
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json)
Hash identifier: oUMiUcVs+NDqssEoHfzGx/b1uBfvPjynHjRKUVEN7p0=
Subject key identifier: 4F:6A:1A:E5:5B:78:41:A0:01:98:AF:16:8C:B8:76:48:18:B1:D4:6F
Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17
Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
Certificate serial: 026C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
Manifest number: 0257
Signing time: Wed 13 May 2026 02:42:33 +0000
Manifest this update: Wed 13 May 2026 02:42:32 +0000
Manifest next update: Wed 20 May 2026 02:42:32 +0000
Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: pOLnQAPUgODYgrCcjATyWgh7QcibHGB/d3ACiKOJQ9g=)
2: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: m/7u6/cH3KIH4vE9NfTnYL7F2XJXhLpUKXKxJGJi1F4=)
3: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: G33TYspXU2Fxzv5ILVfshRhaPdOVDek7NtRxACK31hc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl
rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
Validity
Not Before: May 13 02:42:32 2026 GMT
Not After : May 20 02:42:32 2026 GMT
Subject: CN=6a03e519-2a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:1e:2e:01:0f:a8:b3:a7:61:dc:11:ad:8c:
f9:01:1c:5d:ab:00:43:f4:0f:f9:19:0b:6b:d2:ac:
5a:b7:e3:6c:4e:e8:64:d1:76:05:ac:55:a6:6b:f8:
8e:45:25:1f:3e:60:13:fc:d2:63:02:4e:c8:b6:20:
d7:d4:cd:aa:18:8a:62:91:76:65:97:be:ec:a6:b2:
10:2c:c0:97:79:d2:ec:9b:31:6f:d9:fc:97:f5:4a:
5d:32:d3:88:bf:8e:83:a2:b1:79:4b:6a:06:c1:23:
23:1c:05:ae:dd:15:3d:ac:cc:bd:5f:8c:a0:ab:02:
4b:8c:b4:a6:8c:29:82:ee:d4:0c:73:aa:5a:f5:7a:
75:a8:4f:1e:a4:c5:46:0e:73:11:62:a7:bb:5e:2a:
14:f1:7f:a1:22:00:42:ef:74:bc:c2:a1:e7:98:73:
f9:2c:28:64:4f:10:5d:8b:50:4c:72:0b:4f:07:28:
89:df:aa:bf:fd:0c:b9:9a:4c:f0:31:d1:75:81:14:
31:49:f0:0e:42:a8:6b:96:55:9b:13:c5:4c:9a:7c:
c6:d7:fc:e5:94:29:92:aa:aa:0c:5a:c0:11:16:7e:
30:47:6f:49:a9:7d:4a:a9:00:96:a7:8b:fb:9c:ef:
0e:a9:e0:b4:0e:6f:7e:b2:b1:69:b1:aa:0e:a9:48:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6A:1A:E5:5B:78:41:A0:01:98:AF:16:8C:B8:76:48:18:B1:D4:6F
X509v3 Authority Key Identifier:
keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3d:2d:d2:7b:25:ef:9f:2c:65:13:4f:41:64:1f:c5:a4:55:
b6:09:69:31:f2:7a:9f:71:6c:7a:dc:96:33:93:aa:eb:7d:45:
87:53:d3:fd:14:f6:21:08:ad:38:e9:5c:b7:6f:ec:5e:13:ad:
ba:75:b8:f4:df:38:1c:ba:9d:83:c2:ea:a9:8b:0c:94:57:fc:
83:d9:83:c3:f3:32:80:7a:b1:fc:a8:38:62:2a:c4:52:b8:df:
ea:7d:0e:9f:88:05:44:6b:a6:ed:32:ba:57:8e:84:c3:27:3d:
10:fb:7c:98:d4:73:e8:3d:0e:78:4b:44:9c:be:e5:dc:49:80:
11:dc:06:ff:4f:50:1e:95:8f:0f:4d:5e:44:d8:1d:54:ee:12:
96:09:75:7a:f6:e2:8e:99:ae:9d:79:e6:29:46:9a:ec:b8:18:
af:04:a9:75:e8:02:91:9f:92:84:42:e2:6d:9b:98:0f:ce:85:
60:65:bb:dc:ea:8e:63:6e:64:52:b9:8c:0d:85:1c:35:2f:bc:
2e:d7:bc:39:c8:67:4c:93:43:92:90:60:99:2f:af:8a:96:bc:
5b:38:58:0f:fd:fd:e9:2c:58:dc:c1:85:cb:c8:be:34:01:e7:
6c:e8:87:52:32:3e:0f:77:5d:92:bd:e0:69:34:87:7f:e8:cf:
ca:94:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:45 2026 by rpki-client