
$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json)
Hash identifier: nHs1NtwQ5v4qyf8bs7B3gzjBqxIiChU7GK0jbnoDqwM=
Subject key identifier: 31:42:DA:E6:71:91:37:FB:D8:C6:0B:D7:42:F5:02:1B:7D:EF:54:C8
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial: 02EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
Manifest number: 02E1
Signing time: Wed 25 Mar 2026 00:58:29 +0000
Manifest this update: Wed 25 Mar 2026 00:58:28 +0000
Manifest next update: Wed 01 Apr 2026 00:58:28 +0000
Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: C3slFeNosfA8kPaBeWmcDAxJy2222Phs3zDRYJ7PvXE=)
2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: h9XZber2EyFddUowRYB4R36YQps0wInKux9nbzLj6gU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 746 (0x2ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Validity
Not Before: Mar 25 00:58:28 2026 GMT
Not After : Apr 1 00:58:28 2026 GMT
Subject: CN=69c33334-6f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:13:c5:40:08:cb:84:aa:6c:33:63:c3:82:
1d:63:3a:12:15:ea:72:6b:b4:4b:4f:45:47:49:bd:
6c:55:8c:90:c0:db:da:12:f5:9d:c7:2c:de:f7:76:
20:bd:85:76:80:35:2c:73:fb:cd:ce:88:b8:6f:65:
89:97:d6:ea:f1:6f:e1:5d:bc:76:07:91:e9:69:02:
bb:8f:1b:85:f3:c0:b1:17:29:44:25:d3:bb:aa:a8:
3d:f6:b4:78:45:a4:e3:66:47:9c:49:00:ca:01:ef:
d2:cc:07:1e:c6:4c:65:32:1d:e0:2b:b1:c7:87:25:
93:02:ef:8f:49:08:86:87:fd:4d:88:3d:89:92:c2:
4e:41:35:ed:14:5c:ed:a1:61:7c:e8:86:94:31:d7:
7b:f4:a6:a3:f6:52:af:ec:4f:05:cd:34:94:d0:94:
7f:6f:2c:d8:d6:93:63:df:4e:56:dd:76:ec:23:af:
45:70:91:7c:8a:ed:ae:66:1b:b6:32:27:f1:c1:97:
90:de:5b:2f:20:86:d5:5d:e1:b6:fb:be:65:d2:77:
eb:3b:6e:5f:5c:95:12:a9:77:a0:fe:2c:24:d4:68:
4d:07:b8:7e:e8:bb:9e:21:58:71:db:e1:16:70:9b:
b3:a0:21:a2:55:aa:75:17:53:dc:38:42:81:a9:4c:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:42:DA:E6:71:91:37:FB:D8:C6:0B:D7:42:F5:02:1B:7D:EF:54:C8
X509v3 Authority Key Identifier:
keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:25:d7:c2:13:59:d8:bf:d0:86:fd:a3:18:57:d6:1c:c4:fa:
94:e9:9f:a4:ba:a4:a3:aa:27:a7:93:00:e3:7b:51:cf:7c:d7:
8a:34:42:e5:1a:30:ad:af:0f:30:15:72:87:77:9e:9c:65:76:
13:f7:e1:95:60:78:34:25:86:5a:59:a8:68:9a:17:13:4d:27:
38:2a:83:89:28:88:b7:ef:2d:c9:cc:56:4e:53:c2:06:6e:9d:
29:50:7a:62:39:82:8c:f5:e6:a0:2b:c2:ae:b3:16:30:7c:90:
71:ec:36:b8:b4:c6:94:f7:f8:e8:c0:7b:8b:a2:0e:11:2d:31:
89:ba:4e:b0:70:2f:cd:4e:97:36:bf:fb:63:8e:b3:79:66:87:
9f:90:d5:e6:77:ca:66:92:ff:54:6f:27:cc:00:d4:b4:7f:fc:
a6:16:9e:e0:82:c0:2d:26:84:d8:9e:b3:be:69:71:59:f0:2e:
72:41:01:6b:99:9d:c0:1a:f4:87:8e:b3:74:bd:f0:a4:af:13:
d4:2b:69:a3:2b:55:fb:7d:a8:e8:0e:eb:79:65:8e:e2:9e:10:
05:37:ef:d9:47:a6:dc:30:3c:af:86:2b:32:19:90:e2:57:b9:
9c:5c:3a:2a:a5:1d:18:7d:93:8c:99:91:bd:50:30:86:03:66:
d4:1d:63:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:56 2026 by rpki-client