
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json)
Hash identifier: SDHEc9ECrB/AJ0XF87KzI8cvqLTYzt/A/96PI2+jbKw=
Subject key identifier: F0:47:5F:71:B4:BB:3D:99:61:CC:69:A6:44:EA:08:07:6D:F6:FB:A1
Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C
Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C
Certificate serial: 0EDC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
Manifest number: 0ED1
Signing time: Tue 12 May 2026 17:42:01 +0000
Manifest this update: Tue 12 May 2026 17:42:01 +0000
Manifest next update: Tue 19 May 2026 17:42:01 +0000
Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: +agqd3/SzaLcG9HaBPqkiv9bJzaxElhtKYgbv1W9qqA=)
2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: uK9y+gPM8Frp0brfv/3gjohOY8wSZFPP3WtdADUyL4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl
rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3804 (0xedc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C
Validity
Not Before: May 12 17:42:01 2026 GMT
Not After : May 19 17:42:01 2026 GMT
Subject: CN=6a036669-ea85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:47:2b:4b:de:02:07:de:dc:95:a4:a2:a2:
a4:23:78:54:34:ad:6e:5f:56:42:61:29:44:88:09:
ca:83:d9:79:9a:a7:5d:13:13:4f:17:e8:df:dc:d9:
d1:dd:c6:10:09:99:82:0e:c2:ee:fa:19:8e:f3:43:
1d:21:ba:cd:a0:b3:97:76:23:98:27:c1:50:5c:35:
fe:db:2f:80:2f:e5:21:a7:05:84:23:d6:ae:a5:0c:
82:dd:12:ba:ea:6c:f7:d1:c8:a0:f8:e9:42:c8:64:
0e:d4:b4:5f:c2:18:2a:0c:eb:b5:da:db:a0:d1:6b:
a8:e4:8a:2a:62:a5:1e:7c:14:2b:d8:3c:bc:89:a3:
55:d0:e9:c5:41:e3:b5:2f:65:20:e2:63:49:8c:f7:
36:4e:e0:43:d0:67:8b:a1:b2:18:b2:e7:bb:c8:23:
06:20:7d:4b:6c:dc:52:09:93:c1:b8:fd:97:89:05:
28:5c:4b:ae:97:ca:16:a2:24:5c:6f:71:9e:35:5e:
2a:89:28:71:13:b8:f7:63:1c:1c:44:14:11:e5:fc:
14:30:47:44:73:a1:5e:8b:72:fa:1b:27:2c:84:a8:
00:1d:4b:2d:0d:8f:99:c5:fa:e1:4e:e1:75:e9:18:
47:43:f1:e1:93:e1:47:6f:0d:b5:4f:0a:78:f2:e2:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:47:5F:71:B4:BB:3D:99:61:CC:69:A6:44:EA:08:07:6D:F6:FB:A1
X509v3 Authority Key Identifier:
keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4f:fe:77:9f:33:e8:47:f8:92:c2:aa:89:e3:b2:2f:10:1a:
fa:10:eb:20:6f:5d:7f:ef:17:6e:f7:3b:54:a5:6e:6b:26:e7:
19:00:c7:bd:81:93:f1:65:36:09:cf:97:55:eb:04:8c:dd:7d:
8d:f5:6f:79:81:5b:d4:3b:0d:2a:9f:b2:61:c9:95:ea:31:94:
99:d1:7d:b2:b7:fa:80:bd:87:7b:d1:04:c4:32:09:78:f3:9e:
1f:c8:bf:3b:3b:8e:49:90:e0:ff:44:b6:f7:eb:17:88:7a:14:
37:ee:0f:d2:32:79:2b:0a:06:a4:36:6e:d9:9d:b7:21:5d:7b:
aa:11:54:97:7f:cb:1b:7c:56:eb:7b:b8:37:aa:81:99:54:fe:
bd:a9:2c:7e:23:09:9a:1f:21:e5:6f:81:57:e7:9b:42:2c:3f:
a8:9f:18:92:36:fd:85:33:5d:b3:55:35:e9:fd:eb:f3:db:56:
e7:bc:ca:8b:bc:fc:bd:ee:38:b9:ad:a8:40:fe:b1:97:4c:99:
21:88:9d:cd:88:94:a8:07:02:f7:d1:d5:71:47:a8:6f:5b:89:
67:36:3a:62:54:ac:f9:1a:48:a9:02:6f:37:71:90:0c:e5:46:
ac:76:a9:4a:f7:21:2d:da:9e:ec:b0:1b:31:6d:9c:18:7f:ee:
d6:71:ed:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:05:18 2026 by rpki-client