
$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json)
Hash identifier: hC5gDW3tDLI6///p4OmnDKNvU8mepjKqlnRsWF+174Q=
Subject key identifier: 95:C7:65:BA:99:51:A7:13:5C:08:C9:36:68:6E:40:02:B7:72:91:2A
Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92
Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
Manifest number: 014A
Signing time: Wed 25 Mar 2026 04:28:53 +0000
Manifest this update: Wed 25 Mar 2026 04:28:52 +0000
Manifest next update: Wed 01 Apr 2026 04:28:52 +0000
Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: 9a74BEze/yL0ZPOCYgvMIGhVHOGpanMc8UV+1jhbpu4=)
2: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: oEK7UbEneVnN8s/S/N5Woyft7ItBdFqqTJalpL6CP44=)
3: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: VxdztqIyeKdq6Y1gZHMxA5mA6eKYSPyJZb/jS0HIv30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl
rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192
Validity
Not Before: Mar 25 04:28:52 2026 GMT
Not After : Apr 1 04:28:52 2026 GMT
Subject: CN=69c36485-fb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:49:5f:74:67:71:e1:c7:31:b2:7a:51:c9:
59:62:6d:90:36:e8:77:4e:a3:77:cd:14:e8:09:25:
89:43:46:f6:0c:ef:2d:d2:98:07:04:b7:99:aa:30:
2f:fc:fa:b8:f9:90:c8:9a:0b:e2:ec:f0:1f:76:fc:
b9:69:15:5a:96:bc:72:13:c7:79:4d:e0:ed:94:73:
f5:44:83:07:b4:bc:11:bc:81:9a:b5:77:23:7e:08:
6d:8c:4a:a7:4b:f7:66:06:13:d1:6a:ac:8b:63:db:
41:15:86:1a:65:46:44:3c:ba:96:6b:3d:b2:1c:41:
e2:6e:04:82:10:1b:be:d6:30:00:8b:cd:48:91:b6:
b0:f8:67:e9:5e:99:dc:d8:5d:b7:4a:49:1c:42:e9:
5f:45:60:65:2f:25:23:5b:92:ce:ef:b1:a7:b5:a4:
89:9f:4b:7e:2c:8f:20:f8:74:c8:1d:0a:01:6c:a5:
df:38:03:42:e6:0b:61:9d:45:19:0a:61:63:66:d1:
9f:21:9e:6d:b9:b5:34:15:6b:f8:61:44:9a:d0:a7:
b7:20:fb:21:96:18:78:1f:df:bc:24:79:d6:b5:0d:
ff:ca:ac:bc:0c:d0:ed:50:e6:69:2e:9e:4b:de:73:
bf:26:0c:23:27:13:ee:b4:dc:24:12:a6:56:b2:9d:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C7:65:BA:99:51:A7:13:5C:08:C9:36:68:6E:40:02:B7:72:91:2A
X509v3 Authority Key Identifier:
keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:72:24:30:83:62:58:5d:d0:a8:31:d5:2a:34:a0:ad:f0:13:
50:4d:fb:40:6f:8e:d4:77:03:17:01:ad:1f:3d:0e:9c:f7:c7:
88:7f:25:9a:77:f7:8d:e2:9c:c7:45:4d:0d:70:ae:41:be:a4:
8a:ae:04:40:6a:26:2f:d8:16:16:49:8a:66:f0:93:85:16:62:
86:cf:0f:be:7c:15:a5:0d:bd:b2:f0:17:00:71:30:90:fd:36:
93:a2:85:9b:a9:1e:ba:9c:64:f2:d6:5c:2e:7e:db:38:22:fe:
f6:a0:7d:97:af:d8:3f:72:cc:de:19:90:0a:d9:db:73:c2:b6:
18:08:39:84:5d:5d:eb:bc:27:e4:75:88:b7:1e:7b:9a:ac:14:
60:49:7d:8e:77:a2:83:bc:18:11:08:8f:87:98:9f:47:01:78:
ec:67:7b:8b:4f:69:1e:ed:a3:45:8e:61:78:f2:e4:08:0a:4e:
8f:60:63:b3:7b:0e:1d:4a:9b:ef:27:72:2c:a4:9d:0e:5d:f0:
07:09:6c:95:56:fc:34:37:bc:37:ba:9e:53:cb:27:0b:84:f3:
29:93:1b:c7:14:b4:56:aa:c0:3f:a0:c0:b9:81:fd:00:b0:10:
fa:6b:ea:0a:8c:e5:a3:70:4f:ad:8b:33:07:d0:18:12:97:1a:
d2:ba:ec:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:27 2026 by rpki-client