
$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json)
Hash identifier: /oEnJDiXp4iI+/u4gdQDl8VodmxRCHiH97ny/aONCyk=
Subject key identifier: F1:8C:C7:B8:1B:AD:35:CF:38:90:00:F9:59:32:8D:62:B0:13:CE:31
Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92
Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
Manifest number: 0162
Signing time: Mon 11 May 2026 05:01:18 +0000
Manifest this update: Mon 11 May 2026 05:01:17 +0000
Manifest next update: Mon 18 May 2026 05:01:17 +0000
Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: YkHHyxNr+DZRevthQljGc796zOUqZYp+liQ3PoY5kek=)
2: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: oEK7UbEneVnN8s/S/N5Woyft7ItBdFqqTJalpL6CP44=)
3: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: VxdztqIyeKdq6Y1gZHMxA5mA6eKYSPyJZb/jS0HIv30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl
rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192
Validity
Not Before: May 11 05:01:17 2026 GMT
Not After : May 18 05:01:17 2026 GMT
Subject: CN=6a01629e-db6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:c0:ed:a0:ee:d2:14:3d:fb:d2:d1:48:2b:
03:11:43:96:b4:1d:03:25:6d:86:77:94:aa:73:47:
63:06:37:6b:70:26:3f:86:b1:34:40:45:d6:62:50:
c7:d2:8c:6e:b7:39:e4:b5:da:56:5e:88:5e:f7:81:
f6:d3:c9:5f:c7:d1:9e:8c:19:83:cd:a2:8a:e4:14:
7f:48:40:76:84:89:b9:e3:0b:6c:02:dc:d8:04:da:
56:86:06:68:ab:c6:36:13:db:3d:fb:f1:da:08:11:
3a:40:bf:0f:d7:8d:ba:7b:45:0a:2a:e2:28:26:d8:
8d:1b:b1:9a:e7:e1:2b:05:bd:b9:de:c1:0a:d7:f9:
a4:cf:2e:d6:22:5f:27:a0:b9:49:82:58:85:95:da:
70:23:04:7b:ad:23:b6:33:4e:c5:c9:d4:eb:91:a4:
04:5a:a8:d1:fb:8a:85:1b:c7:e2:13:1e:50:3f:26:
bc:0f:71:11:45:b5:76:6e:a8:86:b2:e1:d3:fd:9b:
76:64:dd:5a:97:ed:93:09:00:77:69:ea:fb:be:f1:
0b:94:b6:b2:46:f0:0c:94:fc:c9:27:d4:f4:b0:7b:
72:eb:4a:f2:f8:00:66:06:7a:f2:23:67:56:d8:f9:
71:a3:f7:6c:43:e3:ff:e6:26:f4:1d:44:68:c6:99:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8C:C7:B8:1B:AD:35:CF:38:90:00:F9:59:32:8D:62:B0:13:CE:31
X509v3 Authority Key Identifier:
keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:14:b0:40:89:d0:74:e0:36:ae:d6:7a:81:73:61:d3:11:45:
c5:06:d0:43:e3:cb:05:cf:55:79:2a:a2:aa:64:33:81:bf:c7:
2c:50:15:71:dc:91:50:0b:54:c3:68:e6:58:6e:ee:a2:9d:f0:
97:24:ad:cb:44:9e:70:0b:38:3a:43:f3:dc:fa:6e:7d:c4:56:
ad:a5:49:67:51:49:e5:7f:dd:9b:1f:93:df:24:50:a7:a2:5c:
b2:7b:dc:7b:91:0b:7e:e0:eb:ce:c2:5b:2d:e6:0f:5b:32:67:
7c:84:80:95:f5:51:a9:37:8c:d3:52:9b:2f:e9:dd:c6:1a:e0:
1c:15:65:f5:51:5e:9e:a2:be:85:0e:2c:df:03:6c:61:72:af:
2d:9e:10:a1:0f:ef:99:d6:ca:e4:81:1b:4b:84:9b:70:25:ef:
12:fd:f0:a9:04:97:f6:9c:df:c2:a3:c7:43:9b:79:14:ab:34:
33:79:7e:c0:ae:70:a4:fb:8e:17:14:80:41:e1:3d:9a:44:6c:
bb:26:c5:d3:e0:70:26:c4:cc:75:de:ae:a2:bf:11:dd:83:7f:
55:22:62:5b:08:28:bc:da:e5:a3:0d:89:a7:e4:67:27:9e:6c:
47:b4:5d:80:85:3f:2f:62:62:58:3e:df:0e:d0:bd:41:89:2c:
85:b7:16:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:13 2026 by rpki-client