
$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
File: R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft (raw, json)
Hash identifier: DpOCBZUWaTS52LsgARQUHYYaXICwWlnXBFE5aLWCGm8=
Subject key identifier: 0B:18:6D:DC:C3:8C:E1:8D:A0:B4:11:E1:90:87:E7:45:C0:5C:8A:AA
Authority key identifier: 47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35
Certificate issuer: /CN=A91918AB/serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
Manifest number: 24
Signing time: Tue 03 Mar 2026 08:30:08 +0000
Manifest this update: Tue 03 Mar 2026 08:30:07 +0000
Manifest next update: Tue 10 Mar 2026 08:30:07 +0000
Files and hashes: 1: R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl (hash: kkEKHhntD4DZVeNuaQ0ABOv84yrBZjWivbeWpvup42Q=)
2: 1CCFF4EAE94411F0858458963C6F56BC.roa (hash: zSizwmjwC1EUvKxUhWbJHmVerxHzuPrZmy1ydtzt1dI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl
rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91918AB, serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35
Validity
Not Before: Mar 3 08:30:07 2026 GMT
Not After : Mar 10 08:30:07 2026 GMT
Subject: CN=69a69c10-8256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:be:8e:ab:a1:fe:ed:4b:15:9e:17:4d:3b:
8e:72:dc:30:f5:fb:67:55:fc:3d:54:07:d8:fa:fd:
53:05:0d:99:d0:19:1b:c0:9a:3f:ae:d0:53:d0:dd:
82:09:3d:11:aa:50:24:a0:dc:ac:05:26:64:59:1b:
46:f8:7e:89:98:20:ff:a3:8d:cd:6a:c5:e7:c1:98:
6c:3c:e4:d4:3c:51:ec:d0:b2:38:6a:df:ee:01:63:
6c:2c:a8:3c:3a:10:c3:0b:e5:1a:9e:b2:32:1d:33:
5b:44:1e:42:be:bd:ed:5e:54:94:ce:74:a7:45:64:
71:86:d2:12:b0:49:47:ed:44:8f:6f:f3:58:90:a6:
93:cf:22:5c:9b:4f:1a:11:f1:62:d9:ae:8f:35:16:
57:49:94:84:6e:a4:d2:24:fa:ba:73:ba:a4:18:7a:
dc:58:15:d2:4d:46:d2:74:6a:b3:dd:40:e9:33:a9:
78:7f:6f:ce:b3:ee:5e:80:0a:10:a2:db:9c:79:96:
39:0c:2b:5a:98:9e:4d:e5:bd:4b:ce:5d:f6:34:36:
1d:5d:90:17:86:c8:7e:74:ce:26:7a:ad:e4:c2:03:
e8:2a:c0:f1:c0:05:36:d3:ee:27:82:f5:ff:9c:bb:
1d:51:2f:ab:ee:4f:49:82:0c:cf:fd:8b:ff:d2:dc:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:6D:DC:C3:8C:E1:8D:A0:B4:11:E1:90:87:E7:45:C0:5C:8A:AA
X509v3 Authority Key Identifier:
keyid:47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:76:ba:93:b5:bd:9d:cd:58:1d:08:86:4d:ac:fc:c0:d3:6c:
f3:57:9c:f9:51:a0:22:b7:4d:7c:d3:07:12:46:b2:b2:51:68:
a8:d6:83:d2:e2:18:8b:d8:ff:a1:98:d6:df:01:68:61:56:e1:
41:fd:05:be:37:cf:61:d8:d8:f3:0e:b7:7b:f0:f4:b0:96:ae:
c7:2a:a3:60:d6:9d:9a:5a:1c:73:9d:13:d6:8a:bf:3e:f7:49:
6b:db:39:2c:da:8b:2b:e1:ab:d0:00:0a:bf:02:e2:ce:05:d8:
73:e2:53:3c:2b:ba:6a:74:33:a5:93:47:d0:41:c8:d3:75:1e:
e9:2b:fe:8b:e2:66:57:d9:7e:89:38:fc:c8:fc:cc:c1:b2:d6:
b0:26:eb:fe:c6:31:37:7e:e3:32:a3:be:bc:a8:e3:a2:9d:4b:
b9:0a:62:c3:20:aa:fb:fe:c6:18:82:22:ec:45:70:eb:5b:e4:
74:bb:2a:16:8e:4d:1b:ae:57:f8:18:49:c3:01:29:04:17:fb:
df:3e:f4:53:7a:3c:04:56:3f:fd:4e:86:e3:c1:a2:24:e3:c0:
ff:34:0c:d7:a5:d4:3a:79:c7:8d:1e:d7:4f:d2:cc:af:70:fa:
1e:3e:dd:4d:8c:aa:b8:50:87:65:65:5e:cc:8c:84:6d:13:ab:
78:f3:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:10:24 2026 by rpki-client