
$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
File: 2iwTK47FBxr425BJG63bwPCntEU.mft (raw, json)
Hash identifier: 7qZPTHrP4WSXuVXTJ1dddIT3VLX8I86EiOe80dEA0Uw=
Subject key identifier: 48:2E:DB:78:61:16:F9:65:B8:7D:CE:BA:23:7E:D5:95:06:42:0B:AB
Authority key identifier: DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
Certificate issuer: /CN=A91534B8/serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Certificate serial: 0315
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
Manifest number: 0315
Signing time: Sun 01 Mar 2026 02:01:05 +0000
Manifest this update: Sun 01 Mar 2026 02:01:04 +0000
Manifest next update: Sun 08 Mar 2026 02:01:04 +0000
Files and hashes: 1: 2iwTK47FBxr425BJG63bwPCntEU.crl (hash: PqNKbuFGJ3LxHnv8++pmqo6rp8A8Wld7qRWkjzkpRD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91534B8, serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Validity
Not Before: Mar 1 02:01:04 2026 GMT
Not After : Mar 8 02:01:04 2026 GMT
Subject: CN=69a39de1-944a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:15:24:07:fb:cb:b4:d6:43:56:4c:70:db:
4f:13:99:26:dc:e2:23:49:c1:93:fa:c3:c5:56:bc:
f6:60:c8:ea:c2:29:2d:07:dc:b2:5f:0d:34:42:9e:
48:62:ce:a6:f4:e9:6e:23:5d:53:a1:75:de:fb:51:
6d:e1:b3:ea:e8:38:9b:91:f7:7e:81:95:f2:cf:2e:
e5:a0:89:67:26:d0:a8:18:d1:e5:34:f2:98:7c:5b:
f9:f1:52:7c:a3:4c:ba:88:8b:6e:e2:54:3a:9b:a2:
e4:76:b9:7b:da:49:0c:cb:f8:ed:3b:cd:82:78:c1:
67:30:07:fd:f5:d9:ff:eb:c0:4d:9c:aa:0a:15:3e:
64:d0:82:85:f8:22:35:28:e2:92:31:89:05:7e:28:
88:26:3b:80:8d:31:9d:55:9b:40:ab:5e:ac:ee:6a:
29:94:29:25:c1:af:40:12:85:b1:ef:dd:b9:5c:df:
db:bf:a2:2e:9f:70:05:e1:c6:aa:a5:68:d6:d3:24:
f1:9c:31:4d:24:28:e5:98:a2:f6:ef:10:c0:11:e3:
3e:65:d3:f2:85:52:4e:08:48:a6:40:64:b1:a9:83:
0d:6c:8e:ed:9b:74:58:a8:19:f5:26:d2:c7:f2:ec:
c9:7b:0c:62:ac:31:37:d8:ff:57:c6:e5:05:b3:37:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2E:DB:78:61:16:F9:65:B8:7D:CE:BA:23:7E:D5:95:06:42:0B:AB
X509v3 Authority Key Identifier:
keyid:DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:01:fb:6e:23:85:42:ab:c9:92:d8:3d:2e:b4:e0:d3:1a:d9:
d6:ad:81:20:e9:6c:cd:ad:4f:95:63:d0:8e:cb:2f:af:a2:42:
6e:82:67:a8:64:9a:d7:7d:db:1f:da:db:8e:1d:be:46:49:84:
22:49:4d:a6:45:ed:0b:d7:c5:09:ae:86:2d:dd:30:5b:23:63:
8f:d4:ef:63:8c:bc:e0:47:28:da:0e:1f:3f:34:f7:e6:52:0a:
ec:81:24:01:c2:31:fb:7e:b3:53:62:55:96:ef:46:26:ec:a0:
1b:02:e2:e1:32:67:89:2d:b0:3f:da:aa:2b:7d:47:2a:66:1f:
a8:98:60:0b:9a:76:2a:86:67:8a:bf:12:e5:c5:e6:fb:a1:52:
e1:ab:51:2e:4c:ad:f9:2e:53:91:9c:b3:9f:52:36:06:83:3e:
7a:63:f3:a1:15:bd:f8:d7:b8:65:ed:65:fa:b6:08:76:e4:a3:
20:27:ae:ea:72:3f:dc:d6:7b:6f:c6:a9:89:a2:60:9f:ff:c6:
bd:d9:46:4e:55:4f:f2:c8:98:ca:e4:5e:16:19:07:44:5f:14:
f8:c4:2f:01:8c:28:04:36:10:6b:02:5e:c2:91:b4:ce:15:68:
02:8f:8c:9d:e8:6d:f6:39:28:d8:45:b1:77:0b:5c:39:2f:87:
cf:27:ef:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:37 2026 by rpki-client