
$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json)
Hash identifier: FY9z3PvScy2cZCMj4QlstKvbxshTEEbbgmTjjPjPUNw=
Subject key identifier: A7:97:23:70:51:48:EB:FF:64:E1:E5:A3:B1:05:70:6B:AF:47:E0:65
Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92
Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
Manifest number: 0167
Signing time: Thu 21 May 2026 04:58:45 +0000
Manifest this update: Thu 21 May 2026 04:58:44 +0000
Manifest next update: Thu 28 May 2026 04:58:44 +0000
Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: gVjzkULvgcxu6nZEyu7WD1TaD4Ra9rN5zhBOfKo2Q9o=)
2: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: oEK7UbEneVnN8s/S/N5Woyft7ItBdFqqTJalpL6CP44=)
3: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: VxdztqIyeKdq6Y1gZHMxA5mA6eKYSPyJZb/jS0HIv30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl
rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192
Validity
Not Before: May 21 04:58:44 2026 GMT
Not After : May 28 04:58:44 2026 GMT
Subject: CN=6a0e9105-ecc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:81:a2:dd:ba:52:54:49:7a:b7:28:d3:dc:
09:71:d3:48:08:6c:52:67:de:18:41:f6:37:1d:cf:
79:4a:3c:aa:38:d9:56:6f:08:8c:cf:bf:68:52:a7:
a1:92:06:c8:ec:d1:ac:46:ae:09:7a:c2:4f:2b:7d:
55:f3:b7:d7:ad:d0:15:69:50:44:89:03:17:66:f5:
e8:1d:99:d2:1b:4b:f6:af:cd:95:29:02:af:a0:05:
5f:0b:0c:4f:5a:04:ce:bd:09:8f:5a:59:bd:af:70:
66:ff:f4:7b:35:8f:04:a0:2c:ba:7b:b1:79:f0:0c:
2c:98:eb:4b:c3:7f:d1:9d:13:cb:fd:21:4b:1d:2f:
64:8c:b7:ed:05:cb:74:c9:08:75:3e:95:5a:34:7a:
3e:58:4b:2f:de:d9:f7:9e:69:ea:85:36:50:7e:ad:
7e:80:62:8c:c5:49:19:8c:02:8b:8e:b8:7b:9c:4f:
61:7f:3a:38:08:df:ab:c0:17:fc:4a:2d:fc:53:5d:
82:84:d4:5b:e3:62:eb:7c:96:29:44:83:8c:1c:19:
db:99:d3:61:33:9d:a1:c1:0a:fa:8f:b0:57:b5:8e:
f5:04:95:89:03:33:7a:cd:e3:c6:2e:8c:3c:61:94:
43:ed:77:27:44:b0:b5:8c:ee:eb:87:4d:ed:af:25:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:97:23:70:51:48:EB:FF:64:E1:E5:A3:B1:05:70:6B:AF:47:E0:65
X509v3 Authority Key Identifier:
keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:04:79:c6:56:e3:3e:3f:ec:73:e2:f3:09:7d:d8:3b:82:ad:
86:ca:5f:d5:03:7a:07:50:f1:ea:92:61:97:c2:85:e4:49:1a:
87:14:83:bb:0d:a3:d3:19:fb:68:10:c8:a3:cb:65:25:4e:0e:
8f:2f:5b:4f:2d:a9:ee:c5:5c:a1:16:80:c5:6a:55:7d:51:9c:
bd:24:03:e2:90:8e:9d:78:62:3e:d3:be:ac:7d:b1:ed:21:a5:
d6:04:3b:f4:ca:09:27:b1:a8:d4:27:92:4b:e8:1c:aa:99:cc:
eb:a2:9b:01:eb:81:de:95:33:23:9b:22:48:e4:d7:a9:1a:69:
9c:f8:36:18:59:d8:bd:3a:30:2b:e3:de:a8:63:bc:48:58:6b:
64:c4:b5:4a:83:f7:a0:ac:37:3b:be:8f:e9:cf:64:76:83:04:
91:3e:f8:75:b6:e6:66:6b:a8:35:47:3a:e7:40:a6:31:b7:47:
03:32:e4:3f:b2:d8:31:97:6c:1d:ea:74:c8:f8:6b:2e:a1:ce:
12:2b:ef:dc:2c:17:3d:40:77:87:1b:6d:07:24:11:e5:5b:6f:
1b:74:08:4c:f6:f9:e2:6f:d2:f6:30:c8:16:4c:0a:af:e5:c2:
7f:37:fe:80:9c:30:38:78:49:9d:2c:99:7e:b4:14:00:11:ea:
0c:a6:8d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:46 2026 by rpki-client