
$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
File: 2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json)
Hash identifier: X1QOK+KkD9esLgJZHr2wwjnjukLpxcVJFTtIbrHJ1Q4=
Subject key identifier: 44:3D:B6:AB:59:79:1E:43:07:4A:3E:DE:6B:E8:53:6F:FF:9B:39:82
Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Certificate issuer: /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Certificate serial: 02E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
Manifest number: 02E0
Signing time: Sun 05 Apr 2026 01:05:30 +0000
Manifest this update: Sun 05 Apr 2026 01:05:29 +0000
Manifest next update: Sun 12 Apr 2026 01:05:29 +0000
Files and hashes: 1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: 58e3u7sJDNqG+NmziSmGcxtq8baQLTGHA7ax3X1FhLU=)
2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: QRN3d7Kp62mAA4UY2PHj6uAygWUxtpM/GbpwgYao/0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743 (0x2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Validity
Not Before: Apr 5 01:05:29 2026 GMT
Not After : Apr 12 01:05:29 2026 GMT
Subject: CN=69d1b559-1ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:53:b0:c1:45:83:ac:a6:49:be:fe:11:ff:
38:51:a1:f4:b4:7f:f8:fa:17:e2:1d:3e:fb:9b:60:
13:be:12:e8:da:71:f3:1a:24:58:08:46:b1:0a:96:
a9:5f:15:b5:5c:94:27:82:0d:70:4e:aa:a4:62:e0:
5f:f8:a9:8a:ab:0e:e5:90:f5:fc:f3:5a:87:8a:9c:
1b:e1:6e:f2:53:05:f5:97:54:ba:de:8c:1f:63:74:
12:9e:23:63:45:6d:23:1c:e9:15:02:8e:8c:e0:f1:
e4:0f:39:94:1d:7a:15:94:f3:81:f2:5b:69:e9:4c:
25:3d:c0:e9:d1:0f:4a:82:5b:98:c0:de:35:a7:56:
3b:b4:d5:52:fa:15:20:c3:b9:92:e2:a4:0c:1d:d8:
5c:7d:2d:bb:3c:3c:2c:ab:d0:96:9f:d6:9d:dd:6a:
7a:69:0a:da:a3:f1:a1:06:32:af:29:09:41:e1:76:
2b:e4:7b:8e:e9:13:42:1d:ff:18:a1:8d:bb:d9:2a:
81:63:10:b7:1a:1c:bf:57:9c:dc:a8:ed:7e:93:6c:
3b:b1:e9:d8:a1:21:61:f4:3b:5a:73:ee:24:13:b3:
6c:9a:0b:95:60:38:25:ad:13:cd:03:db:6d:4d:d2:
ec:17:69:45:76:a6:75:40:e8:5e:b7:13:aa:bd:78:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3D:B6:AB:59:79:1E:43:07:4A:3E:DE:6B:E8:53:6F:FF:9B:39:82
X509v3 Authority Key Identifier:
keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:29:62:cb:62:55:90:0b:a6:6f:1c:8c:6d:79:88:ce:85:3e:
44:95:bf:96:5d:c8:f3:a7:ab:c4:2b:bf:92:a7:28:42:ae:89:
91:b0:05:cc:6b:a6:6b:1c:cb:dd:a6:9c:90:d8:88:28:39:84:
66:71:c7:c9:0e:70:1f:24:9b:d1:73:05:82:74:97:8c:52:20:
d1:13:14:e7:0b:22:e8:8e:77:1e:a2:5f:81:ba:5e:53:ba:9d:
fe:d3:b2:10:3e:e4:40:4f:8f:fe:f9:ac:35:97:21:08:9f:99:
df:ac:1b:a7:0d:ea:6f:6d:2a:21:58:f5:f8:8f:fa:ab:4f:ce:
65:05:2a:a7:17:00:00:cd:21:bb:c9:0c:ca:5a:f9:5b:52:45:
57:3c:1f:48:48:9e:b2:d6:4c:9b:e9:c1:c2:06:04:9c:dd:82:
b2:2b:39:e5:b9:3a:90:89:ff:c6:51:58:e9:c6:d5:e2:af:63:
4d:87:b1:19:b7:66:cb:14:10:18:09:80:3f:8a:a1:ac:66:d8:
b4:fe:41:88:17:0c:b2:23:32:86:38:ba:7d:cb:66:f9:3f:0b:
ed:91:c7:bb:06:98:c1:d0:ba:74:06:ee:5c:cb:1c:d3:51:ba:
8e:94:fe:13:5e:de:42:c1:69:3c:b8:3e:e3:f4:70:11:13:8a:
81:41:d0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:22 2026 by rpki-client