
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json)
Hash identifier: vz49mVzVXbTKSj3/5bKfZYt0oDkWpWavUFO4lLXLT7w=
Subject key identifier: AC:62:B9:0B:50:95:FC:F1:2E:47:BF:51:93:F4:88:92:40:F3:6C:4F
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial: 0515
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
Manifest number: 04FE
Signing time: Thu 26 Mar 2026 23:28:56 +0000
Manifest this update: Thu 26 Mar 2026 23:28:55 +0000
Manifest next update: Thu 02 Apr 2026 23:28:55 +0000
Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: OjflxezR1qKhZ+3YwbP7nkGK7r7IQSWii5YbPxY7qGg=)
2: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: gyHSwtQl6vEkaJUZPDO/MMRfEGWi04eS/Wu0admRoDM=)
3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: Brlpv06ZI3cq/B6rjsLV19lKDGbhXfmVzTklV/FrQyE=)
4: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: /qXHBT4MA1qmjnYwgB6pugXd54FZZQ+3x08eX/UUmSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1301 (0x515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Validity
Not Before: Mar 26 23:28:55 2026 GMT
Not After : Apr 2 23:28:55 2026 GMT
Subject: CN=69c5c138-2034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:a1:a6:92:5b:a3:e4:96:05:1f:5f:a9:f8:
fe:03:80:41:a0:9e:8c:17:bd:b9:b9:e4:82:e7:68:
bf:7e:74:54:98:7a:6f:bc:6a:4e:73:99:5b:0b:eb:
a2:98:ad:7a:4c:4b:c2:01:1d:79:a8:24:01:8d:15:
35:19:af:a4:40:43:6a:99:1e:1f:72:51:a2:66:96:
55:06:de:dd:8d:2d:3e:9a:59:bf:9a:55:af:ad:37:
ea:40:dd:be:ea:8b:3c:bc:83:e8:d1:0d:0e:41:4b:
66:cb:75:c5:e7:6e:2a:d3:f4:86:33:1e:0e:d2:3c:
c8:7e:38:57:07:78:67:e8:0e:60:26:fe:04:49:5f:
29:5e:29:71:d5:7c:1f:c7:33:bf:be:9b:30:fe:f6:
27:ed:c0:5a:1b:8e:4c:74:5d:ad:2f:6e:ed:36:38:
09:17:77:08:73:e6:48:fa:bf:0c:21:3b:50:be:8d:
a0:c7:33:d2:06:dd:47:99:87:3b:5b:60:2f:af:2b:
05:19:5e:bb:ff:90:8b:e9:02:a9:ff:5c:07:da:ae:
41:f5:c7:09:da:1a:4f:9f:6e:83:9a:7c:48:36:79:
49:bb:34:76:40:3e:c6:60:59:eb:ed:6f:c0:15:2d:
ee:ab:fc:a6:2a:31:87:4c:71:76:22:26:87:7e:73:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:B9:0B:50:95:FC:F1:2E:47:BF:51:93:F4:88:92:40:F3:6C:4F
X509v3 Authority Key Identifier:
keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:77:bc:34:31:5c:f6:11:05:98:9c:2d:eb:af:fb:43:eb:e0:
4e:55:be:0f:dc:5e:c8:ef:4f:77:66:81:c1:37:ea:b8:d1:17:
fe:25:38:e5:84:23:37:bb:3c:a1:03:b5:1c:e7:b7:38:7a:e5:
2e:27:37:3e:b6:96:4a:1e:ee:33:25:05:ae:56:5e:87:02:58:
9d:d7:fd:e6:20:a6:05:c2:20:64:00:c5:ae:e6:b4:8a:6d:34:
e9:5f:92:7b:f4:e0:2d:7d:1d:2d:90:42:30:6b:25:8c:17:04:
a7:4b:49:bf:f2:96:33:29:9f:72:fc:a6:f7:a4:1f:61:a2:d7:
62:0c:ff:4e:1a:86:97:2c:d1:8c:7b:a5:1d:de:62:39:3f:36:
3b:c9:c1:fc:8d:a6:3e:e3:cc:df:d6:d9:56:d8:24:4d:2e:89:
07:f5:0f:57:79:82:b8:96:10:c4:28:1c:fd:b3:04:0c:8a:60:
7a:35:6f:c0:2c:2b:ab:70:db:fd:02:d4:7e:0d:fa:04:93:d2:
09:de:22:30:0f:8f:0b:37:29:9d:ef:09:50:c2:a7:39:82:35:
55:64:12:99:1d:53:dd:a0:69:79:d4:3a:52:b9:e0:48:76:74:
bf:03:8c:b7:2a:a0:e3:1b:08:0b:b3:c3:26:d4:4a:ae:9b:70:
32:bf:0f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:23:43 2026 by rpki-client