
$ rpki-client -vvf rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
File: k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft (raw, json)
Hash identifier: 774Yx/7Bs4VobGsOBjKyIlVYc+DcRf5oFUHxYv2zcsI=
Subject key identifier: 86:6C:7E:A7:46:A5:26:E9:A7:B1:1C:6D:EA:66:F4:FA:FF:37:29:58
Authority key identifier: 93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
Certificate issuer: /CN=A91410B7/serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Certificate serial: 081F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
Manifest number: 0817
Signing time: Thu 26 Mar 2026 20:55:37 +0000
Manifest this update: Thu 26 Mar 2026 20:55:36 +0000
Manifest next update: Thu 02 Apr 2026 20:55:36 +0000
Files and hashes: 1: k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl (hash: NDvk9rJWUnpHt0zQPDQF1+bmALOqkl7rbj0L5tEa7Ig=)
2: B097C8B013B111EB8864681BC4F9AE02.roa (hash: UFYuBjoB49sRUE7p1YsnbktSNsP8iexgtfxlH9Oq58Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl
rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2079 (0x81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91410B7, serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Validity
Not Before: Mar 26 20:55:36 2026 GMT
Not After : Apr 2 20:55:36 2026 GMT
Subject: CN=69c59d48-22d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:ac:6a:fa:d9:52:e4:2e:28:a4:bf:05:72:
0d:fa:1c:fc:24:c4:01:17:f9:d5:6b:a1:30:70:f6:
9e:cb:21:bb:0a:4a:9f:2c:03:17:7a:a1:6d:48:08:
a5:95:e7:dc:9b:51:8b:74:6b:a3:da:a0:01:be:21:
8f:a7:34:20:cb:46:5b:a2:0d:64:ef:ad:80:c2:f4:
56:c9:38:72:fe:7a:b6:fd:e3:da:2d:d8:28:cf:8d:
8d:3d:b5:76:b4:67:33:9c:a7:91:a1:78:5f:8d:88:
08:a3:ab:ca:d9:6c:5a:39:7e:cd:31:7d:af:54:49:
ed:2d:67:a4:db:05:5f:97:6a:a0:83:30:29:75:7f:
b7:fb:81:5f:0e:4d:f3:b4:ed:5e:7e:a1:5d:51:2f:
ce:92:1f:ed:55:ff:59:2e:a5:fa:97:08:5e:da:05:
dc:cf:57:de:cc:d9:7a:10:4b:4b:d6:06:b3:1f:e0:
60:64:91:66:c7:99:91:7d:53:c8:72:fd:89:c1:ed:
0d:3a:23:b6:25:ae:7c:41:31:b3:67:d8:ca:e2:fc:
02:0c:20:7c:4d:1b:24:5e:3d:d1:cd:c0:0b:b3:13:
f5:c1:6e:c6:ac:36:f6:b3:66:7d:50:37:84:53:d2:
bf:22:0f:fb:b6:9d:79:55:30:44:f6:d7:65:79:82:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6C:7E:A7:46:A5:26:E9:A7:B1:1C:6D:EA:66:F4:FA:FF:37:29:58
X509v3 Authority Key Identifier:
keyid:93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f0:22:2f:41:61:9f:0d:f8:34:15:3c:65:69:71:e3:fb:5d:
58:4d:8a:5f:72:0f:d2:4a:05:ad:f6:92:d1:05:14:05:3d:45:
7c:ef:df:43:12:31:e6:56:8b:99:87:69:45:28:52:1a:9f:84:
f1:12:a6:11:8d:47:d6:12:13:b8:bc:24:ca:72:ef:57:6f:8d:
bd:dc:f5:89:27:46:75:fc:94:0e:97:d4:86:2f:49:29:7b:78:
db:17:51:d5:4b:c0:28:5c:9a:1b:ac:fc:c4:2b:e7:9c:ee:90:
d9:72:9d:f9:23:c9:34:79:2e:a3:f5:d9:0e:39:a8:0d:fe:93:
3e:2b:33:60:ae:0b:b7:3a:ca:53:00:b8:7e:b3:28:6c:77:6b:
6e:e2:95:b1:fe:ec:ec:d7:0b:bd:b2:98:8e:1d:7d:f9:9e:32:
58:fe:53:ea:e6:07:ae:f0:92:10:44:0c:e7:1a:30:da:b5:a3:
15:4a:2b:67:86:c0:37:7c:7e:41:11:6e:bf:fa:cf:0c:c7:58:
44:5e:8f:17:22:e8:73:a3:e7:52:b4:23:2e:51:15:07:ca:e7:
aa:f4:e9:bb:eb:00:ab:f9:48:35:38:1e:a4:29:47:84:00:21:
2f:96:9c:6e:2b:1c:48:15:a8:04:af:59:f5:8a:f6:fc:e5:bd:
c6:5a:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:00 2026 by rpki-client