
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft
File: 2QDd8konYiv5ZDdX7byv-u4yHDc.mft (raw, json)
Hash identifier: Jj/rPPGJ3qt5OYUgqkD2LIMHTGVKM9XfDU5FSw4zlcs=
Subject key identifier: BF:58:ED:82:3E:87:BD:9A:34:4E:98:87:C5:B4:06:B5:A7:03:D1:FB
Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37
Certificate issuer: /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37
Certificate serial: 0EF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft
Manifest number: 0ED9
Signing time: Sat 28 Feb 2026 17:47:42 +0000
Manifest this update: Sat 28 Feb 2026 17:47:41 +0000
Manifest next update: Sat 07 Mar 2026 17:47:41 +0000
Files and hashes: 1: 2QDd8konYiv5ZDdX7byv-u4yHDc.crl (hash: ZgX1qf9xLXwwwwp+gaX5UosG+BfQj+6SuKfG1b+2N18=)
2: A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa (hash: k08HrzQA4orJaDMpNJ4cYiGD96bVzWAF2REZWm3ObQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl
rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3828 (0xef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7773, serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37
Validity
Not Before: Feb 28 17:47:41 2026 GMT
Not After : Mar 7 17:47:41 2026 GMT
Subject: CN=69a32a3e-1c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:81:1e:6c:9f:d5:88:97:0c:8f:2c:32:50:b5:
ff:1b:9c:34:aa:16:a0:18:fc:0b:a1:88:ca:62:35:
f4:36:62:73:9c:f8:29:90:fb:2b:c1:bd:70:b8:f7:
aa:88:97:c2:bb:f6:0f:cd:8f:86:1b:33:05:cb:10:
02:3e:44:ce:04:d8:6b:ae:19:23:e0:f6:99:83:90:
b1:a9:d7:6e:8e:00:9a:c1:3d:91:cf:d4:17:7b:14:
b7:5e:54:04:55:e5:e6:e8:8c:1a:d1:fb:f4:78:12:
15:dc:d3:74:36:d4:43:76:4b:53:a9:cb:38:23:98:
ab:4d:4a:fe:c8:5a:d2:db:64:b3:0e:d5:b4:e7:7d:
f3:0c:d6:71:81:18:80:5a:78:0e:5a:78:cb:e0:a2:
ec:1e:0d:8e:77:ba:2b:f0:b2:71:d7:36:ff:da:1b:
0e:2c:49:5d:63:1b:2d:9b:38:e6:7f:ec:46:01:90:
cc:4b:e1:b0:fd:c7:81:f9:22:56:dc:ea:9a:56:7f:
f7:2a:75:a7:59:85:2e:a2:6c:f9:e2:07:a2:2f:1b:
a2:4b:d8:d2:b7:71:05:ab:85:d2:f5:cb:4e:6c:40:
da:a8:d7:14:99:a7:bc:7a:0e:b3:79:8b:2c:56:07:
35:ba:ee:95:17:d5:22:96:b0:d3:21:01:bc:5e:9d:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:58:ED:82:3E:87:BD:9A:34:4E:98:87:C5:B4:06:B5:A7:03:D1:FB
X509v3 Authority Key Identifier:
keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:c0:10:89:b7:ed:29:68:b7:60:dd:ee:12:08:5b:f4:e4:09:
01:1b:21:a8:3b:fb:dc:b3:19:d8:91:80:64:8d:7e:4e:4c:a4:
0d:ac:6d:81:7f:4a:68:08:d3:4a:92:54:b7:49:9b:3c:a9:a6:
45:03:74:f2:72:be:f8:22:e5:2f:ff:bf:6f:a2:f1:5f:07:db:
61:e3:bc:60:dd:aa:50:36:60:06:00:c5:25:4c:4a:93:1d:f7:
c1:6c:79:62:72:63:17:fd:9b:46:de:ea:b5:08:4b:f6:02:2c:
c3:e3:03:3b:d8:a1:32:0b:7b:8a:da:ad:7d:6b:7d:b6:86:a8:
0b:74:e2:72:9e:57:66:26:e7:eb:37:b8:66:b1:ab:62:c5:98:
ad:05:1a:40:0e:54:22:ce:d6:99:fe:aa:8a:3e:82:c5:a9:43:
4c:bf:22:07:ab:2d:83:54:e6:03:00:0c:f9:92:60:13:45:16:
ee:07:88:88:ba:b9:21:36:43:93:72:61:f9:4d:f3:69:28:7c:
ad:98:46:8f:24:53:75:2e:76:5c:13:aa:d4:64:ca:d3:1d:ad:
75:1e:38:21:cb:26:6c:11:37:56:0e:35:44:c0:e2:a4:b2:48:
5e:0c:ed:59:22:2a:11:81:7c:2d:bd:72:98:ef:98:bb:dc:fb:
eb:b3:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:34 2026 by rpki-client