
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
File: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json)
Hash identifier: RTnIzh2bxJR3wOuX3lzd/nKf7mIGCO6/9BESKDh0zZo=
Subject key identifier: 89:82:E1:09:1A:16:5F:1C:27:4F:80:40:DC:51:4E:83:EE:E7:49:2B
Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
Manifest number: 01AC
Signing time: Mon 11 May 2026 04:09:05 +0000
Manifest this update: Mon 11 May 2026 04:09:04 +0000
Manifest next update: Mon 18 May 2026 04:09:04 +0000
Files and hashes: 1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: X0X6fB1Q4KKivNIcf+8Tfpz+T2LlW/g/OVQeFnSLCYg=)
2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: Nm/9k1bK/nJvJq+EeJ6k6OoJJzoZhznxyzIVifoqxa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Validity
Not Before: May 11 04:09:04 2026 GMT
Not After : May 18 04:09:04 2026 GMT
Subject: CN=6a015661-c911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:b3:d7:68:06:8a:96:e1:57:21:3b:6d:b4:
15:0e:a6:30:bd:9e:18:f3:87:ff:d4:56:b5:1b:c8:
01:86:25:c0:af:fe:1b:34:ff:01:18:43:2a:31:e8:
cf:97:78:67:f0:46:93:7e:5a:55:51:5d:e4:5c:98:
48:49:cf:a7:65:cc:90:43:46:1b:5c:65:37:67:af:
9a:86:9b:fe:79:e9:32:77:60:c9:65:00:36:3f:20:
d8:92:d6:1c:3d:91:c2:28:a4:17:03:8e:70:cc:02:
f6:e6:d1:63:42:bb:6f:bc:be:24:55:d2:c0:e7:5f:
7e:5d:ef:5b:ac:b3:97:c1:a8:e8:7c:98:fc:4e:7f:
9c:a0:18:c5:fd:39:7f:70:cb:f6:57:7e:f5:8f:e4:
42:1b:1a:49:70:6c:c0:39:b8:17:82:e1:9b:1e:ec:
6c:15:90:9e:57:44:39:6a:c1:2d:f6:64:3f:9c:95:
7e:45:d0:e1:06:19:7c:d6:7e:cc:a5:46:13:b5:43:
03:f6:3c:ff:6c:75:e6:99:1e:00:62:c9:d6:98:44:
5a:b5:17:9f:f2:27:74:45:67:41:8e:9d:fc:a3:5e:
1c:97:32:de:f7:1b:6e:db:75:c6:63:1e:6b:85:16:
70:a8:04:33:bf:25:d0:b2:46:3c:d9:7c:80:9e:2e:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:E1:09:1A:16:5F:1C:27:4F:80:40:DC:51:4E:83:EE:E7:49:2B
X509v3 Authority Key Identifier:
keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4d:f2:bf:2a:5b:66:21:dc:52:26:5d:b2:e3:c7:0c:f3:dd:
b6:25:66:7a:25:4e:d7:aa:cd:73:9c:4e:22:1b:7c:35:46:32:
e2:0d:94:37:ad:19:33:30:38:24:ac:e0:04:d5:62:92:f7:c6:
d5:5f:61:21:a7:54:f7:38:87:73:c0:20:8b:34:fd:d8:12:2a:
b2:6f:91:0a:95:8d:30:91:1f:02:4c:4e:6a:96:ff:04:7d:9f:
29:53:d1:43:93:c3:c3:a6:b2:3a:9d:0f:5d:e3:b6:8e:eb:b2:
dd:ec:e5:c7:25:28:c4:f9:6f:66:ab:00:e7:ab:4d:ff:da:5c:
11:c0:cc:b3:2e:82:cf:48:c2:e5:ac:77:d6:2a:20:e6:8a:12:
da:60:3a:5f:87:4c:2d:64:ed:3d:50:4d:ca:01:8b:48:22:59:
ab:6f:08:a2:b7:a3:3f:0d:f6:f5:65:7a:b1:79:f4:99:e4:52:
02:6b:98:d8:b4:be:8b:c7:69:03:f5:70:da:50:a1:78:8b:fb:
76:df:31:e5:a5:5c:5f:b0:85:07:20:f7:d6:90:88:3f:e6:d8:
d4:2a:5f:30:b2:97:df:c6:35:7c:92:5a:d3:84:0c:f4:9e:93:
3a:2d:a8:42:2a:1e:39:b8:aa:39:ae:22:ca:f5:9b:3e:b7:3f:
b9:3b:ec:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:40 2026 by rpki-client