
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
File: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft (raw, json)
Hash identifier: SU6mIgRl8JVnJagjB1dtTc33D8zflPrXuFoAofqyXtk=
Subject key identifier: 28:07:6A:3B:5C:44:0E:6F:1C:17:02:EB:10:35:DE:80:E7:0B:0A:EF
Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
Certificate issuer: /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
Manifest number: 59
Signing time: Fri 27 Mar 2026 07:40:42 +0000
Manifest this update: Fri 27 Mar 2026 07:40:42 +0000
Manifest next update: Fri 03 Apr 2026 07:40:42 +0000
Files and hashes: 1: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl (hash: y78syJcON7iaXbYC9zto3reQpstW9DrTyQqmWmmdvT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 07:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Validity
Not Before: Mar 27 07:40:42 2026 GMT
Not After : Apr 3 07:40:42 2026 GMT
Subject: CN=69c6347a-7ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:49:21:53:4b:95:3e:87:3d:9d:e9:c4:d9:
c5:1c:91:2f:c0:67:e1:76:2d:de:f2:c3:38:d5:1a:
0b:54:cf:2f:4e:ea:73:83:14:0c:a2:54:66:ae:64:
8b:47:d9:ad:16:82:a0:e4:c7:1a:16:55:b7:23:a4:
c6:ae:81:44:ab:88:d4:30:39:aa:89:27:3f:45:a0:
a7:91:1c:49:31:d6:76:67:4c:b6:c0:ce:d2:2e:3f:
db:6a:06:d9:46:2a:f7:8b:62:cf:5e:14:a6:be:bc:
74:69:01:55:dd:b6:64:41:6a:f8:4c:3a:c1:92:2e:
71:de:9a:4d:0d:b0:86:61:b2:26:8d:7a:20:7b:5b:
7e:86:d3:2a:8f:bd:5f:15:4c:b8:c3:1a:48:40:e9:
f2:45:20:8f:7e:9e:7e:e8:72:cc:c0:33:5a:78:44:
7d:d6:66:2e:9c:32:bc:4b:a5:2b:be:24:26:87:4b:
e9:97:22:e8:15:41:90:9a:86:22:9c:fb:0e:85:50:
b3:e3:bd:eb:e7:a2:9e:6e:6a:02:45:80:fa:1b:b1:
34:92:6a:74:7a:de:78:98:fd:9d:46:a1:08:de:83:
83:dc:53:86:18:56:e3:af:2d:19:83:09:04:36:d4:
6f:8f:53:8a:31:b9:5b:b6:c0:04:f5:4a:10:6d:22:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:07:6A:3B:5C:44:0E:6F:1C:17:02:EB:10:35:DE:80:E7:0B:0A:EF
X509v3 Authority Key Identifier:
keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:d5:61:fc:7c:73:10:1a:d7:c8:0d:dc:a9:0c:49:e7:23:d4:
f2:24:69:ee:a7:92:2e:40:9c:69:63:0a:66:ed:cf:2c:13:f6:
12:e6:52:02:cd:ec:1a:83:7d:57:1c:35:ce:6a:4b:b8:4e:0c:
89:0f:e1:da:09:1c:51:09:a2:e8:bb:81:e5:5d:a6:a4:df:82:
a5:87:d5:75:94:7f:f4:35:64:18:2e:90:83:3c:b5:d7:77:74:
bd:fc:12:24:99:b4:8c:8f:e7:26:57:ff:2b:4b:89:a9:84:7a:
e4:33:d6:32:db:24:0b:ee:a3:3f:77:52:d6:b5:b0:96:67:67:
2e:ca:f0:8c:e1:57:3d:f7:e9:cd:b6:82:ba:d6:7d:3e:c5:5e:
f3:e8:1f:1f:d4:34:fa:30:b8:e2:fe:d4:bb:6a:27:48:ad:e1:
d5:aa:13:e3:06:b0:2e:f4:68:bf:56:9e:38:7a:06:0f:77:e6:
78:33:ac:77:92:c7:e1:4c:17:79:9c:24:31:a8:1f:bf:b2:19:
aa:39:10:ca:24:f0:52:39:df:1d:41:03:c9:a5:04:86:31:5e:
24:a3:b4:04:95:ea:f4:6f:67:6a:0b:34:9d:f8:a2:1f:03:13:
58:b8:54:ff:15:f7:64:16:57:3d:6b:9e:43:f8:dc:f3:dc:8a:
7e:ae:74:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:55 2026 by rpki-client