
$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
File: 2iwTK47FBxr425BJG63bwPCntEU.mft (raw, json)
Hash identifier: qUtNNCq7BswTyQajx31+ek8WZj+1NpQ1C69kZli50zU=
Subject key identifier: 37:A8:3D:F4:CF:88:16:32:8F:3A:6A:F8:A7:71:04:29:AC:80:07:1B
Authority key identifier: DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
Certificate issuer: /CN=A91534B8/serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Certificate serial: 031A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
Manifest number: 031A
Signing time: Sat 07 Mar 2026 00:50:43 +0000
Manifest this update: Sat 07 Mar 2026 00:50:42 +0000
Manifest next update: Sat 14 Mar 2026 00:50:42 +0000
Files and hashes: 1: 2iwTK47FBxr425BJG63bwPCntEU.crl (hash: gXVj+n0nLs05NpmndjWFFZNG8h8yMPyZho5ez723iYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 00:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91534B8, serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Validity
Not Before: Mar 7 00:50:42 2026 GMT
Not After : Mar 14 00:50:42 2026 GMT
Subject: CN=69ab7662-ea41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:e3:b1:12:b3:4e:bf:72:42:96:83:6a:04:
24:78:3c:7f:ae:e8:87:80:f2:d3:ca:a4:b1:23:ef:
17:8a:21:71:e1:bb:8d:03:64:ad:ed:bf:61:6f:b2:
b3:ff:0e:ab:49:48:7b:e5:8a:41:ed:5a:ec:51:37:
a9:c6:94:9a:14:13:9e:d9:8e:11:86:ed:60:8e:1c:
00:0c:28:ce:31:02:f4:32:6d:cb:88:bb:d4:43:4a:
8c:2c:8b:c7:bf:61:df:98:7e:5e:73:5c:de:99:f0:
15:2f:f0:31:61:a1:9f:f1:91:23:83:c6:ae:21:5d:
84:fd:51:02:3d:e3:5f:56:cf:03:39:32:77:b1:ba:
e1:90:55:35:09:81:75:72:d0:d1:2f:6e:1b:16:5c:
11:e3:81:2a:c7:55:6d:3c:ba:13:41:50:ff:9c:c3:
d5:97:2e:e9:02:eb:b3:49:1a:bc:22:0a:c4:ac:14:
c7:f8:27:3a:b0:31:72:a5:31:20:e3:40:3c:4d:90:
2a:3c:6d:03:89:db:f5:4c:10:59:b2:ba:02:3f:bb:
c2:06:3b:78:30:f5:4c:b7:90:5e:30:0f:d5:3e:59:
31:a6:d8:4e:9c:bf:5b:24:1e:66:47:8f:6c:fd:12:
2e:35:67:7e:ba:b7:93:4e:d8:be:4d:40:17:ea:ba:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A8:3D:F4:CF:88:16:32:8F:3A:6A:F8:A7:71:04:29:AC:80:07:1B
X509v3 Authority Key Identifier:
keyid:DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:56:7e:65:98:61:82:a8:d7:68:2f:3f:0c:a9:06:90:57:7c:
d5:49:b1:86:91:15:98:64:31:41:5b:3b:35:fd:fe:cb:f6:50:
cb:14:7e:22:c4:82:2f:50:c9:86:9c:e2:6e:98:ee:24:cc:0b:
27:4f:b2:5b:b6:08:f0:e9:de:31:0f:68:49:74:0b:5c:e6:ec:
a2:8b:9b:5e:a3:d9:93:f6:7b:35:76:cc:42:6e:0a:32:39:fd:
ef:81:6f:96:20:f9:6a:ad:4a:a8:33:74:07:50:2b:60:c5:8e:
ab:90:9b:e1:1d:6d:c8:95:de:b1:f2:3a:83:f8:a4:15:9b:75:
17:0e:c1:ec:a8:28:35:ff:b2:1f:a3:6b:0a:d0:07:06:37:64:
72:7e:d7:6a:c5:06:d6:df:14:84:41:40:9a:11:c0:05:a7:0a:
53:46:ee:d7:a5:87:3f:73:d4:84:8b:af:e4:84:c4:6e:d3:0e:
9c:23:d0:e2:48:e1:1b:e4:ea:96:92:8a:2a:ac:59:27:2d:de:
a3:cc:c3:7a:1e:c5:c4:29:b7:54:68:43:1f:3b:ba:38:49:a9:
6a:92:0d:89:8c:12:88:bd:b7:46:a8:4e:06:77:40:ed:11:84:
f0:a3:9e:89:fd:3c:53:f6:6a:88:02:0c:8c:b7:2a:a0:e5:0a:
bc:55:eb:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM0QjgxMTAvBgNVBAUTKERBMkMxMzJCOEVDNTA3MUFGOERCOTA0OTFCQUREQkMw
RjBBN0I0NDUwHhcNMjYwMzA3MDA1MDQyWhcNMjYwMzE0MDA1MDQyWjAYMRYwFAYD
VQQDEw02OWFiNzY2Mi1lYTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq3HjsRKzTr9yQpaDagQkeDx/ruiHgPLTyqSxI+8XiiFx4buNA2St7b9hb7Kz
/w6rSUh75YpB7VrsUTepxpSaFBOe2Y4Rhu1gjhwADCjOMQL0Mm3LiLvUQ0qMLIvH
v2HfmH5ec1zemfAVL/AxYaGf8ZEjg8auIV2E/VECPeNfVs8DOTJ3sbrhkFU1CYF1
ctDRL24bFlwR44Eqx1VtPLoTQVD/nMPVly7pAuuzSRq8IgrErBTH+Cc6sDFypTEg
40A8TZAqPG0Didv1TBBZsroCP7vCBjt4MPVMt5BeMA/VPlkxpthOnL9bJB5mR49s
/RIuNWd+ureTTti+TUAX6roR7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDeoPfTP
iBYyjzpq+KdxBCmsgAcbMB8GA1UdIwQYMBaAFNosEyuOxQca+NuQSRut28Dwp7RF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC85NjY1OTk3RTA5
NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8yaXdUSzQ3RkJ4cjQyNUJKRzYzYndQQ250
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzJpd1RLNDdGQnhyNDI1QkpHNjNid1BDbnRFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzRCOC85NjY1OTk3RTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8yaXdUSzQ3RkJ4
cjQyNUJKRzYzYndQQ250RVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFFZ+ZZhhgqjXaC8/DKkGkFd81UmxhpEVmGQxQVs7Nf3+y/ZQyxR+IsSCL1DJ
hpzibpjuJMwLJ0+yW7YI8OneMQ9oSXQLXObsooubXqPZk/Z7NXbMQm4KMjn974Fv
liD5aq1KqDN0B1ArYMWOq5Cb4R1tyJXesfI6g/ikFZt1Fw7B7KgoNf+yH6NrCtAH
Bjdkcn7XasUG1t8UhEFAmhHABacKU0bu16WHP3PUhIuv5ITEbtMOnCPQ4kjhG+Tq
lpKKKqxZJy3eo8zDeh7FxCm3VGhDHzu6OEmpapINiYwSiL23RqhOBndA7RGE8KOe
if08U/ZqiAIMjLcqoOUKvFXr5g==
-----END CERTIFICATE-----
Generated at Sat Mar 7 14:37:15 2026 by rpki-client