
$ rpki-client -vvf rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
File: 2KPIZydtR_ptDvLogh8Ps9MZcb8.mft (raw, json)
Hash identifier: vrBzcRbb7YJOVQcvRnZQipdT6eCWoiRW4OoIazq5jHI=
Subject key identifier: 03:5A:06:07:AE:DB:62:E9:B4:33:17:F9:49:40:7F:0B:C6:0D:5F:CC
Authority key identifier: D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF
Certificate issuer: /CN=A91278E5/serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
Manifest number: 0C
Signing time: Sun 05 Apr 2026 08:25:56 +0000
Manifest this update: Sun 05 Apr 2026 08:25:56 +0000
Manifest next update: Sun 12 Apr 2026 08:25:56 +0000
Files and hashes: 1: 2KPIZydtR_ptDvLogh8Ps9MZcb8.crl (hash: L1izKcM9kpciGq+zNWLlaiBJW0W+Ewbmanb6Rp3ScmQ=)
2: 1C7AB64E21BE11F191732FC01B3D8C67.roa (hash: VkCR5thgem73gdzuOjRPxScIE5IryV7vWPHF+kNveak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl
rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91278E5, serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF
Validity
Not Before: Apr 5 08:25:56 2026 GMT
Not After : Apr 12 08:25:56 2026 GMT
Subject: CN=69d21c94-248b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:ed:47:2b:eb:e7:37:6f:b0:e6:d6:23:88:
f7:c7:ab:3e:0f:e0:a0:9c:d4:b2:38:c6:d3:a6:82:
1b:71:cb:2d:36:98:a7:e4:42:94:88:62:9b:af:99:
98:90:b1:ff:f3:91:62:50:d7:6e:f1:d0:ff:c6:ef:
96:44:88:d2:e7:64:06:9d:08:43:aa:07:b7:b8:64:
c6:47:54:50:99:09:76:3f:ef:52:a5:06:44:79:e8:
e3:ab:85:32:a9:ba:e9:e3:6e:c6:a6:85:9f:c7:86:
d5:6d:be:a5:07:18:53:23:c0:4f:0c:4a:ec:44:92:
0b:8f:1d:c8:dd:b0:2b:01:d5:dd:c5:bc:99:78:ac:
fe:da:10:e2:04:57:69:5b:b7:bc:46:9f:d3:24:07:
f4:20:90:e4:60:3f:59:74:3d:65:29:91:76:77:07:
39:ce:fa:d0:74:5b:b1:d0:f5:dc:7a:7e:8f:76:53:
cf:8e:48:03:27:ba:60:34:cb:15:ed:a0:dc:d5:38:
d4:6b:7e:ce:0a:4f:1e:03:fa:82:71:e1:bb:1c:27:
03:da:42:c2:af:60:4f:f3:68:8b:b1:26:0b:93:59:
6c:c2:c7:72:e8:94:6b:cf:e7:b3:e1:1b:cd:a0:2a:
5b:5c:44:5e:1f:ee:cf:da:75:c6:f5:b5:4f:ae:2a:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5A:06:07:AE:DB:62:E9:B4:33:17:F9:49:40:7F:0B:C6:0D:5F:CC
X509v3 Authority Key Identifier:
keyid:D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:a1:90:5f:c1:71:dd:5d:d5:c4:2a:c6:2f:c1:fa:02:c9:0b:
06:74:62:93:d2:3d:de:da:73:01:1a:ec:71:a3:8d:67:9e:8d:
f6:fd:7d:34:46:99:b4:7d:e9:3d:ec:33:bb:83:6d:70:65:46:
ce:7b:2f:fb:33:f8:69:9a:86:11:1b:bb:f2:71:79:18:0d:96:
b0:23:9d:f4:e9:36:5f:ef:a0:43:d9:46:52:82:93:1d:2a:42:
f9:05:90:eb:54:36:ee:f0:d2:40:9d:d3:04:44:44:9b:ed:30:
e6:9f:3e:b2:76:d0:cd:2c:cc:ce:06:88:5f:b1:c3:4f:51:8d:
d8:66:5e:1e:0d:c8:8a:38:79:73:44:fe:90:2e:f9:37:55:d2:
30:40:e2:14:15:7e:f9:99:63:5a:0e:71:03:11:1e:9f:fc:b9:
a6:f0:33:78:a8:73:9a:13:17:b7:2e:e1:f2:ca:c6:5e:34:19:
17:2f:be:d8:9d:4e:75:8a:62:a7:c7:0d:e6:c8:ca:72:b7:79:
47:12:7e:64:d2:70:ce:4e:a4:66:be:8d:58:94:3a:fc:77:39:
9d:5b:2c:36:8d:7a:6a:35:87:5f:ff:ed:41:8e:7b:ad:db:f2:
a6:4b:01:7c:1d:8a:ad:a2:86:1c:24:06:e4:f7:c3:5a:22:62:
fc:a4:62:96
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NzhFNTExMC8GA1UEBRMoRDhBM0M4NjcyNzZENDdGQTZEMEVGMkU4ODIxRjBGQjNE
MzE5NzFCRjAeFw0yNjA0MDUwODI1NTZaFw0yNjA0MTIwODI1NTZaMBgxFjAUBgNV
BAMTDTY5ZDIxYzk0LTI0OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUhe1HK+vnN2+w5tYjiPfHqz4P4KCc1LI4xtOmghtxyy02mKfkQpSIYpuvmZiQ
sf/zkWJQ127x0P/G75ZEiNLnZAadCEOqB7e4ZMZHVFCZCXY/71KlBkR56OOrhTKp
uunjbsamhZ/HhtVtvqUHGFMjwE8MSuxEkguPHcjdsCsB1d3FvJl4rP7aEOIEV2lb
t7xGn9MkB/QgkORgP1l0PWUpkXZ3BznO+tB0W7HQ9dx6fo92U8+OSAMnumA0yxXt
oNzVONRrfs4KTx4D+oJx4bscJwPaQsKvYE/zaIuxJguTWWzCx3LolGvP57PhG82g
KltcRF4f7s/adcb1tU+uKiRFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUA1oGB67b
Yum0Mxf5SUB/C8YNX8wwHwYDVR0jBBgwFoAU2KPIZydtR/ptDvLogh8Ps9MZcb8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3OEU1L0NCMkY4RUE0MjFC
RDExRjE4MTMxNjRCRTFCM0Q4QzY3LzJLUElaeWR0Ul9wdER2TG9naDhQczlNWmNi
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMktQSVp5ZHRSX3B0RHZMb2doOFBzOU1aY2I4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3
OEU1L0NCMkY4RUE0MjFCRDExRjE4MTMxNjRCRTFCM0Q4QzY3LzJLUElaeWR0Ul9w
dER2TG9naDhQczlNWmNiOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBWoZBfwXHdXdXEKsYvwfoCyQsGdGKT0j3e2nMBGuxxo41nno32/X00Rpm0fek9
7DO7g21wZUbOey/7M/hpmoYRG7vycXkYDZawI5306TZf76BD2UZSgpMdKkL5BZDr
VDbu8NJAndMERESb7TDmnz6ydtDNLMzOBohfscNPUY3YZl4eDciKOHlzRP6QLvk3
VdIwQOIUFX75mWNaDnEDER6f/Lmm8DN4qHOaExe3LuHyysZeNBkXL77YnU51imKn
xw3myMpyt3lHEn5k0nDOTqRmvo1YlDr8dzmdWyw2jXpqNYdf/+1Bjnut2/KmSwF8
HYqtooYcJAbk98NaImL8pGKW
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:38 2026 by rpki-client