
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json)
Hash identifier: 52/zA/dfr3zu0u/MvxsEH2RA/u8ORyodt7/lenqaNaw=
Subject key identifier: 59:B6:6C:49:61:D8:53:0A:5D:42:2A:D8:6E:33:B4:01:B4:26:A6:6A
Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
Manifest number: 0170
Signing time: Fri 13 Mar 2026 03:52:01 +0000
Manifest this update: Fri 13 Mar 2026 03:52:01 +0000
Manifest next update: Fri 20 Mar 2026 03:52:01 +0000
Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: fTs3l69IhlnN1bdJaOkGqlv3X4uyikpt0MU9kUdO8AU=)
2: DAF8A746E01B11F097920A16646F56BC.roa (hash: LGOwTBglBUqnmp1uBsE0bwegkvn6MaHVF43SRoKPz84=)
3: E46DBE449E8811F0A343880AC4F9AE02.roa (hash: z7YrKVgCWycEYMHa7lXz+45oMrI/HtHuNAYNjecnk68=)
4: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nFIjLEFtVNOTTMiweqb0gcEFYFfR+U3yovX2UqgW1o4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 03:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Validity
Not Before: Mar 13 03:52:01 2026 GMT
Not After : Mar 20 03:52:01 2026 GMT
Subject: CN=69b389e1-f897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:e7:f1:bb:9d:1f:6b:2e:f0:c2:df:25:9d:
35:3c:69:62:0d:fb:b3:43:ef:58:e2:ce:27:c6:c9:
8e:79:84:f9:7f:c8:5a:9f:78:3a:0a:7d:e3:ae:65:
b5:a9:96:27:e2:f2:91:0c:ea:44:35:d4:24:d8:ae:
e1:24:e7:88:9c:c9:8b:63:e8:cf:6b:ef:f6:67:38:
01:2e:3f:9a:37:4f:57:ea:96:42:ea:2e:11:ac:e8:
7c:38:fc:9e:60:3c:f2:8c:f3:62:e6:5b:81:7d:50:
21:f9:99:09:2b:a9:1a:a2:d8:4b:aa:d9:e8:c2:6e:
16:de:22:78:d5:84:85:a0:d7:26:62:02:06:04:aa:
2b:62:0b:a8:ac:45:8b:c4:5d:b9:18:60:01:4d:e4:
fc:eb:3a:1d:13:1c:0b:27:7c:a9:53:8d:2b:b3:74:
81:5f:c7:fc:5d:fa:db:4a:51:e6:13:62:1e:23:2b:
fc:eb:ce:9b:80:10:23:ff:50:3d:7d:bb:5c:85:a0:
22:84:40:24:c4:0f:ad:4f:61:0c:94:fd:69:1c:f8:
38:b5:39:a5:be:e5:55:c5:75:66:47:61:f2:d9:ca:
95:53:a6:62:8e:91:d6:fa:d1:b9:16:b0:6a:8e:3c:
36:f9:fb:3e:c9:17:a9:74:9e:1b:bf:55:30:a0:3c:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B6:6C:49:61:D8:53:0A:5D:42:2A:D8:6E:33:B4:01:B4:26:A6:6A
X509v3 Authority Key Identifier:
keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:67:2b:76:ae:62:d1:34:83:7d:d4:46:c4:62:f6:e0:bb:3a:
79:14:f1:0d:a0:f2:49:f8:97:3b:66:b7:cc:42:3f:d4:cb:ba:
de:60:d7:23:34:50:87:15:72:16:6f:e7:b1:02:85:98:a0:4a:
4f:23:6b:33:43:73:1d:e6:4c:aa:45:13:4a:0e:bd:b2:25:24:
dd:37:7c:68:f6:93:68:10:60:c4:b5:c2:a6:be:15:c3:a6:71:
99:4d:0e:dd:56:e6:17:dc:3b:cb:50:e4:55:7a:3f:4f:4d:a1:
46:fa:e1:88:4b:eb:e5:e8:65:75:79:0f:db:56:43:ef:d7:8b:
6c:d4:5b:39:24:b3:2c:01:45:be:3a:44:88:c4:72:37:35:74:
b8:94:49:fd:b6:ee:a2:46:9e:8c:fb:75:46:3e:8b:e9:5d:8d:
07:84:e7:7e:10:7c:a4:7d:8a:4a:50:2a:1d:5c:18:b9:43:6c:
7c:13:f3:91:8a:ae:72:d8:91:aa:bf:1c:16:c7:41:68:e0:ea:
cf:22:9d:7e:38:ff:97:37:5b:d2:d2:69:42:db:4d:7e:85:2d:
9c:c1:db:e5:ad:72:b9:2a:23:44:a4:f5:77:b7:3a:5e:e8:58:
45:74:c2:79:50:ca:9b:6f:65:d6:73:4e:c4:5a:83:e2:b3:03:
1f:a1:12:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 00:04:51 2026 by rpki-client