
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
File: 2TXs95kTG-wkONqd6CtoWJY8cFw.mft (raw, json)
Hash identifier: TWUx1vXptlcC5ki4EUi2khnOndaPYxuTPseE/bSCdF8=
Subject key identifier: 1B:4E:D3:51:AD:B5:0C:A0:79:53:F6:91:46:A5:27:B5:18:1E:E6:37
Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C
Certificate issuer: /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
Manifest number: 34
Signing time: Sun 01 Mar 2026 10:03:29 +0000
Manifest this update: Sun 01 Mar 2026 10:03:28 +0000
Manifest next update: Sun 08 Mar 2026 10:03:28 +0000
Files and hashes: 1: 2TXs95kTG-wkONqd6CtoWJY8cFw.crl (hash: Hvn2Fp0D0rLj0hRTx11AcyqXW6QhD8oZ40zabCOBS4g=)
2: EDD5097ECB7411F0A2C24D4FC4F9AE02.roa (hash: HCkuebr9HV42wP4+Tkes5jAKhv3pdZCIfJI8PjfVHow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl
rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
Validity
Not Before: Mar 1 10:03:28 2026 GMT
Not After : Mar 8 10:03:28 2026 GMT
Subject: CN=69a40ef1-7fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:50:c2:5d:90:c3:03:b1:bc:8b:4e:0b:1d:
86:8a:e5:00:62:52:3b:bf:b2:56:dc:e8:60:e6:ef:
bc:8a:39:12:e2:e1:ac:fd:c6:40:64:26:81:5b:35:
13:c1:0f:41:5a:48:20:49:99:e6:99:03:2a:6e:8a:
2e:3a:e7:e3:c0:4f:5c:b2:f8:42:b0:c7:8f:f3:ad:
7b:d6:d7:a2:ce:69:3d:8c:67:09:5b:ee:71:c5:05:
8e:40:16:4f:9b:65:27:f2:b1:8d:a8:f7:56:88:30:
24:95:29:2d:38:cd:4b:23:b1:43:53:74:39:8a:56:
17:88:cd:3a:2b:7d:19:1c:7e:1d:21:b6:34:bb:23:
0b:d1:5d:68:2a:94:1a:98:ea:1d:19:ca:26:ad:c4:
fc:2d:0b:5a:e9:e9:b6:44:16:7f:b8:cc:02:13:8b:
fa:9a:ae:1d:e9:17:17:67:62:16:ba:24:68:e9:8e:
bd:9e:89:30:3f:7d:75:bd:fa:08:25:85:90:ad:fb:
64:48:2b:55:b4:23:a5:78:60:b9:c2:2c:56:c4:14:
f5:22:82:63:14:ae:a8:e4:b5:40:27:f9:86:23:7e:
a7:d8:3b:8e:2f:89:db:5b:65:3b:48:c3:96:6d:4b:
fe:27:7b:5f:6e:8f:54:dc:25:10:4f:71:b4:82:5b:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4E:D3:51:AD:B5:0C:A0:79:53:F6:91:46:A5:27:B5:18:1E:E6:37
X509v3 Authority Key Identifier:
keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:64:f1:28:72:0a:b7:ba:41:6d:9c:11:0b:ed:3f:7b:a1:29:
14:1f:32:4f:ff:c1:f1:8d:12:64:53:8e:02:e4:ff:f5:cf:2e:
11:71:ee:6d:5a:ff:a1:9c:a4:5d:1e:a8:8c:80:e7:c7:dc:fc:
83:7f:db:25:ad:42:b6:98:af:e6:4e:c1:01:f9:d1:eb:00:37:
55:82:86:b6:29:28:75:89:ec:32:52:a9:42:69:84:ce:ba:86:
b1:2c:a5:ea:8d:af:94:a1:f7:b7:a5:f5:e3:b9:0a:76:c0:5c:
15:e3:41:16:bb:0e:db:e4:1b:bf:8f:23:3c:18:f1:86:47:0c:
87:46:aa:56:25:19:91:a7:89:0f:2d:04:7f:93:e3:9b:21:78:
ad:03:5f:75:89:00:79:e9:23:e8:fd:d3:b6:25:34:05:e4:9c:
25:49:5c:99:d0:60:1d:af:66:7e:70:3c:b5:10:8e:03:f0:ba:
a0:d8:fd:9a:b0:c4:a2:23:0f:6e:91:28:28:cc:de:a2:97:fe:
a8:33:a0:e7:51:93:b1:9d:59:e4:89:41:10:18:ca:a2:56:ab:
e0:02:53:f3:a0:01:7b:b9:a0:06:19:1b:54:00:95:99:41:e9:
82:82:39:d1:a0:3c:71:94:d5:b7:26:81:13:e2:73:5b:94:7a:
1a:d3:78:a3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NDdFNDExMC8GA1UEBRMoRDkzNUVDRjc5OTEzMUJFQzI0MzhEQTlERTgyQjY4NTg5
NjNDNzA1QzAeFw0yNjAzMDExMDAzMjhaFw0yNjAzMDgxMDAzMjhaMBgxFjAUBgNV
BAMTDTY5YTQwZWYxLTdmZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCanlDCXZDDA7G8i04LHYaK5QBiUju/slbc6GDm77yKORLi4az9xkBkJoFbNRPB
D0FaSCBJmeaZAypuii465+PAT1yy+EKwx4/zrXvW16LOaT2MZwlb7nHFBY5AFk+b
ZSfysY2o91aIMCSVKS04zUsjsUNTdDmKVheIzTorfRkcfh0htjS7IwvRXWgqlBqY
6h0ZyiatxPwtC1rp6bZEFn+4zAITi/qarh3pFxdnYha6JGjpjr2eiTA/fXW9+ggl
hZCt+2RIK1W0I6V4YLnCLFbEFPUigmMUrqjktUAn+YYjfqfYO44vidtbZTtIw5Zt
S/4ne19uj1TcJRBPcbSCWzkrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG07TUa21
DKB5U/aRRqUntRge5jcwHwYDVR0jBBgwFoAU2TXs95kTG+wkONqd6CtoWJY8cFww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0U0LzAyMzJFNTQ4Q0I3
MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13a09OcWQ2Q3RvV0pZOGNG
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMlRYczk1a1RHLXdrT05xZDZDdG9XSlk4Y0Z3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0
N0U0LzAyMzJFNTQ4Q0I3MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13
a09OcWQ2Q3RvV0pZOGNGdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCSZPEocgq3ukFtnBEL7T97oSkUHzJP/8HxjRJkU44C5P/1zy4Rce5tWv+hnKRd
HqiMgOfH3PyDf9slrUK2mK/mTsEB+dHrADdVgoa2KSh1iewyUqlCaYTOuoaxLKXq
ja+Uofe3pfXjuQp2wFwV40EWuw7b5Bu/jyM8GPGGRwyHRqpWJRmRp4kPLQR/k+Ob
IXitA191iQB56SPo/dO2JTQF5JwlSVyZ0GAdr2Z+cDy1EI4D8Lqg2P2asMSiIw9u
kSgozN6il/6oM6DnUZOxnVnkiUEQGMqiVqvgAlPzoAF7uaAGGRtUAJWZQemCgjnR
oDxxlNW3JoET4nNblHoa03ij
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:43 2026 by rpki-client