
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json)
Hash identifier: MtTGSk/muga8+N6oHYQLIPl/sfe7BEg4D5sZnsPX4uQ=
Subject key identifier: A8:AD:F7:ED:74:48:93:E7:02:00:2C:02:02:66:3E:B7:B0:F3:E7:E1
Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Certificate serial: 112B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
Manifest number: 1111
Signing time: Sat 28 Feb 2026 17:21:49 +0000
Manifest this update: Sat 28 Feb 2026 17:21:49 +0000
Manifest next update: Sat 07 Mar 2026 17:21:49 +0000
Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: fT7kidPoxuvRTdHVMxOsunQUFxeMjngWVIc4rgeVOxs=)
2: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: EbivVKsv2oyupGDtV6dF4T5ILVyhqV2iONhViZoJNxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4395 (0x112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE096, serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Validity
Not Before: Feb 28 17:21:49 2026 GMT
Not After : Mar 7 17:21:49 2026 GMT
Subject: CN=69a3242d-b225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:c5:c9:99:45:2f:1a:39:7f:77:a6:db:2e:
bf:b7:5e:e8:8c:d1:c5:88:8e:dc:d7:33:87:70:1e:
33:3b:3d:04:18:8b:5e:f9:b7:aa:3c:1e:65:bc:1c:
80:91:00:b7:d6:91:2b:c4:be:bb:a1:90:29:6b:2e:
a4:4f:1c:b9:0b:be:cc:4d:e4:e4:e3:bb:e7:57:36:
3f:e0:e7:f3:66:31:b9:6d:2a:d2:47:18:0a:a9:3c:
8f:8d:c6:65:72:4d:10:1e:67:0a:cd:19:6b:ea:6d:
ee:8d:da:65:ba:26:26:bd:4c:dc:d4:87:e6:3d:2d:
e4:5b:25:bf:51:63:0c:c9:06:aa:5c:61:fa:71:2f:
f6:bf:be:0d:0f:8e:14:87:fe:d6:c1:d3:4e:43:ba:
42:49:b1:39:d5:ed:75:94:8e:3d:27:53:5e:e3:a4:
92:ce:59:51:2b:a7:cb:e5:dd:da:e4:96:59:e0:70:
f4:81:35:1f:0c:47:bf:b9:b3:8c:9d:46:ad:fc:0d:
10:a8:2d:bf:fd:6d:0d:b0:ed:ac:a4:e1:0d:1b:e7:
61:ed:be:ed:04:77:e2:03:24:f5:b8:ad:68:ae:29:
45:f7:48:9f:8f:8c:9c:33:d6:9b:54:13:b2:20:50:
9f:b2:c4:42:e9:2d:54:62:5b:66:97:07:ad:06:d6:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AD:F7:ED:74:48:93:E7:02:00:2C:02:02:66:3E:B7:B0:F3:E7:E1
X509v3 Authority Key Identifier:
keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:61:f3:75:fd:e3:82:da:c0:23:3c:22:14:22:d3:b9:5a:31:
6d:77:fc:70:3f:03:9c:97:b0:24:d8:42:bb:f7:0f:74:4f:44:
a2:3c:2c:c6:e1:b3:b7:a1:49:04:0f:65:e1:97:1f:4f:03:90:
10:3f:d5:43:35:b1:58:d9:ef:8f:ba:c0:6b:7c:de:87:2d:91:
4a:b4:38:ad:7a:02:6d:48:bb:de:a5:e9:78:2d:51:3a:a7:dc:
3c:30:a6:89:9f:72:ae:3e:18:b2:43:2e:56:2e:55:2a:7e:65:
bb:98:20:21:c5:0d:44:85:ab:7b:79:58:15:dc:1f:40:9a:59:
b3:8b:ea:4b:c1:1c:36:a2:63:42:79:63:d3:85:4a:c1:53:db:
18:1d:d7:f0:fb:de:7c:46:59:8d:bf:e5:44:c5:72:04:d7:c0:
5b:46:42:bb:6f:a6:53:bb:0a:4b:ba:59:fa:9f:70:1b:26:8e:
af:0e:dd:a0:a9:7e:c3:73:4a:fb:cd:4a:45:d8:bb:41:6a:be:
3e:cf:2b:26:78:29:48:5d:7c:0c:93:36:bd:74:b6:1c:da:d8:
25:68:e7:82:5f:5d:65:3c:a8:a1:d9:38:fe:2b:d6:56:71:0d:
a9:cc:3a:46:32:da:e5:e0:c9:d4:60:63:9e:7d:4e:b8:e5:f0:
c7:2e:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:12 2026 by rpki-client