
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json)
Hash identifier: 40ugJmEUD7+fOFk/mZhwgfRNZr4NhfW0q0SNWCkfMC8=
Subject key identifier: 33:63:0B:5B:EF:43:16:BD:86:F2:2C:80:2C:37:2B:6A:F4:DB:9C:52
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
Manifest number: 9B
Signing time: Sat 07 Mar 2026 06:37:44 +0000
Manifest this update: Sat 07 Mar 2026 06:37:43 +0000
Manifest next update: Sat 14 Mar 2026 06:37:43 +0000
Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: LKjv9mKi+LZL8Qsl/0IhnKJV+wE9Eqoh32PXw7r9kTM=)
2: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=)
3: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 06:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Validity
Not Before: Mar 7 06:37:43 2026 GMT
Not After : Mar 14 06:37:43 2026 GMT
Subject: CN=69abc7b8-b450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:0f:32:7b:72:c8:b2:c3:9b:e0:ad:ec:7a:
af:06:e4:15:bb:da:09:c0:77:34:d9:7b:f6:51:b1:
e7:d9:2d:a0:43:cf:c4:7f:1c:76:01:38:78:6a:f5:
8b:fc:6c:fa:48:dc:72:5e:d5:f5:c3:05:05:ae:6d:
ee:62:ca:c4:a8:d6:99:b7:57:c5:b7:5c:df:68:41:
de:03:40:93:db:f4:a9:88:19:77:00:3b:e1:65:34:
38:f2:91:e3:39:ec:a8:e4:e1:b6:d1:f6:6a:f6:85:
4f:ae:bf:58:5b:4f:df:ae:2f:28:07:14:86:f1:56:
e6:ce:af:05:a8:fa:7e:93:b7:c9:85:70:3c:9f:c1:
27:51:dd:61:31:0d:e1:21:90:ff:73:de:48:5c:1a:
46:98:38:62:29:c8:03:ca:e8:d3:15:ab:80:d0:d2:
02:6b:80:b8:20:65:9d:0c:18:c2:65:3c:bd:8c:46:
a4:f8:26:8d:79:41:0e:b5:90:66:f6:82:24:8b:b7:
37:9f:21:7f:82:f7:7d:73:7b:63:ad:1e:5e:28:25:
ec:f6:c0:79:67:10:51:f1:22:65:e8:95:80:2e:bc:
a4:b7:f6:2a:9f:54:a9:3d:e0:2b:16:ce:eb:95:d9:
46:8a:a4:59:75:b8:61:77:b5:9e:98:a7:47:a3:38:
eb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:0B:5B:EF:43:16:BD:86:F2:2C:80:2C:37:2B:6A:F4:DB:9C:52
X509v3 Authority Key Identifier:
keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:0e:5a:a7:1f:8b:58:25:d1:15:3f:d7:26:bf:bc:c9:f5:0f:
91:cd:04:f1:a5:de:51:9b:68:32:e4:8c:0a:a0:9e:b3:28:34:
25:4b:6c:a2:7c:85:75:26:e9:7f:a0:d4:ab:75:bd:d7:19:fa:
fc:49:b7:b6:da:2d:2c:72:56:9f:4b:30:ee:dc:e8:c1:be:43:
e4:f5:f7:7e:5a:66:b7:19:a9:a7:26:da:49:28:95:bc:5e:b2:
73:9b:46:3a:26:35:4a:a7:c1:89:2c:8e:3a:f2:3d:a2:54:06:
9f:b1:fa:40:96:00:14:82:30:76:a4:4d:91:5c:71:bd:98:57:
ca:fa:7c:24:6e:f1:bd:e6:ef:28:bc:33:9c:e9:da:17:83:fb:
e4:61:6e:55:e2:0e:ba:77:92:ba:d9:22:06:84:9c:62:5a:05:
f8:7b:1e:78:fb:65:1c:a3:98:a6:50:60:2a:c4:20:e7:93:88:
b6:53:a0:94:55:b7:47:f6:7b:7b:e2:11:b3:b6:a7:f1:83:0f:
cc:e0:5b:68:42:47:83:8b:8d:da:41:b9:2c:79:85:f5:79:9d:
9e:0b:8f:c9:8b:32:41:ab:2c:30:73:6c:5f:9b:a2:8b:03:66:
53:60:cf:81:1f:50:1d:14:0d:51:6d:f9:69:a5:e9:8b:ea:de:
04:70:23:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:30:02 2026 by rpki-client