
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
File: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft (raw, json)
Hash identifier: rVtnfDSt/DSiRrKBl8yYjrocLa7KSrAtErliivN93Zk=
Subject key identifier: 0D:03:32:06:C4:B4:32:CA:04:F1:57:CE:E8:C8:2F:9D:17:E0:1C:67
Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
Certificate issuer: /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Certificate serial: B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
Manifest number: B0
Signing time: Wed 09 Sep 2026 07:32:14 +0000
Manifest this update: Wed 09 Sep 2026 07:32:13 +0000
Manifest next update: Wed 16 Sep 2026 07:32:13 +0000
Files and hashes: 1: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl (hash: /+oD2y+qAvocHe5D/aFU1yU4GVOjbyH7yFaDXtYIOWs=)
2: AE11F062738111F18BB794EF6BA30FBC.roa (hash: s9d5gC7hYaCvUgvmb9o9rutS4rMSCmVuPTuxjMy4QDw=)
3: 39FF8508738211F1B422FE586CA30FBC.roa (hash: RPhN7NCY5097529W89+5q3UwkqjueIe7ky2HFF/vGtQ=)
4: 22F249F2899611F1B0B035B43911F970.roa (hash: oZYYlZ0lHZLtiZ1LM6QQKnCi3gZIOsKSkb1+bXM96No=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 07:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Validity
Not Before: Sep 9 07:32:13 2026 GMT
Not After : Sep 16 07:32:13 2026 GMT
Subject: CN=6aa10b7d-b104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:5e:23:70:90:c2:99:e5:1e:69:b6:2e:32:
a5:20:df:7c:f8:3b:46:b7:4d:11:65:c8:aa:04:e6:
59:5e:0e:7e:c0:ea:94:4d:af:e4:9d:52:ff:ca:88:
e3:0c:a7:52:45:66:6f:4b:f2:92:2f:85:e6:ba:cb:
3b:b8:ca:35:f0:07:48:ac:d3:92:2c:f9:0f:45:d6:
7b:30:9b:64:ae:bc:fb:d8:78:a3:e6:58:e0:11:89:
b8:ad:7f:ab:13:ef:ab:02:dd:0f:1f:0e:76:3e:60:
d5:e1:fa:d8:5f:8d:56:ae:ed:60:e6:5a:d2:10:b2:
4a:ff:15:f3:8d:c4:46:c5:14:3a:41:e2:52:b8:15:
c1:3e:ed:89:53:43:3e:5b:62:f1:fc:85:2e:d8:8e:
25:87:0c:87:3f:e7:b1:7a:eb:f5:38:73:d9:61:23:
af:ff:7b:e9:a4:cc:aa:89:83:1c:54:d1:31:17:7b:
1e:41:42:5f:d4:78:92:a8:32:0d:e9:82:a7:91:1b:
55:ca:bd:36:b2:58:09:f9:90:05:ce:db:de:0f:e2:
04:c4:c1:89:19:a1:b5:a4:f6:cd:01:6f:da:32:63:
8c:b8:e9:2c:dc:24:51:bd:0b:8c:d7:88:8c:18:a1:
42:28:00:49:95:e8:60:7d:f6:78:f7:d7:17:2a:9d:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:03:32:06:C4:B4:32:CA:04:F1:57:CE:E8:C8:2F:9D:17:E0:1C:67
X509v3 Authority Key Identifier:
keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:32:2c:14:11:b4:d5:a2:ae:86:d0:52:38:4e:ff:f9:19:b4:
13:55:db:ca:69:97:4e:cf:80:30:fe:c7:1f:6c:1d:ca:b3:7b:
ce:85:91:1e:1c:6d:2c:ae:c8:a2:7e:ef:fd:69:bc:01:e8:88:
c2:f9:fc:84:06:d6:26:f9:78:dc:d8:a3:2a:f2:77:d3:c4:68:
01:a4:f9:ee:45:6d:82:f1:89:9b:3d:5f:46:ae:93:63:8c:c7:
d8:67:85:2a:46:e8:b2:fe:67:1a:f5:96:59:88:dc:6e:ac:e2:
e4:9b:b7:86:5c:dc:21:b1:38:6d:0b:be:02:43:1a:37:39:33:
7a:ce:4e:17:fa:b2:e2:28:9e:30:ed:07:60:b1:b5:87:62:7c:
a8:31:4f:9b:75:41:22:58:a7:59:e8:8b:91:91:aa:7e:bf:ff:
a4:26:2c:78:e5:e8:d0:6a:ae:59:69:f8:6f:a9:1d:d6:46:cb:
d2:35:70:27:2b:cd:a9:52:2b:b7:77:9f:5d:e8:bd:57:32:8f:
7b:77:22:6b:a9:c4:e7:55:8e:71:80:6e:d7:5b:92:60:15:39:
d0:03:55:09:f4:a4:93:5c:a9:7f:0f:a4:7d:ef:38:57:3b:36:
8d:8e:8f:5c:8a:75:87:78:9c:27:de:ef:91:89:c6:86:d3:5b:
85:cc:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:48:35 2026 by rpki-client