
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
File: -c2wYYjVT9E3MDC5IMjkRdstPVc.mft (raw, json)
Hash identifier: WJQE8aQCn9CNxVuhu9NyVwsALxly4ulYdBr7zpQvbyE=
Subject key identifier: 97:47:CA:FB:9D:54:97:75:CD:6D:A9:FC:EE:76:E9:D0:78:7D:C3:50
Authority key identifier: F9:CD:B0:61:88:D5:4F:D1:37:30:30:B9:20:C8:E4:45:DB:2D:3D:57
Certificate issuer: /CN=A91A99F8/serialNumber=F9CDB06188D54FD1373030B920C8E445DB2D3D57
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
Manifest number: BA
Signing time: Sun 01 Mar 2026 08:22:07 +0000
Manifest this update: Sun 01 Mar 2026 08:22:06 +0000
Manifest next update: Sun 08 Mar 2026 08:22:06 +0000
Files and hashes: 1: -c2wYYjVT9E3MDC5IMjkRdstPVc.crl (hash: 3pcsz2z6wXHU0PGAYboeoC27QPD2YC4UGIArw/IPnIE=)
2: C4D0CEECACF611F0AC34117FC4F9AE02.roa (hash: 7ucYBUaCLmqgDRuv79Vd3l7kVK2Q22cJEETdC+Ms3yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.crl
rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A99F8, serialNumber=F9CDB06188D54FD1373030B920C8E445DB2D3D57
Validity
Not Before: Mar 1 08:22:06 2026 GMT
Not After : Mar 8 08:22:06 2026 GMT
Subject: CN=69a3f72f-61e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:ce:19:7b:f5:6e:ba:b0:90:a3:6a:2d:e5:
49:ba:e2:2b:76:e0:16:47:93:69:ae:87:48:de:b0:
5e:99:2e:a3:c6:84:f0:a1:92:70:2d:9a:b1:75:72:
e1:12:57:e5:30:9b:13:4d:98:a5:37:5c:f1:d9:e5:
87:a4:4c:6f:d4:88:9a:e1:08:21:92:9f:42:3c:ba:
2e:fe:8c:f3:cb:0f:89:3a:f4:96:53:0f:a2:c1:34:
5a:67:6c:a1:98:86:4a:d2:67:27:39:ee:c8:47:06:
64:4a:2c:d9:0c:32:e1:59:15:7e:4e:e1:10:47:dd:
9b:28:a0:93:c6:f0:c8:2b:3e:f0:13:44:38:6d:3d:
d9:aa:ad:01:2f:9d:a5:34:2f:49:88:02:61:94:ef:
93:98:03:41:c6:4f:2c:ce:00:cd:8b:e6:3e:7a:b5:
2f:77:76:d1:15:15:45:ef:1f:44:f5:fa:29:df:85:
6f:64:b5:fa:cf:50:be:0a:17:f3:a6:f6:52:02:1c:
53:ff:aa:36:01:a7:d7:d1:8c:72:f2:a8:ff:cf:85:
4e:68:3a:4e:b3:38:1d:3a:33:2f:20:62:6f:3c:ea:
71:7b:86:28:a3:73:e5:4c:3c:fe:30:33:18:14:19:
50:0c:2e:03:fb:9b:8f:c3:fe:83:ba:b1:2e:13:8a:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:47:CA:FB:9D:54:97:75:CD:6D:A9:FC:EE:76:E9:D0:78:7D:C3:50
X509v3 Authority Key Identifier:
keyid:F9:CD:B0:61:88:D5:4F:D1:37:30:30:B9:20:C8:E4:45:DB:2D:3D:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a3:d1:95:1d:e5:14:cb:ae:e1:86:58:0f:d9:03:5b:c9:94:
77:f6:3a:56:10:66:a1:01:9d:27:aa:2e:31:93:b7:6b:4c:d8:
30:17:8a:0e:13:cc:ec:90:9b:4b:09:d9:20:87:fb:db:24:8c:
81:ed:c3:3f:91:3e:cc:e1:c7:2f:91:5a:06:91:dc:53:c3:cc:
e1:1b:6f:f8:87:e7:d8:05:af:f9:24:3a:58:1f:b9:f1:a9:b2:
07:cd:47:cc:69:1c:b5:3b:98:93:d5:16:1e:e4:88:30:b6:31:
0d:0c:3f:09:f8:51:21:a1:18:26:28:bf:2f:d7:6a:1e:1d:3b:
77:54:41:7f:a7:dd:ba:3b:79:61:d8:f3:1e:f2:8a:eb:fc:84:
dd:d5:a8:42:3c:b3:f2:e2:81:54:c8:41:26:f8:c5:82:5b:83:
57:af:ef:ef:58:c6:10:32:e2:4f:ed:da:58:1e:4d:51:b8:74:
9f:cd:d6:7f:9f:35:89:94:37:08:a3:e2:d4:69:13:fd:6f:44:
d6:80:2c:99:98:7c:93:cc:b2:e0:7d:4e:e7:b7:ad:a7:ec:e5:
92:1e:1b:bd:73:dc:7c:bf:18:1d:5e:ce:49:f5:92:b1:15:e0:
eb:8f:28:1a:92:ef:ba:05:84:5b:9e:8b:9c:87:e9:04:e7:f9:
d2:56:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:51 2026 by rpki-client