
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json)
Hash identifier: 0oKFGsOQytc1IBSf0L3MYE9yfl2aNvZ6GshtoPSe5ZI=
Subject key identifier: 43:69:A2:B2:50:75:CC:8D:D2:96:E0:6C:43:CE:F9:D1:61:A7:FB:8D
Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D
Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D
Certificate serial: 08A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
Manifest number: 0C17
Signing time: Sun 01 Mar 2026 23:46:55 +0000
Manifest this update: Sun 01 Mar 2026 23:46:54 +0000
Manifest next update: Sun 08 Mar 2026 23:46:54 +0000
Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: j87M34ny+jfpc6PaeajTJMMfHnsMnD2hyoxcMhZ0bcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl
rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:46:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210 (0x8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D
Validity
Not Before: Mar 1 23:46:54 2026 GMT
Not After : Mar 8 23:46:54 2026 GMT
Subject: CN=69a4cfef-7b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:1a:02:c7:4b:fc:98:2f:34:e6:0f:1b:a2:
bd:fc:9d:64:ac:ad:d9:88:9f:e8:5e:3d:2a:d5:45:
7b:37:75:05:f1:ec:8d:30:14:9f:cc:84:d1:45:a2:
d0:9d:d2:85:24:34:d9:9b:c0:d0:9b:eb:e7:66:e1:
c6:ed:10:43:7d:3b:11:d8:d7:11:c0:cb:22:a2:7c:
6d:69:bc:04:07:6f:11:c6:77:aa:1e:f8:30:eb:b6:
c0:42:db:61:d9:a2:f7:a0:19:80:17:00:75:be:e3:
e6:93:2a:71:8c:0d:c5:4a:17:d2:85:41:df:96:23:
a8:aa:ff:7c:81:2c:dd:71:de:28:57:1c:3b:01:ff:
80:6a:f2:87:46:2c:c5:2f:8c:b4:97:8c:53:16:fd:
16:1e:ef:0c:63:f0:cf:92:e7:fe:01:a5:ba:bb:4d:
85:15:8a:8b:5e:63:ce:f9:71:77:af:35:a8:18:31:
2f:0c:f4:45:b2:4e:27:9a:a8:e9:80:c9:b4:b4:34:
c4:0e:16:54:73:c7:e4:11:c6:71:73:65:c8:71:3f:
51:4e:5d:14:71:84:fe:b3:cf:13:26:db:9e:9a:7d:
14:fb:d6:fd:44:3f:d2:28:06:17:0b:d2:b1:02:bb:
94:5a:c6:0e:7a:7c:21:0f:c2:b3:07:5c:dd:f6:9f:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:69:A2:B2:50:75:CC:8D:D2:96:E0:6C:43:CE:F9:D1:61:A7:FB:8D
X509v3 Authority Key Identifier:
keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:a5:88:68:fb:34:1a:e5:a8:c2:94:af:b0:fb:61:8c:68:5c:
de:80:ba:7b:05:ff:fc:39:c0:97:46:69:1f:7d:80:88:0e:8a:
2f:5b:22:83:df:5c:11:c0:78:18:41:2b:67:3f:31:80:16:16:
be:f0:24:1f:f7:e6:c6:86:35:0c:8b:ac:93:41:d7:cf:ed:4d:
2e:a6:ee:e2:d7:02:84:cb:6b:97:68:28:f0:18:dc:32:d4:a1:
2a:f4:92:47:97:9b:a8:16:b0:e6:f4:db:c6:b9:ab:13:4f:ac:
f2:c5:17:6e:12:a3:3b:1b:19:db:6b:35:8f:36:7a:32:a7:31:
86:4b:71:ce:8b:ae:26:23:a4:85:e2:9a:c9:86:06:0e:75:df:
cf:7b:4a:ea:38:8d:8c:9e:7d:13:dd:43:7d:74:06:5f:63:3f:
82:cc:02:02:05:a4:48:75:ca:fc:1b:be:75:aa:b2:90:b1:77:
f4:7d:a8:18:05:6d:43:ae:13:b7:c8:d7:59:aa:0f:23:14:80:
2f:17:43:5e:02:58:a2:50:72:5a:d3:99:de:7f:33:b1:47:86:
77:63:4f:9f:77:bf:28:81:b7:0d:fd:eb:fd:f3:b7:cb:97:be:
57:d6:a4:4c:82:44:34:01:43:e9:2c:05:f1:6e:c7:95:f7:2a:
4b:32:75:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:11 2026 by rpki-client