
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json)
Hash identifier: nNuUTHYmbW5tqe4IvRo0YZ6CfPJ7QbJltiyioSJdJ0U=
Subject key identifier: 29:84:94:3F:87:CF:A7:F1:81:AF:8C:27:48:90:BA:6A:5F:EE:5C:F8
Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C
Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C
Certificate serial: 16A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
Manifest number: 1690
Signing time: Tue 12 May 2026 16:42:50 +0000
Manifest this update: Tue 12 May 2026 16:42:50 +0000
Manifest next update: Tue 19 May 2026 16:42:50 +0000
Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: ygO9bMB03ruljPY2QHi+5RiZ5udPkRqI4BLgCO+po3s=)
2: D0240AB83E2611F19FC5B98DB5833773.roa (hash: g8YadsOEwLn+f1jtfBYb7qkcejvbvgg/WAXaJDEKgy4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl
rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5796 (0x16a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C
Validity
Not Before: May 12 16:42:50 2026 GMT
Not After : May 19 16:42:50 2026 GMT
Subject: CN=6a03588a-6ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:81:53:4f:1f:a2:ef:44:d8:38:ef:93:78:
f3:74:c7:e1:16:44:d2:ee:4d:38:88:c3:1b:04:95:
ff:08:7f:db:ca:4d:b1:52:76:ae:6e:50:8f:70:0e:
63:ef:35:b5:36:23:78:43:24:96:e2:0e:46:ce:76:
96:39:f1:1c:ea:63:37:b7:5e:92:2b:0b:ab:e2:db:
87:0a:6e:f9:49:fe:cd:52:5a:75:19:9a:54:35:19:
1c:35:58:a2:d5:49:b8:b6:1d:6a:f2:55:d4:32:44:
e8:e0:bd:00:37:40:e1:70:6f:af:1a:78:ba:7d:a8:
8f:0e:39:81:a4:7e:85:a6:6a:25:89:a0:ec:4b:9e:
7e:d2:1d:bd:0b:f2:6d:dd:ed:b0:c0:08:e4:3c:71:
70:02:24:63:5f:d8:84:95:56:b7:4d:f8:e4:a1:6e:
8c:ef:a1:a9:d9:8a:52:03:69:72:4f:fd:fc:5b:3f:
c8:f9:71:46:46:a2:6a:08:1c:63:62:32:7f:76:8a:
54:d5:f2:7b:57:83:cf:22:10:50:b5:f9:97:7e:f1:
bc:b8:1d:7e:c0:36:46:0e:4f:ed:95:d9:68:91:35:
08:c8:10:be:95:39:6a:f2:5e:13:05:09:58:0c:11:
b4:f5:47:54:10:eb:a9:6b:b5:f8:c4:cb:4e:ec:1b:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:84:94:3F:87:CF:A7:F1:81:AF:8C:27:48:90:BA:6A:5F:EE:5C:F8
X509v3 Authority Key Identifier:
keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:8d:09:8a:81:88:d8:08:91:b0:44:b7:fc:8f:e2:11:79:b2:
6f:9f:d8:c6:9a:b0:74:77:c6:67:e6:68:c5:fd:96:b5:ab:91:
20:f0:fe:d3:86:cb:9d:7a:2a:26:58:09:10:0f:60:0c:1b:72:
fd:d1:a7:49:89:12:34:35:55:7d:c2:85:a9:f7:83:00:a1:11:
58:85:39:d0:c2:4a:2f:1f:5c:1d:75:df:76:71:a3:d4:fa:27:
ac:a5:2f:04:c4:2e:b5:a0:20:10:2f:c1:0e:2a:a5:9e:b1:78:
c4:62:04:13:44:72:8a:08:f9:55:0f:b5:e9:e8:78:c6:33:91:
65:18:cb:38:28:22:63:34:92:e6:7d:ca:a4:09:47:ac:ef:75:
84:db:38:2e:c8:21:67:13:44:50:e2:80:48:88:fc:3f:31:b5:
2e:72:4c:e4:a6:01:87:c2:b8:c7:c3:5d:4d:20:d0:36:07:34:
83:d7:7c:a8:09:9e:11:cd:3d:ab:16:e7:8d:ea:53:1b:52:d1:
65:de:7d:17:6d:5a:e4:01:e5:25:43:fd:fd:8e:d0:e8:55:9c:
b0:17:27:18:67:dc:b7:b2:60:bc:97:4c:b6:50:8c:03:5e:03:
6a:50:29:e5:54:a6:8e:ed:9b:a9:bd:da:cb:54:31:24:11:a1:
57:98:10:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:40:48 2026 by rpki-client