
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json)
Hash identifier: 9IH5twZuU9RR5LHu2iAw+bqNqLpLLJ1zdzK5zdPRzSg=
Subject key identifier: 47:D6:54:61:B3:C9:00:96:74:28:A2:B2:90:59:9B:F5:D2:11:7A:39
Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5
Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
Manifest number: 0211
Signing time: Thu 21 May 2026 02:59:28 +0000
Manifest this update: Thu 21 May 2026 02:59:28 +0000
Manifest next update: Thu 28 May 2026 02:59:28 +0000
Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: 9krj5MeUlZ5LtSP/OGqHnN/1QkJuFBxfpQ336mZitKA=)
2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: XLPSc0/td1mhYplTCs82dgrhLJseOG/zvxA6NfAFkmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl
rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5
Validity
Not Before: May 21 02:59:28 2026 GMT
Not After : May 28 02:59:28 2026 GMT
Subject: CN=6a0e7510-bfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:f6:18:00:0b:11:a6:f6:9d:dc:78:62:4f:
2b:5f:c2:59:ec:cf:e6:89:d7:3f:f1:57:76:15:ee:
2b:8d:f8:7a:70:b2:6b:77:71:03:17:16:5f:d5:72:
1a:a7:d4:b2:a1:f8:cf:96:6e:00:84:3b:9f:34:4f:
c7:b3:1c:a7:5e:2e:e5:30:b1:56:13:ea:06:3e:e5:
9d:18:24:d1:57:10:3f:e5:42:a0:a0:12:6a:59:3b:
46:5f:3f:56:15:57:46:63:e3:d3:ca:76:f8:d1:44:
cd:c8:88:59:87:ef:18:58:84:a6:1f:42:a1:5a:f7:
eb:2c:14:b0:f8:b1:c6:65:46:5e:f6:c3:63:60:4b:
19:e7:61:56:5d:33:48:68:2c:cc:20:e9:e7:a0:87:
b5:59:0d:e4:af:19:8b:a9:c3:54:36:87:b4:93:87:
2f:2a:dc:f2:c1:de:14:cd:02:35:f8:3d:b1:3e:6b:
35:f1:4f:81:bd:80:80:fa:a9:76:09:58:a1:07:0e:
e3:3f:21:4f:a0:cb:eb:60:29:fb:8f:51:19:39:eb:
cd:c7:db:41:c3:db:f6:e6:8a:93:d2:58:77:bb:16:
1a:ef:03:d5:f8:b7:65:48:91:2d:e7:87:c8:46:b8:
fb:33:76:f1:08:a0:72:75:f1:6d:c8:67:45:0e:1b:
60:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:54:61:B3:C9:00:96:74:28:A2:B2:90:59:9B:F5:D2:11:7A:39
X509v3 Authority Key Identifier:
keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:37:c8:04:9d:08:dd:62:61:35:5f:16:82:ff:ad:f4:b4:09:
3a:37:3d:d1:5d:17:67:ea:a8:4a:a3:a2:2f:ac:8c:31:60:60:
10:5f:d2:ff:38:e0:9d:68:cf:84:0e:8f:18:35:2c:ed:f5:cb:
86:96:6b:d4:d2:2f:82:80:f1:ef:d1:23:c3:87:8e:07:a9:a8:
24:ce:2b:8b:c1:79:22:7d:95:13:5b:63:33:13:2b:ab:3f:74:
8f:aa:9c:c8:13:ad:48:6c:3f:f1:34:fd:0a:d0:6d:b7:21:f5:
9a:57:f6:c2:0d:08:94:e6:5e:e5:40:46:dc:41:1f:29:9f:5c:
95:bd:ba:2f:2c:10:14:af:07:86:5a:d2:c6:b1:1e:a7:dc:bd:
89:4e:ef:49:b0:4d:3f:c7:01:c6:87:dd:6f:fb:db:91:f3:6b:
42:08:46:97:6d:80:7e:10:f4:8e:5a:37:6f:16:09:d2:a5:f4:
67:9b:1f:e6:83:4d:39:11:63:a7:27:80:a9:7a:83:c0:33:e4:
66:86:1b:d5:30:ef:2f:6f:b2:3e:1e:2b:99:a2:b7:13:37:bd:
33:65:98:2e:1f:a6:1a:2c:ae:11:54:0c:72:1b:05:79:aa:b5:
9f:6a:f7:3f:cf:3d:50:41:b4:9b:4f:bd:a1:3b:6f:4e:59:cd:
b7:ed:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:59 2026 by rpki-client