
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
File: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json)
Hash identifier: q1/ZSIKrrpMFzlSYDJMUJPHV4N1g2zLLSFxl8bNhxvo=
Subject key identifier: 22:38:B6:AE:60:E4:1F:44:96:6E:D8:0F:FA:CB:2E:D2:91:03:39:51
Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Certificate issuer: /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Certificate serial: 06FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
Manifest number: 06D5
Signing time: Mon 02 Mar 2026 00:33:58 +0000
Manifest this update: Mon 02 Mar 2026 00:33:56 +0000
Manifest next update: Mon 09 Mar 2026 00:33:56 +0000
Files and hashes: 1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: pRM+Ec5sGFpYiYdWIAfqrsSC0nnDC+akmghiKpsp2Gg=)
2: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: kK1XQ5Qi/71Yzi7I23BLNly3sjDmgPxSxXxrn5KrS+k=)
3: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: mIm/bbZcQkFrDlz9RJ874pUYBEB1ADCrlxMEBQ9UkoE=)
4: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: Axv4ofsSe90yP+Tj74eBTq7TDNPSfa7eV4MAl8BctRE=)
5: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: EIzNMKDFWXT+xpDDB3WLdazu32oeLTAqnJXbS3MPXsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1789 (0x6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Validity
Not Before: Mar 2 00:33:56 2026 GMT
Not After : Mar 9 00:33:56 2026 GMT
Subject: CN=69a4daf6-0f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:67:7f:ec:99:3e:33:6b:9d:df:e3:1f:82:b4:
f4:2d:1a:f4:8b:4f:bd:0f:e7:6e:6c:12:e2:3e:2b:
47:26:fe:08:b1:18:3a:b8:4a:54:72:b4:15:27:4f:
5d:77:a5:b7:dd:43:14:cc:81:cc:ad:2c:12:92:f3:
50:ac:20:5f:f0:5e:0c:21:2b:63:80:dc:25:7e:e7:
3d:59:64:91:5a:8e:9d:9c:54:59:b4:cb:80:a2:cf:
8b:83:2f:83:6d:a3:5d:e2:d3:9b:fa:e2:77:4c:c3:
d7:9b:83:47:e4:36:bd:34:4a:d1:52:94:4d:e0:c4:
35:d0:6c:b1:de:b6:b3:97:e2:c1:c5:9f:04:d5:ea:
e8:61:73:dc:60:c4:12:ec:7d:04:55:c8:b0:6a:b9:
36:a9:83:29:17:7b:58:46:98:33:b3:38:1a:c2:ab:
c9:91:af:19:e2:8c:cc:a7:f7:8e:4d:04:64:5d:4a:
17:2a:d7:2c:53:69:f7:2a:f0:4f:86:2c:5a:c8:38:
34:e7:b0:38:0c:eb:d8:64:a4:66:fb:c5:20:4a:c7:
e9:d6:ad:45:20:93:ef:d8:a6:0f:9b:3f:02:59:bf:
7a:d1:3a:f6:9d:51:ab:6b:d1:60:ee:bc:4b:1a:89:
46:d0:59:a8:3f:19:a4:e3:88:f9:1c:97:30:44:f3:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:38:B6:AE:60:E4:1F:44:96:6E:D8:0F:FA:CB:2E:D2:91:03:39:51
X509v3 Authority Key Identifier:
keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3e:83:de:2e:98:1c:ad:b5:14:81:c3:35:de:d0:e8:18:cb:
ee:a2:55:a2:b2:13:63:50:ad:48:c9:c7:e6:57:06:7d:f4:94:
f1:93:f5:98:64:58:78:a4:5d:a0:35:d3:37:1f:d6:64:dc:04:
49:6a:46:41:4f:58:5b:68:43:ea:d3:24:81:a8:81:49:a9:7f:
ec:d9:4c:83:29:08:50:66:0d:1e:5d:3b:f4:b2:73:91:57:1f:
9a:a1:db:06:df:2c:20:e8:dd:49:5f:63:fa:92:57:f5:bc:2b:
fa:96:7a:5f:0a:d4:5b:52:ff:e5:db:55:db:f5:ad:46:2b:50:
fe:01:ae:d4:c8:b1:15:b3:8b:4f:ce:71:dd:70:d8:e9:c2:d3:
41:62:b4:33:63:c6:55:0f:fa:87:65:6d:7e:32:4b:6e:a5:60:
69:e3:d2:df:32:9e:8c:82:3e:c9:35:e6:77:4d:d9:c6:95:68:
de:3d:b6:0a:5b:0a:33:fa:7d:09:2f:d2:39:41:da:bc:fc:59:
d1:38:ad:4e:85:24:24:e5:35:b0:ce:b5:c8:e0:91:26:fa:eb:
21:9f:10:6d:00:18:92:59:11:83:5c:79:16:e7:c1:ae:1e:cf:
44:75:83:69:35:b5:2d:6e:7c:22:fa:8a:04:ab:b6:20:77:e4:
96:55:a5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:15 2026 by rpki-client