
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
File: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft (raw, json)
Hash identifier: pzN8x9iJ4NwQcCQmdhPoaaUNSUXHSgnRRtPLQIf5vnY=
Subject key identifier: 86:41:4A:F6:04:71:52:00:B9:DA:A7:FA:EA:D8:8A:37:68:0D:20:40
Authority key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
Certificate issuer: /CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Certificate serial: 26A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
Manifest number: 268A
Signing time: Mon 02 Mar 2026 01:26:03 +0000
Manifest this update: Mon 02 Mar 2026 01:26:01 +0000
Manifest next update: Mon 09 Mar 2026 01:26:01 +0000
Files and hashes: 1: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl (hash: 8Kk3hUsVZZAQ5t5LihonTGP4b4gp9uWMMBYi/dfG9uc=)
2: 764601EE6A7A11EFAF10EC37C4F9AE02.roa (hash: CJtNext5PGiHGHfRvis01icRrUClz7gxR8gb7K0FV7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl
rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9888 (0x26a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5030, serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Validity
Not Before: Mar 2 01:26:01 2026 GMT
Not After : Mar 9 01:26:01 2026 GMT
Subject: CN=69a4e72a-550a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:16:be:48:9a:ca:f9:9b:fa:a5:08:31:17:
cc:b4:43:2f:98:ed:6a:f1:8f:30:24:03:5f:82:a4:
1c:15:71:e3:91:2e:7d:13:a2:da:77:93:eb:9e:f3:
2b:49:6a:36:ec:ba:fe:e8:e0:98:d7:52:7a:87:bd:
48:4b:71:5b:b7:42:35:4d:77:9a:f7:59:7b:56:6b:
2b:4e:0c:dc:e0:1d:f1:be:64:b6:b4:dd:d9:80:10:
7b:58:83:44:dd:52:8b:88:7b:c4:94:a2:59:b3:e1:
6c:b6:f1:e6:14:91:66:ea:8b:c2:57:56:55:53:39:
6e:5b:56:b2:b7:df:60:72:fd:9d:f3:32:fd:b6:cc:
0b:8e:e1:f0:55:c3:b7:0b:00:f7:93:4f:8c:b8:75:
15:af:eb:bc:a9:03:81:45:8c:d0:c5:a5:18:fa:93:
e9:17:d1:ff:a0:2a:1f:ba:03:29:dd:4e:5f:f9:2a:
a2:e7:79:3e:e4:d0:e7:c8:21:fc:50:ae:7a:41:b5:
4e:64:f7:2e:b2:5e:01:57:cf:24:28:cf:c7:3f:17:
a3:4a:5f:ca:e2:db:b5:93:57:5c:08:13:ac:2d:ed:
67:dc:23:6d:6b:2e:e3:62:33:38:f8:af:9e:ae:04:
a6:aa:eb:c1:8c:4a:36:d0:bd:a5:00:c1:b9:1a:2a:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:41:4A:F6:04:71:52:00:B9:DA:A7:FA:EA:D8:8A:37:68:0D:20:40
X509v3 Authority Key Identifier:
keyid:87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:22:1b:ee:30:48:cf:83:d5:53:22:fb:28:02:ec:5c:40:11:
97:e1:03:73:6b:a9:85:22:e7:d3:da:3c:b5:9d:dd:b5:6b:27:
89:80:77:90:15:d0:00:8b:6a:cc:bc:ef:d6:c3:e6:d8:e1:9f:
91:71:25:06:0e:ed:f0:3e:d1:cd:fd:40:05:20:9d:5b:fe:9c:
71:4e:fd:a9:96:28:85:24:e0:8a:38:89:fb:4c:3d:61:1b:58:
5c:ff:82:92:0e:60:50:62:25:79:be:27:93:62:b7:55:46:01:
d9:70:a6:f8:cd:eb:c8:0b:21:bf:7b:17:71:bd:ed:49:af:5d:
c4:81:c7:41:ab:70:10:a0:16:a3:b5:a9:6e:73:4f:28:66:56:
88:6e:2e:60:f8:94:07:6a:6d:51:1a:04:bf:3d:f9:1a:2e:49:
c2:a7:50:14:8c:ac:fa:85:81:c7:6a:0a:39:43:6d:a9:11:c9:
b3:6a:ad:ae:1a:20:3e:92:39:f8:e1:74:ca:fd:e1:31:e4:b6:
d1:bd:48:b6:91:7d:f4:5d:69:55:b0:e3:69:2a:b9:06:62:61:
1a:13:26:9f:fd:29:ca:cf:39:36:9b:c9:cf:b3:b6:b9:6b:82:
99:65:db:fd:84:6a:ec:42:0a:13:66:7c:39:de:d9:56:19:c6:
86:26:9d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:44 2026 by rpki-client