b:8a:40:ea:a2:
97:5f:3b:a5:18:40:97:ff:db:dc:96:a7:a1:29:ce:
b0:c7:3b:43:0b:e3:6a:a1:7f:e4:c7:70:77:7e:d1:
48:1e:61:f8:2d:a6:e1:10:f3:50:4d:54:48:b7:c3:
ac:1d:5c:71:e3:ce:4d:0f:5a:6d:e4:f9:69:eb:51:
eb:78:ed:ea:9f:e5:42:f6:5c:71:2f:aa:36:d7:ec:
12:fb:bc:0d:a2:2b:81:04:b2:e0:4d:f3:3f:d1:d7:
e0:90:bd:d8:89:8d:47:25:54:cb:f8:1b:79:e3:3f:
d6:22:cf:8b:dd:ea:66:48:ce:88:f7:fe:da:86:fd:
5f:24:95:46:3b:8f:cb:23:d8:19:79:1a:fe:4c:9e:
d1:39:36:0f:2c:e9:41:b4:c7:c4:75:db:b1:36:f2:
a4:b1:4e:c5:d7:b9:28:91:48:f2:f7:66:12:ae:69:
54:8d:69:89:f1:dc:b9:c3:b5:77:49:f9:68:4a:66:
87:5d:60:72:bc:68:ae:37:db:6e:aa:b2:75:75:62:
0b:9e:79:8b:26:c5:e1:fb:38:58:5a:ff:fc:df:46:
e4:6d:c4:35:85:ef:06:bd:ce:00:85:7b:ef:17:06:
f1:df:48:47:54:c1:97:71:b0:05:e2:e6:89:f6:da:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D7:AC:6F:7F:34:83:96:0D:3D:A1:89:E7:1F:61:5C:6E:E7:DC:D7
X509v3 Authority Key Identifier:
keyid:DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:38:c9:34:66:27:73:30:b0:ee:4a:6f:be:79:4e:8a:ec:e1:
7d:4b:d1:ab:18:86:0e:b9:c9:d3:10:be:b5:dc:0d:d8:17:a2:
5f:5a:f3:bc:f0:46:c9:1d:4b:8e:fa:4e:c8:c8:ad:ee:08:27:
c7:c7:72:82:95:f7:c6:72:c3:f0:a8:78:98:f0:03:44:6b:0c:
3f:f0:2c:68:68:03:d0:4a:21:36:ff:d9:ee:b5:af:86:9b:51:
5f:53:bc:d7:3f:93:78:da:ac:17:dd:f3:bf:bc:b2:ee:16:2b:
a3:c8:9c:97:70:56:a1:1c:49:d8:ef:b4:e0:de:43:f2:e0:3b:
57:ed:74:aa:e3:26:72:8e:80:46:c0:25:cd:f1:cb:c0:fa:b9:
b6:4f:08:fd:e4:9d:d0:20:d1:e5:c0:2a:32:6e:e1:2e:4f:1c:
06:81:7c:d1:68:a4:89:f5:42:5b:22:85:c5:fa:2e:29:9c:72:
d9:cb:75:09:8b:da:62:1b:a5:07:52:77:ae:06:82:0a:69:a3:
d8:38:03:c0:ca:f7:88:4d:54:98:fe:56:a7:b0:ee:e8:9a:2d:
59:bb:a2:3f:49:24:eb:c4:a1:f3:18:b5:8f:cc:59:4a:1b:6f:
27:50:c8:95:cc:89:73:91:c6:53:ab:6a:72:73:c2:47:0f:59:
90:1a:e3:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI2OTgxMTAvBgNVBAUTKERCMDYzMDc4RjdCOTc3NTJGQjgxRDAwRkE5QkQ3QzUy
M0IxQzk3MDMwHhcNMjYwMzI3MDQyOTE3WhcNMjYwNDAzMDQyOTE3WjAYMRYwFAYD
VQQDEw02OWM2MDc5ZC03M2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2gWiYUAAvTZWO4pA6qKXXzulGECX/9vclqehKc6wxztDC+NqoX/kx3B3ftFI
HmH4LabhEPNQTVRIt8OsHVxx485ND1pt5Plp61HreO3qn+VC9lxxL6o21+wS+7wN
oiuBBLLgTfM/0dfgkL3YiY1HJVTL+Bt54z/WIs+L3epmSM6I9/7ahv1fJJVGO4/L
I9gZeRr+TJ7ROTYPLOlBtMfEdduxNvKksU7F17kokUjy92YSrmlUjWmJ8dy5w7V3
SfloSmaHXWByvGiuN9tuqrJ1dWILnnmLJsXh+zhYWv/830bkbcQ1he8Gvc4AhXvv
Fwbx30hHVMGXcbAF4uaJ9tqxmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL7XrG9/
NIOWDT2hiecfYVxu59zXMB8GA1UdIwQYMBaAFNsGMHj3uXdS+4HQD6m9fFI7HJcD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjY5OC9EM0MwRUNFMjFF
NTUxMUVGQUM5NTlGMTlDNEY5QUUwMi8yd1l3ZVBlNWQxTDdnZEFQcWIxOFVqc2Ns
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ3WXdlUGU1ZDFMN2dkQVBxYjE4VWpzY2x3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjY5OC9EM0MwRUNFMjFFNTUxMUVGQUM5NTlGMTlDNEY5QUUwMi8yd1l3ZVBlNWQx
TDdnZEFQcWIxOFVqc2Nsd00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAojjJNGYnczCw7kpvvnlOiuzhfUvRqxiGDrnJ0xC+tdwN2BeiX1rzvPBGyR1L
jvpOyMit7ggnx8dygpX3xnLD8Kh4mPADRGsMP/AsaGgD0EohNv/Z7rWvhptRX1O8
1z+TeNqsF93zv7yy7hYro8icl3BWoRxJ2O+04N5D8uA7V+10quMmco6ARsAlzfHL
wPq5tk8I/eSd0CDR5cAqMm7hLk8cBoF80WikifVCWyKFxfouKZxy2ct1CYvaYhul
B1J3rgaCCmmj2DgDwMr3iE1UmP5Wp7Du6JotWbuiP0kk68Sh8xi1j8xZShtvJ1DI
lcyJc5HGU6tqcnPCRw9ZkBrjPA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:17 2026 by rpki-client