
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json)
Hash identifier: +TnNY/FgdtIYvdUpn2kE9GGPccrwn11qo7PVtl/or0k=
Subject key identifier: DE:22:E8:DD:DB:96:BC:4D:D9:97:92:93:5E:A7:4D:66:EF:41:02:19
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial: 071A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
Manifest number: 0708
Signing time: Tue 24 Mar 2026 21:42:26 +0000
Manifest this update: Tue 24 Mar 2026 21:42:26 +0000
Manifest next update: Tue 31 Mar 2026 21:42:26 +0000
Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: jB/1myA733qvPfDNDcN9s38Qw7kI728eCsNkX0s6mP8=)
2: 88A31320809211EB938F4016C4F9AE02.roa (hash: hQTt0AFzBYtxdeGsE5h3TYl3htX01dC5soXQmdrd9Fo=)
3: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: rQHi52MocQB/prtSJtGO8uedEqwHLU7/+mRUSwiw+1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Validity
Not Before: Mar 24 21:42:26 2026 GMT
Not After : Mar 31 21:42:26 2026 GMT
Subject: CN=69c30542-5814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:dc:3f:10:ee:ed:fa:3a:45:68:c4:a5:7c:
8d:98:05:f8:56:5b:cb:aa:d8:13:1d:0c:e1:ef:64:
57:4b:39:76:4d:0c:96:53:5e:18:8d:1b:ad:de:27:
0f:29:f6:07:01:a1:65:c9:b1:cd:6a:b8:c3:5e:5b:
22:b1:51:98:a0:5a:1a:60:e0:7a:45:e0:00:86:18:
9a:85:f3:63:32:f5:19:13:ec:bf:35:d2:51:46:79:
1c:25:2d:75:27:2a:09:3a:ac:3a:b9:ba:95:1d:6d:
6a:5b:a8:cf:04:09:e1:53:bb:57:14:27:24:70:fe:
bd:83:f9:5e:50:c5:36:8e:ec:65:3f:0d:b1:65:69:
86:34:48:67:58:f6:ef:52:f4:28:5a:a0:85:21:1d:
72:70:91:99:88:0f:20:75:17:82:99:b0:f0:d8:a9:
11:90:5c:c7:3d:2a:32:e3:11:ec:3a:23:e4:73:8e:
86:81:2c:30:45:22:b6:7b:90:14:0a:99:ea:a8:7e:
da:7b:fd:3d:c1:98:4f:9f:26:4c:f6:95:6c:21:de:
fc:1e:13:1b:69:10:ac:79:62:cb:cf:55:a8:bc:6f:
8d:31:8d:5f:69:b2:85:bc:b2:39:3c:61:2d:ae:d5:
b3:df:fd:05:08:f4:39:df:68:2e:e1:53:dd:35:2f:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:22:E8:DD:DB:96:BC:4D:D9:97:92:93:5E:A7:4D:66:EF:41:02:19
X509v3 Authority Key Identifier:
keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:d7:4e:b5:89:be:49:05:5c:1f:fe:58:d7:c4:73:6a:2f:96:
08:f0:e0:d7:56:da:f0:82:8c:30:d6:44:e9:8c:42:2c:ca:4f:
19:22:69:42:36:55:90:81:50:a4:3b:0f:02:79:1d:a1:d3:13:
95:bf:17:5d:c2:42:35:ed:66:ea:f6:9c:a8:41:56:98:3e:75:
ed:05:2b:01:f8:07:ca:ae:38:d6:2c:d0:45:56:b9:c4:94:f6:
d8:61:04:be:0d:da:e4:28:0f:e8:b6:b4:33:71:b5:ab:5a:04:
9d:73:fa:28:cd:8b:63:79:1c:cc:8c:0d:48:fa:10:83:31:4b:
06:cd:ff:a1:df:7d:73:10:fc:31:69:ba:d0:04:b6:6a:4d:cf:
a9:e8:60:2c:db:6c:d6:21:ad:7d:74:77:45:7f:7e:46:ee:37:
84:98:f1:66:5f:85:98:9b:d1:07:55:46:16:f9:3b:df:28:ef:
c5:03:25:dc:e3:44:06:eb:7a:cc:71:1c:ff:4e:52:6c:67:01:
73:67:4b:13:82:0c:c3:40:ac:e8:24:7a:5f:47:72:5a:4d:0b:
c6:42:48:58:c1:79:aa:01:72:8c:f1:9f:24:3b:d4:2d:b9:06:
f6:2f:55:0c:50:f3:0b:0f:e0:41:2f:56:a3:0c:92:9a:bb:77:
09:09:86:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:16 2026 by rpki-client