
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json)
Hash identifier: ELhoJcRl3VmljUBTgEwEujYohir9F+v8LYBfVHcArac=
Subject key identifier: 5B:9B:84:45:9E:D3:43:7E:89:02:4D:A1:E6:B1:F8:E9:C1:06:47:BF
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
Manifest number: A4
Signing time: Wed 25 Mar 2026 06:30:06 +0000
Manifest this update: Wed 25 Mar 2026 06:30:05 +0000
Manifest next update: Wed 01 Apr 2026 06:30:05 +0000
Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: cxbcN0//BIpWsPIPE/ZaP3VY1kN1u/3x01bv4tubKUc=)
2: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=)
3: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Validity
Not Before: Mar 25 06:30:05 2026 GMT
Not After : Apr 1 06:30:05 2026 GMT
Subject: CN=69c380ee-52c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:ed:3d:fa:6e:be:13:80:46:5d:57:29:9e:
5d:3e:08:5c:d6:f2:0c:e0:68:b4:33:2f:eb:da:6c:
f0:4b:ac:a0:2f:58:e3:0b:8d:37:d0:20:ce:44:78:
54:08:25:75:d4:db:67:22:c4:05:cc:47:6b:2e:2f:
17:3e:fc:12:ee:c0:0d:76:bd:96:5e:7d:63:ae:2a:
2d:cd:51:d3:c4:6e:b9:35:e0:cc:7f:2f:f0:26:3b:
73:ba:d8:3d:35:0e:70:b0:f5:69:05:38:ab:bc:df:
40:45:3c:06:f9:0a:31:34:b0:b4:b5:17:79:fe:5e:
1e:1f:89:84:84:22:8e:32:b4:44:e3:b5:c4:52:07:
6d:49:cb:69:22:70:20:f3:9b:7f:4d:ce:b8:a8:d4:
2e:75:15:00:7e:81:7d:ba:b4:d3:b3:4f:2e:e1:1b:
52:2f:4f:44:40:dc:09:e7:51:b2:95:15:b2:b5:39:
37:cf:c1:cc:95:1c:2d:c4:bd:36:d2:12:d5:7d:df:
f4:59:7e:e5:36:33:ba:5a:47:b7:d1:c0:7e:3b:41:
c8:15:fa:3e:f6:58:e6:ad:77:76:1c:48:e5:33:7e:
4e:eb:01:03:e9:96:c7:fc:32:ec:73:80:e1:4f:3b:
86:75:51:20:cf:75:19:82:ae:6a:f8:f0:a9:e4:f2:
ab:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9B:84:45:9E:D3:43:7E:89:02:4D:A1:E6:B1:F8:E9:C1:06:47:BF
X509v3 Authority Key Identifier:
keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6e:2f:f4:4c:a0:1f:8d:3d:d9:90:04:54:e3:f3:12:e9:c2:
25:7a:17:fb:a3:96:95:c1:47:96:ca:6e:b3:cf:f3:df:a1:08:
e0:f0:73:83:6f:40:0c:cb:ae:86:18:26:0f:08:06:f2:48:91:
17:3a:e9:e2:6c:d4:ad:62:97:b0:54:d9:02:4c:84:09:dd:64:
31:d4:80:3d:e2:d2:91:bc:12:e1:5e:3e:ab:77:0c:56:58:42:
b5:e8:27:e0:e4:02:c6:a5:15:d7:7c:f5:18:39:7c:ec:62:14:
a8:cc:04:fb:f1:87:5d:e5:c5:ec:d1:a6:47:ab:64:26:1b:db:
60:c8:e7:b3:17:41:f1:58:73:17:ac:f6:f1:8a:7f:7a:bf:4c:
14:4b:6c:ae:3f:e6:c0:a4:f0:c4:9b:e0:06:3e:61:07:4d:23:
7d:8a:c4:3d:37:3b:85:26:4c:e4:9c:ec:4c:70:73:65:5d:33:
b2:00:ab:77:5a:0f:46:fa:4d:a9:04:f3:8d:b5:16:98:f1:58:
af:1e:00:44:fe:ec:56:86:f2:37:7d:10:90:75:30:5a:f2:19:
24:98:f5:84:56:51:71:48:49:5d:49:d5:be:cb:04:1b:38:73:
34:e5:1a:b1:68:8c:9b:5f:d7:8f:d8:85:5d:6e:be:57:b5:94:
14:49:0b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:48 2026 by rpki-client