
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json)
Hash identifier: 06LE2Sokgo2g5W4ohveOmyX9WTMtyHhYae0oQy7wlJo=
Subject key identifier: 59:4A:A3:18:0B:C8:30:CF:17:A7:22:EF:10:CE:57:8C:C2:78:FB:88
Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
Manifest number: 0157
Signing time: Wed 13 May 2026 05:05:18 +0000
Manifest this update: Wed 13 May 2026 05:05:18 +0000
Manifest next update: Wed 20 May 2026 05:05:18 +0000
Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: 9gvxavIdI0I6TZ6FZlVQeBIiz1u0suYVKGfOW5oQoQI=)
2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: 7YDIAXpxtepTGgytxzf3JRe5GhlXCpzZeaIbOoOU8ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Validity
Not Before: May 13 05:05:18 2026 GMT
Not After : May 20 05:05:18 2026 GMT
Subject: CN=6a04068e-e6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:f7:02:e8:b1:24:63:6e:35:0e:83:d8:49:
22:69:1c:21:00:57:34:23:c7:00:b1:ec:91:7e:24:
82:f1:f5:2c:9b:4a:8f:bd:34:d7:af:a9:93:a6:58:
64:2d:16:84:4d:1e:37:7e:80:9b:72:88:6d:bc:21:
b2:43:d6:13:e5:34:c8:e8:cc:f3:13:ce:64:27:13:
37:13:1f:c6:ce:85:e6:d7:20:49:6d:a5:13:82:ac:
71:2b:52:e9:45:54:73:26:ed:e0:64:60:47:88:62:
3c:66:da:35:e6:31:98:59:05:8b:5b:6a:bd:53:4e:
57:62:a8:4b:a2:3a:01:1d:78:cd:39:71:9d:d2:aa:
4d:8d:9f:59:72:f2:8c:d0:1e:0e:e6:af:bc:0c:55:
f0:11:1a:a7:2d:c7:a4:8e:23:af:1b:3f:7b:c9:2d:
89:c0:68:97:fd:e6:94:17:8c:bb:61:2f:a4:e6:ee:
14:cf:a1:d4:85:1d:2a:46:c8:52:2b:7b:52:20:8b:
c5:86:62:5a:76:a9:fb:8c:51:34:b7:b4:df:a5:ce:
e0:69:ae:8e:bb:25:0f:f5:f7:75:9f:23:1c:d5:7e:
cd:9a:25:78:de:0a:3c:91:a5:6a:99:d9:e2:fc:89:
e3:c2:e8:34:3d:4f:49:6a:dc:80:c7:e6:2d:e8:c1:
68:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4A:A3:18:0B:C8:30:CF:17:A7:22:EF:10:CE:57:8C:C2:78:FB:88
X509v3 Authority Key Identifier:
keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:99:52:a8:eb:91:df:cc:b5:b6:f9:df:15:98:93:2b:66:3c:
b0:f1:16:20:65:fc:d2:95:f8:79:ca:a5:94:1d:06:4a:33:fb:
3a:7c:12:4d:e3:65:e5:0d:a7:cf:ce:b8:79:a0:02:e3:71:7b:
a2:40:d7:6a:cd:88:19:ba:2a:17:5c:c3:f7:e8:cc:cc:ea:06:
41:b7:f9:48:52:63:87:c0:8d:b5:23:1f:43:c7:db:fa:69:ec:
4d:0f:08:9e:eb:3e:44:d2:f5:03:92:42:c6:1b:cb:9e:6c:d0:
ac:94:c5:e3:16:cc:45:57:ae:b7:58:27:6f:b1:ea:de:5e:17:
50:bf:76:6e:78:3e:25:8f:8a:19:bf:17:9c:f0:72:36:92:0a:
0b:56:20:bd:fd:3b:81:4a:3c:2e:d4:00:50:88:a5:9d:1a:37:
93:26:66:ad:3b:24:a0:86:c4:17:f1:e5:5a:52:4d:ec:35:d6:
f9:43:22:64:f7:5f:86:18:97:7b:40:84:ca:b1:7c:e7:b6:43:
69:1e:af:d9:e1:b0:2f:0f:59:09:88:90:35:ff:5f:21:ab:01:
ee:a4:8f:11:d0:69:b9:0f:e5:4b:7f:d7:1f:43:ed:ef:1c:c8:
f8:9e:18:64:fd:b5:4a:bc:32:95:ab:8b:35:6f:e7:3d:0e:8b:
2a:aa:a3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:52 2026 by rpki-client