
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
File: PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json)
Hash identifier: zfzMFRILY0/h2jzrqGqQsikaWJaurB0x7SamEsBmWEo=
Subject key identifier: 58:3B:4C:A1:1F:90:6B:92:C1:F1:C2:55:C2:AF:3E:30:44:93:FB:42
Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
Certificate issuer: /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Certificate serial: 0921
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
Manifest number: 0916
Signing time: Thu 26 Mar 2026 20:10:06 +0000
Manifest this update: Thu 26 Mar 2026 20:10:06 +0000
Manifest next update: Thu 02 Apr 2026 20:10:06 +0000
Files and hashes: 1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: WCPJGd7uGLgkqupbE+xQRVxI9lb6JzAPTmRP9wKz1LA=)
2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: i/znacwdWC+cJbSfpSGuIUnxdzdxG75j2+xmoBgpqDI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl
rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2337 (0x921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Validity
Not Before: Mar 26 20:10:06 2026 GMT
Not After : Apr 2 20:10:06 2026 GMT
Subject: CN=69c5929e-31c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:10:3a:71:84:98:81:e8:20:ad:03:c9:67:
2f:e5:8a:93:94:6a:f7:97:87:4d:25:ec:f3:8a:43:
c8:2c:87:7e:3d:2c:ac:93:1b:04:87:ae:1c:73:c0:
30:df:27:c2:bb:b0:30:20:50:d1:e1:84:19:0c:ff:
da:d6:f1:81:89:58:8a:6f:6b:7c:7d:d8:08:0a:68:
17:48:fc:cd:a6:cd:d5:b6:ca:dc:f8:15:fc:06:d5:
81:1d:94:90:24:0c:5a:fd:70:e4:4c:7b:15:7c:b6:
a1:f9:08:b2:1b:df:37:97:72:c4:3e:a8:d2:a5:f5:
1b:1a:af:40:23:0f:90:32:ca:5d:f6:d6:eb:ca:a9:
2b:8e:91:be:24:81:6a:89:3f:15:d3:c4:43:c8:fd:
c5:3f:19:0f:5a:50:84:4b:16:ad:07:8d:e6:fa:52:
03:a3:80:04:c3:72:ef:3c:4f:93:a8:15:f6:43:1c:
6a:c3:90:4e:b3:ed:4f:d4:c6:67:b7:55:7e:74:e4:
c6:f9:cc:63:7d:5a:1e:bd:bd:44:44:5d:68:5d:18:
f7:11:eb:81:4e:0e:5c:f4:59:0e:01:a4:3a:1a:7e:
b7:0a:f2:63:74:73:bb:c2:0a:40:c8:6b:f7:f5:d6:
5d:20:e1:0b:23:4a:12:a1:8e:d5:d8:4d:cd:c6:da:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3B:4C:A1:1F:90:6B:92:C1:F1:C2:55:C2:AF:3E:30:44:93:FB:42
X509v3 Authority Key Identifier:
keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:72:45:30:55:7c:bd:8d:75:0e:a5:2d:91:b6:47:f7:4f:09:
7e:41:86:0b:72:a1:4d:b2:2c:97:e3:0e:8d:59:83:32:31:1b:
85:ed:04:26:c7:be:b9:5b:f3:dd:49:2e:28:ca:7d:7a:3b:c1:
f2:8b:99:b4:ec:3b:9f:cd:55:a4:f7:06:6c:f5:88:4c:b9:2a:
41:ab:50:92:fd:ee:8a:dd:9c:f1:86:fd:79:a1:21:3c:13:ee:
ed:9d:dd:8a:ac:34:b9:59:eb:8d:6c:6b:6a:2e:be:41:51:5b:
f9:cf:31:ae:44:8c:28:13:62:8b:24:ab:02:e4:98:3b:23:cd:
72:11:8b:1c:e7:d3:28:d6:bb:10:d2:2e:e6:c0:96:cf:06:b8:
25:75:4d:61:95:4c:db:68:03:72:20:55:b9:89:9f:8e:4a:20:
23:45:72:d6:8c:31:a7:93:cb:6c:8f:d8:57:83:b6:a6:6d:af:
89:21:9b:1e:b2:4c:dc:35:26:87:0e:c9:15:55:17:9d:3e:47:
72:73:75:d0:9e:1b:05:0f:a5:cb:56:0d:06:ff:27:6b:e4:18:
dc:46:69:c3:0e:1d:07:2f:52:e8:f0:a2:72:08:b4:48:74:f8:
11:53:48:2b:bf:8f:c1:fb:ac:07:25:98:96:30:6f:9c:66:ed:
7f:bf:a1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:31 2026 by rpki-client