
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json)
Hash identifier: 8cOJfagp9GnnH9DT2FNCWKpY1kh9ee3/HNt8G9OI2Y8=
Subject key identifier: E2:3B:50:A8:BA:D4:4E:68:D7:55:BD:10:9E:53:A1:6C:56:E7:CA:6B
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial: 067C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
Manifest number: 0641
Signing time: Sun 08 Mar 2026 22:17:12 +0000
Manifest this update: Sun 08 Mar 2026 22:17:12 +0000
Manifest next update: Sun 15 Mar 2026 22:17:12 +0000
Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: KBUzSiNQqR1yqGuATGqWcVjQrb1PKGyixGVw2M4U4sg=)
2: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: ASbKYUpnDT3fXeFEGq3R/psOLVXIzQFOM2/AijIzmKA=)
3: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: rB30xmuASYWjmKcidZhlL3g3FgthN2+a8/JMg6RBy4A=)
4: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: 36EgBq1n4JNWcqkButdZG4sfZA3L8DsedoJF13m1uY8=)
5: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: 6FEl/xTlrO6k23qkzsJZxZeQTOP267Pxj3B9BnAU7dI=)
6: 6D24010C300311F0995E874EC4F9AE02.roa (hash: v88X53jf1N+0e4ko5ebfMPBilUzf1Ikr3zZ6sHanDNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 22:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1660 (0x67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Validity
Not Before: Mar 8 22:17:12 2026 GMT
Not After : Mar 15 22:17:12 2026 GMT
Subject: CN=69adf568-ca31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:4e:5d:c4:e4:ea:92:5c:29:10:20:5a:7c:
02:5f:47:8b:ed:55:a5:88:dc:fd:f7:23:f4:9c:1e:
cf:cf:0c:06:e3:39:ad:ff:80:b0:cb:8d:89:c4:24:
2f:96:39:a2:38:97:c7:4f:9d:60:9f:f5:95:b2:d9:
70:fa:22:55:70:83:86:9a:f7:50:74:6b:10:d9:bb:
5d:6d:af:e4:f2:db:a4:40:67:01:e5:eb:4b:95:3f:
c2:89:3e:da:27:da:e1:b6:85:4e:e7:62:37:a1:83:
98:c2:41:33:fa:20:b8:a5:90:de:2f:3d:88:b6:d1:
ee:28:92:59:52:2b:95:0c:9f:dc:d1:88:3e:55:21:
52:d0:c3:e8:36:c4:ef:7b:35:5d:f4:29:a9:6c:e8:
cf:9c:d6:54:9b:a9:28:05:5a:81:80:ce:b0:16:58:
c7:be:80:4c:3a:71:3e:69:e3:a9:7d:0c:e0:7b:8d:
7e:a7:e3:51:74:19:e3:ed:76:79:4d:55:77:90:d7:
64:d8:00:43:fd:10:a2:1c:54:c7:22:fd:bc:28:f4:
cc:83:21:9d:32:39:90:46:80:2b:47:39:87:cf:c6:
da:3c:d3:9a:26:ca:78:0c:88:67:0e:a4:a5:5e:8f:
8c:13:9b:c1:3c:7e:c1:fe:08:02:bf:3b:cc:b1:f1:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3B:50:A8:BA:D4:4E:68:D7:55:BD:10:9E:53:A1:6C:56:E7:CA:6B
X509v3 Authority Key Identifier:
keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:1e:35:6e:be:cf:0b:3f:ea:94:a3:a2:21:2b:f8:75:70:43:
35:bc:8e:84:25:b9:2e:b9:c7:37:a9:fb:24:cd:34:42:73:a3:
20:f7:69:61:ef:7c:34:f3:22:59:07:5e:8e:8f:e8:13:b6:b0:
20:a1:5e:02:c6:99:b7:de:4f:bf:fd:c8:1a:5d:90:5f:73:85:
36:8a:98:49:0c:90:ea:4b:4d:29:aa:8d:80:62:9c:05:71:1b:
17:8c:2e:d6:12:3c:05:d6:c3:40:e5:f2:48:7b:64:28:10:5c:
c9:8a:bb:14:e8:8c:14:d4:64:43:f1:20:b3:8a:12:6f:24:cb:
76:a7:cb:07:56:d4:8b:bb:5b:00:f6:ee:83:a4:3a:7b:a8:34:
e2:ef:55:63:8d:ff:29:66:49:ee:ef:3d:06:59:41:8e:ea:c7:
d5:30:b3:c4:3c:1e:ab:c5:3b:58:48:02:36:4a:a7:23:a8:e1:
4e:56:b9:c6:e6:96:68:85:cf:d0:ac:72:83:cc:b1:f2:f4:3d:
b6:1a:72:99:09:28:41:5e:60:cd:d6:2b:1d:1a:93:2a:c1:2d:
1a:6b:92:0e:5e:3e:78:1a:34:a6:b6:25:2a:b8:d7:1f:70:eb:
45:40:c6:58:22:a4:04:f3:a9:2f:93:9c:aa:73:7e:22:fe:92:
a8:a3:03:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 06:10:46 2026 by rpki-client