
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
File: 2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json)
Hash identifier: IWiJ1Too9EN9zZsgFDZtJffWVNIaZai9nWAPYe7u3iY=
Subject key identifier: 5A:B9:15:48:B5:4A:AB:6B:E8:1F:1F:D9:2E:56:48:E6:43:88:5E:72
Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Certificate serial: 1ADF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
Manifest number: 1AC3
Signing time: Sat 28 Feb 2026 16:21:39 +0000
Manifest this update: Sat 28 Feb 2026 16:21:38 +0000
Manifest next update: Sat 07 Mar 2026 16:21:38 +0000
Files and hashes: 1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: kYnD0d7HElVCCZMoMu05nEHMNem7/EgVxZrWIrA56cI=)
2: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: BhjSntJM5KeISAX/AXFVMKFsUVqLH2ibjtVSQJsKXQw=)
3: C443D86A55A311E7896BED09C4F9AE02.roa (hash: Md7FGHYItHQGM6UAMc/mZeAi1jZyh5HUwbkDmuddpAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6879 (0x1adf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Validity
Not Before: Feb 28 16:21:38 2026 GMT
Not After : Mar 7 16:21:38 2026 GMT
Subject: CN=69a31613-d8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:8c:ea:1b:30:e4:28:a7:7b:ec:c6:2c:51:
2c:aa:dd:8d:6a:4b:ce:9f:20:70:11:e5:ab:2d:1a:
b6:bc:aa:f4:f8:db:e4:fb:7d:71:e2:f8:31:9a:8f:
87:22:9a:b6:22:1f:83:e3:19:c0:e3:35:0a:44:63:
c5:e2:c5:4e:ce:57:bc:35:b7:98:6d:2c:0d:1e:92:
a0:dd:d2:a9:d0:7e:ee:c9:f0:af:56:d9:8c:46:f5:
88:4f:a2:04:4b:49:7f:90:64:af:a7:ee:f5:dd:04:
8f:fa:55:7f:b0:27:77:d7:42:a8:be:c1:e3:e0:d7:
c2:bd:80:29:dc:23:c9:de:d0:0f:cb:6c:b9:b7:37:
0b:22:34:8b:0f:48:60:7a:ab:64:23:37:55:39:0e:
f1:9d:8b:7c:16:b1:92:db:b4:f7:b1:f2:2c:17:e7:
7d:1f:23:3c:ea:43:f1:83:5a:40:59:bc:a3:eb:ef:
42:da:bf:bb:b1:16:85:b2:dd:ef:87:2a:b8:16:ee:
e4:1e:66:9a:9c:ae:75:8f:30:41:f6:69:34:bf:8a:
b0:11:08:92:0a:9e:f4:a6:81:8a:65:f0:83:a4:0b:
15:ce:81:f4:99:3d:11:3d:ff:12:ac:fe:c6:06:b3:
1d:9a:05:38:69:b2:94:23:c1:eb:d6:d9:79:f9:e9:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B9:15:48:B5:4A:AB:6B:E8:1F:1F:D9:2E:56:48:E6:43:88:5E:72
X509v3 Authority Key Identifier:
keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:a9:b2:79:6c:12:d3:95:4f:06:ff:37:0b:7e:c3:76:59:21:
b6:fe:69:06:c3:fe:06:ce:d5:5f:73:b2:8e:b2:94:d9:fd:f2:
b4:cf:30:75:27:f2:de:77:d9:a7:c4:59:e6:0b:70:0f:20:71:
1a:77:c5:96:20:37:68:99:44:db:9e:7a:37:59:ef:33:9e:4c:
28:62:f9:70:49:51:bf:f3:a2:f5:83:27:01:d4:ea:f5:03:5d:
7d:04:23:62:6f:c4:9d:3e:f3:ca:97:7b:15:e2:36:19:a2:11:
f4:b9:f0:ff:65:df:58:30:43:55:00:5c:3f:10:8c:0b:62:99:
d1:51:19:51:9e:66:16:a9:13:1f:59:67:2d:c4:d0:80:46:89:
c7:ba:d1:aa:7c:f0:03:6a:c2:d8:14:e7:80:33:79:95:f1:39:
be:e5:04:05:22:a4:a4:0a:a9:da:aa:cc:57:a5:bb:76:94:c1:
cf:e9:88:d5:c6:df:56:2b:3f:82:d3:26:e3:3e:5c:ab:5d:c2:
2e:20:a9:95:3a:b1:1e:4e:d6:f0:19:e4:f2:11:cc:1c:48:3a:
c9:d3:5f:37:8e:30:6f:ba:85:15:4e:86:04:01:6b:11:ba:0e:
9c:82:5b:89:21:68:15:ed:44:14:66:a3:e7:35:dc:6b:56:12:
00:ec:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:06 2026 by rpki-client