
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json)
Hash identifier: bSUTNvZHAaI6yCWKnX2wkK3m+SuOZlxQJU7Sk73Nr8c=
Subject key identifier: 3E:5E:41:82:17:92:C3:85:8F:95:79:3C:D4:A2:F6:6D:AA:7E:F1:FF
Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Certificate serial: 02A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
Manifest number: 02A0
Signing time: Mon 02 Mar 2026 02:49:59 +0000
Manifest this update: Mon 02 Mar 2026 02:49:58 +0000
Manifest next update: Mon 09 Mar 2026 02:49:58 +0000
Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: a466aHYnanrH/zmDwx07b9bzsHiCHmEPDhkZB+i+KW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Validity
Not Before: Mar 2 02:49:58 2026 GMT
Not After : Mar 9 02:49:58 2026 GMT
Subject: CN=69a4fad7-0855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8b:77:6f:b5:b9:eb:63:e6:b7:5a:98:98:d3:
e2:be:c2:1e:e0:12:8f:ed:99:5f:86:73:c1:fa:6b:
87:19:ba:9d:7c:16:11:9f:75:89:32:0f:ae:f4:60:
01:6d:ff:36:92:d8:d5:7b:49:b9:85:37:af:52:c3:
b5:33:a4:bc:a2:b0:f8:7f:b4:91:9b:2a:21:34:ef:
d9:44:f5:83:e3:91:0d:bf:4b:d6:ba:06:cb:74:8d:
cf:46:e3:7c:8b:9f:ea:4d:ef:ca:9b:01:16:86:c3:
c8:67:f8:d0:fd:3a:a6:d5:53:43:50:cc:e6:c7:8c:
20:29:51:11:b4:3d:7c:97:5d:4b:47:96:16:57:fd:
96:16:4a:d7:34:d3:64:d1:06:8b:60:36:2d:83:be:
b4:ea:5e:11:9a:65:e6:65:a8:b2:81:78:ab:a0:5c:
f7:a1:fd:95:47:6e:67:e3:92:c8:82:ce:00:92:9d:
37:f9:43:b9:e9:41:3c:a2:87:72:90:da:c2:c9:fc:
d2:06:a1:f5:86:0f:66:ea:19:75:36:14:eb:b0:10:
e8:29:c7:43:5a:2e:b9:47:94:40:7d:b2:20:cb:e9:
10:07:05:12:98:a7:0c:0e:4d:e6:00:ab:df:cc:9d:
37:8a:59:d5:54:bd:55:69:71:81:f8:5b:a3:6a:ab:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5E:41:82:17:92:C3:85:8F:95:79:3C:D4:A2:F6:6D:AA:7E:F1:FF
X509v3 Authority Key Identifier:
keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:ee:7c:e3:71:57:2f:bb:96:0d:16:81:a8:7c:e1:85:9a:00:
61:3c:fe:c6:da:64:b5:40:50:83:93:4c:0d:58:7d:bc:17:6a:
c0:0b:00:75:25:78:79:77:3f:9c:7d:8d:91:e1:1f:9b:f3:ae:
8e:3e:cf:a2:44:5a:30:d5:5d:a7:8b:54:0e:01:09:b9:fb:42:
10:c8:63:5c:a4:e8:a1:c6:bc:56:bd:27:73:cb:71:70:5b:57:
7c:8a:c4:bf:95:04:c8:7a:49:ea:b5:fb:73:9e:65:10:d6:95:
69:9a:75:4a:92:48:ba:87:b0:6a:1e:8c:a3:ec:77:88:6a:6e:
49:5c:f1:b1:9c:91:e5:50:10:1b:b3:5c:b1:5d:25:fd:59:09:
a1:97:f6:75:bb:2e:53:a3:45:6b:a2:35:5b:dc:b7:65:09:19:
81:76:67:8f:39:22:72:ff:62:39:f9:b9:d4:47:57:97:bf:f1:
02:15:ca:fb:52:94:19:2f:76:88:88:9d:04:48:5a:60:6d:97:
0b:76:4e:fa:1c:48:4d:87:31:32:9c:aa:9f:a8:b5:c2:42:fe:
88:4d:52:7d:e6:fe:ec:07:be:0d:d6:83:a4:52:d0:12:48:69:
5b:b6:ac:85:78:67:40:af:8e:7a:87:c9:ba:d2:7a:9f:b8:0a:
35:a6:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:42 2026 by rpki-client