
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json)
Hash identifier: Ejphccd26hsmCyBfZwRjVXGuwIMxSEp5/xJ68UwCSGY=
Subject key identifier: 06:C1:11:2E:50:CC:FF:B8:9F:E4:0C:BA:C7:08:62:2C:32:B7:69:B4
Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1
Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
Certificate serial: 0458
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
Manifest number: 044C
Signing time: Mon 02 Mar 2026 02:32:31 +0000
Manifest this update: Mon 02 Mar 2026 02:32:29 +0000
Manifest next update: Mon 09 Mar 2026 02:32:29 +0000
Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: 1p0S5VbrZ/pb+B35ccTk2JLAIx4HtUPyzC6rWuiACqM=)
2: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: Qk6UgrNlEArmTO1RmyrfsNa0aJyJurOhCrFKUSX8MPs=)
3: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: t4RKrujkT/4i2xBpLkewaVM7tHYA1/rkxo1ttRbmyIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl
rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112 (0x458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
Validity
Not Before: Mar 2 02:32:29 2026 GMT
Not After : Mar 9 02:32:29 2026 GMT
Subject: CN=69a4f6bf-f675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:a7:da:ef:b9:4d:cf:79:5d:53:d8:af:97:
d5:0e:f4:9f:8f:16:e8:b7:1f:22:e0:ed:0e:49:12:
a3:3a:2f:90:5a:ae:1d:2f:e5:7f:18:e3:14:63:9c:
17:2b:22:51:54:34:59:8e:00:48:dd:76:23:3a:06:
f1:05:89:20:cb:78:4e:85:4f:0f:dd:4d:74:56:ce:
df:95:0f:e1:92:31:2e:8f:10:5d:a7:91:39:fe:e6:
25:c3:e2:e8:a9:d0:2d:25:19:65:eb:c6:33:f6:9d:
23:8e:6f:4c:76:c9:88:d2:76:fb:35:b7:ba:7a:8a:
7b:11:c3:e4:c6:47:e1:0a:3d:29:83:1f:ef:6d:89:
76:bf:64:05:40:4f:85:32:43:39:ec:74:2e:c0:b5:
b0:c4:e3:f6:60:79:58:5d:28:d1:be:fc:e5:29:6a:
69:2d:c8:11:d0:17:cf:a7:b4:14:51:a3:80:6b:c5:
b8:d0:f7:4f:56:b1:57:25:41:ab:14:f1:cc:a9:f6:
a6:b4:4b:92:d7:04:50:7f:fd:98:af:49:d7:1f:6f:
b6:91:82:76:04:c1:a3:1d:6a:90:52:05:03:64:5a:
5e:f7:cc:ec:85:d1:d6:18:02:a3:e9:fe:98:6d:1b:
5e:58:54:a2:bc:c8:c0:d5:a7:85:3f:cd:5c:dd:02:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C1:11:2E:50:CC:FF:B8:9F:E4:0C:BA:C7:08:62:2C:32:B7:69:B4
X509v3 Authority Key Identifier:
keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5a:70:19:67:25:43:4a:23:f5:de:61:49:60:c2:67:c3:2c:
fa:b3:ca:00:09:76:f9:b9:6d:ec:d0:c5:0a:a4:cd:4c:a6:af:
e7:f5:59:66:e7:92:9f:15:d8:c6:d7:2a:e2:05:de:3a:c4:80:
70:d3:3e:9c:98:c2:0f:47:20:66:e8:22:4e:64:6b:67:4d:db:
08:30:85:a7:fc:e2:dd:32:fe:d4:15:15:b9:f9:73:8e:db:0b:
4c:61:2a:88:0f:67:17:52:6f:c2:bb:ca:f6:b8:86:e9:92:14:
db:e3:3f:a4:02:c4:a7:92:1b:88:c8:41:83:8c:aa:8e:24:04:
a2:cf:d4:00:66:c6:4d:5b:98:55:87:b8:37:d1:52:6e:8f:39:
2e:fc:31:ca:30:b2:21:e5:38:bd:65:f5:cb:2f:4d:49:55:eb:
aa:0e:1d:ba:aa:b3:06:63:e9:63:57:4b:89:9f:02:ba:97:16:
1e:55:52:f9:ec:b4:cf:37:a7:c4:5b:81:f7:b7:02:7f:2f:bf:
d6:97:ce:ef:3b:e6:32:be:25:73:57:98:08:07:9c:f8:c0:9e:
32:c2:55:df:8b:fe:91:25:97:bb:38:f1:86:69:fd:8b:6c:c2:
3b:73:77:a6:81:e9:fd:01:a6:aa:86:61:39:85:85:fe:ca:62:
15:a6:74:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:54 2026 by rpki-client