
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json)
Hash identifier: DyPloXlEY9HBK8TaXvrH3Pwj6v+4mV2nt8XAYclsCGc=
Subject key identifier: 1C:1C:23:DB:7F:99:21:FE:09:63:C7:F8:49:5D:0F:B7:8A:02:2D:41
Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
Manifest number: 0144
Signing time: Sun 05 Apr 2026 04:40:50 +0000
Manifest this update: Sun 05 Apr 2026 04:40:49 +0000
Manifest next update: Sun 12 Apr 2026 04:40:49 +0000
Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: bP4b5nbSKOujM4XTRxYGFASKdH7gGKgvSzDgufbXZuA=)
2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: 7YDIAXpxtepTGgytxzf3JRe5GhlXCpzZeaIbOoOU8ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Validity
Not Before: Apr 5 04:40:49 2026 GMT
Not After : Apr 12 04:40:49 2026 GMT
Subject: CN=69d1e7d1-5cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:a2:56:19:b2:05:bc:30:0c:eb:41:12:3a:
fd:76:ae:46:cc:cb:a2:23:42:db:58:d6:45:74:27:
6f:8c:94:3f:b0:c5:80:dd:28:eb:bb:e9:3d:df:44:
db:cf:24:6b:9a:c0:9b:c4:5e:2f:f1:3e:9c:73:fb:
39:74:20:c7:dc:14:5c:66:38:97:a2:75:07:8b:c0:
02:74:d8:18:cb:40:a9:12:af:82:69:01:91:7c:d9:
61:ed:78:60:f1:88:16:74:d2:66:a0:91:03:5b:03:
64:e7:62:a1:55:11:1c:35:3e:41:1f:e5:fc:b7:62:
85:fe:e4:fb:0d:be:bc:58:7b:47:30:2c:7b:a5:41:
1a:bb:48:b4:7b:f1:e2:b0:c7:f2:b5:2e:85:3d:20:
54:1e:7a:b9:8f:31:cc:2e:6c:98:56:89:a7:a3:8a:
22:a7:00:af:a4:cb:1d:b2:a5:7e:80:10:42:84:7c:
4c:b1:28:4a:7d:95:70:6d:7e:53:68:76:60:3f:d8:
de:a2:e6:70:a3:3e:5e:73:61:98:f2:74:43:b1:fb:
fc:14:0d:36:f4:14:7c:c0:76:52:cd:3e:85:ad:2f:
63:11:16:f4:58:99:1c:2c:44:a5:50:66:c7:09:fe:
53:35:bd:62:62:51:9f:21:10:cb:e4:6d:5c:dc:9a:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1C:23:DB:7F:99:21:FE:09:63:C7:F8:49:5D:0F:B7:8A:02:2D:41
X509v3 Authority Key Identifier:
keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:82:20:49:63:9d:e9:84:15:45:57:dd:10:50:08:f2:d7:db:
cd:5f:3f:00:a7:90:58:50:ef:7f:c3:b7:33:bd:05:7c:e2:71:
c0:ba:01:6e:c3:c4:6e:61:d5:a9:c7:61:50:c1:ab:b2:92:52:
e7:06:f2:7b:0e:4f:62:9c:c5:22:7e:d2:cb:db:35:8a:ad:93:
b8:98:16:d5:de:b5:cf:99:47:eb:48:4d:a6:8a:e3:31:b3:52:
90:15:b1:36:32:ad:62:92:19:45:17:6c:b9:54:a7:8a:14:72:
0d:d4:56:dc:42:8d:f5:f1:be:1a:e4:3f:50:2b:0c:8c:54:e6:
0f:8f:62:cf:f9:e5:90:07:bf:70:0c:14:cf:56:26:02:a3:ab:
e0:a9:7e:dd:d4:16:2d:80:2b:7d:5b:80:7e:26:8a:38:93:e5:
2a:8e:46:f4:e9:9b:88:4b:21:60:c0:0f:46:70:f2:fe:9f:97:
6a:b9:48:54:85:44:13:19:57:ac:ee:d7:d1:dc:02:91:60:62:
a7:be:47:f7:89:9c:f3:99:3b:76:68:96:93:8a:14:ea:03:78:
bf:a4:cf:b7:45:67:53:8b:46:3d:1b:75:b2:f2:2b:06:35:2a:
31:78:0a:29:de:f1:3f:0f:91:38:14:5a:73:a7:96:ad:5f:3f:
62:22:e1:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZEMjAxMTAvBgNVBAUTKEE3NkI3MTBDRDIzNjBBMkUyNjgyRkQyQjgwNzE4QTE5
ODgzOTY2MDQwHhcNMjYwNDA1MDQ0MDQ5WhcNMjYwNDEyMDQ0MDQ5WjAYMRYwFAYD
VQQDEw02OWQxZTdkMS01Y2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAssiiVhmyBbwwDOtBEjr9dq5GzMuiI0LbWNZFdCdvjJQ/sMWA3Sjru+k930Tb
zyRrmsCbxF4v8T6cc/s5dCDH3BRcZjiXonUHi8ACdNgYy0CpEq+CaQGRfNlh7Xhg
8YgWdNJmoJEDWwNk52KhVREcNT5BH+X8t2KF/uT7Db68WHtHMCx7pUEau0i0e/Hi
sMfytS6FPSBUHnq5jzHMLmyYVomno4oipwCvpMsdsqV+gBBChHxMsShKfZVwbX5T
aHZgP9jeouZwoz5ec2GY8nRDsfv8FA029BR8wHZSzT6FrS9jERb0WJkcLESlUGbH
Cf5TNb1iYlGfIRDL5G1c3Jo7dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBwcI9t/
mSH+CWPH+EldD7eKAi1BMB8GA1UdIwQYMBaAFKdrcQzSNgouJoL9K4BxihmIOWYE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkQyMC9BODI1M0I5QzQz
MzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNpNG1ndjByZ0hHS0dZZzVa
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpnUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkQyMC9BODI1M0I5QzQzMzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNp
NG1ndjByZ0hHS0dZZzVaZ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl4IgSWOd6YQVRVfdEFAI8tfbzV8/AKeQWFDvf8O3M70FfOJxwLoBbsPEbmHV
qcdhUMGrspJS5wbyew5PYpzFIn7Sy9s1iq2TuJgW1d61z5lH60hNporjMbNSkBWx
NjKtYpIZRRdsuVSnihRyDdRW3EKN9fG+GuQ/UCsMjFTmD49iz/nlkAe/cAwUz1Ym
AqOr4Kl+3dQWLYArfVuAfiaKOJPlKo5G9OmbiEshYMAPRnDy/p+XarlIVIVEExlX
rO7X0dwCkWBip75H94mc85k7dmiWk4oU6gN4v6TPt0VnU4tGPRt1svIrBjUqMXgK
Kd7xPw+ROBRac6eWrV8/YiLhOA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:37:03 2026 by rpki-client