
$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
File: 2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json)
Hash identifier: 2uF2F3Pjei58cuIYxwf/hWZzgywdXKxW03ST1pcg35E=
Subject key identifier: 91:95:92:FA:81:73:DD:43:61:19:A5:FE:35:D1:F4:6A:13:14:58:90
Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Certificate issuer: /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Certificate serial: 02E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
Manifest number: 02DA
Signing time: Wed 25 Mar 2026 00:59:55 +0000
Manifest this update: Wed 25 Mar 2026 00:59:54 +0000
Manifest next update: Wed 01 Apr 2026 00:59:54 +0000
Files and hashes: 1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: piyB43eVZ8SzIxuo6uyv01R+i+ZEKSn11sZR7bEEkzI=)
2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: QRN3d7Kp62mAA4UY2PHj6uAygWUxtpM/GbpwgYao/0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737 (0x2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Validity
Not Before: Mar 25 00:59:54 2026 GMT
Not After : Apr 1 00:59:54 2026 GMT
Subject: CN=69c3338b-1a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:bf:db:85:82:a5:37:c9:ef:d1:3c:a4:8a:
13:5b:78:7f:e4:15:08:75:d6:44:45:16:37:ff:e9:
74:ab:91:3f:77:63:b2:76:0a:1e:39:c0:2c:6a:8e:
c6:72:8c:91:63:63:f4:3d:c2:ce:14:2f:73:8d:d1:
81:9f:1b:e6:31:11:31:09:8e:14:ae:08:0f:c5:b7:
9a:91:a8:74:8b:7f:a0:2d:4b:4d:b4:f2:7a:21:2c:
da:86:5e:00:18:83:fe:b5:8f:fd:15:6d:47:ef:e4:
9f:5a:7b:23:b8:c1:20:a8:0c:f3:07:bf:5a:61:2f:
fe:6e:ce:29:bc:9b:17:a9:7c:97:78:0d:89:bf:2e:
f9:d9:27:c2:ea:41:76:9b:58:ae:d2:c5:dd:ac:33:
d4:7e:5e:13:fd:8b:3d:ed:1e:b7:c8:22:fb:a0:61:
39:31:9f:78:86:27:54:c0:18:72:71:28:ee:52:0c:
07:6f:22:b2:7e:86:0b:fb:f6:25:09:02:e4:ed:7f:
fc:7d:0b:8b:3f:f0:26:cd:c9:0f:71:32:8e:44:74:
71:d4:78:bc:c6:27:e4:e5:55:5d:b2:b6:b6:98:f2:
33:4b:83:ce:da:ef:01:c0:86:3a:39:78:b4:47:93:
e3:d7:65:ec:d1:73:cf:ff:49:d7:a2:6e:1f:34:35:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:95:92:FA:81:73:DD:43:61:19:A5:FE:35:D1:F4:6A:13:14:58:90
X509v3 Authority Key Identifier:
keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:91:e3:08:4f:b5:f4:62:c5:cf:84:42:38:23:f9:8a:d3:39:
2d:0a:91:4b:d0:d5:00:ef:45:9c:a8:af:22:26:b9:30:15:7f:
1e:04:87:8d:1d:ef:07:2b:92:18:56:d3:a2:bd:2a:c7:4f:24:
6b:f1:dd:cf:ee:27:f1:7c:aa:67:dc:aa:bf:c3:9d:66:db:e7:
cc:ab:94:f8:2a:ee:9c:0c:e3:90:94:f5:99:6e:b5:43:50:78:
6c:55:90:a8:b6:e8:f2:86:1b:94:8c:24:85:dd:7d:01:18:95:
0d:41:b6:9c:06:38:38:42:ff:e7:8e:20:81:34:f2:ee:fd:e3:
8f:44:c5:ce:69:33:b9:cc:b8:fb:38:2e:0c:55:e0:27:b2:44:
a7:92:27:cc:15:17:90:e6:37:ef:7f:1d:d7:ff:5a:95:7e:3d:
3a:25:f9:9f:3d:5f:38:c0:c6:1a:e6:76:f4:65:ea:a8:a7:85:
aa:c6:7a:69:bd:ba:c8:85:f2:3d:3d:fd:a3:76:c4:3b:b1:56:
2d:28:94:ed:ea:3b:1c:69:b9:21:bb:8d:3c:48:01:ec:4a:a9:
25:be:69:5c:42:c4:f8:02:43:a4:b5:4b:55:66:9d:17:a4:6c:
5b:7f:19:03:a4:0e:e7:9d:55:08:f6:a4:23:a8:bc:0f:38:12:
af:ea:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:28:51 2026 by rpki-client