
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
File: l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json)
Hash identifier: 7SvdIOCQCIWxpldAtEzv9Rqldw2iaYkAvCATqWDv3g4=
Subject key identifier: B6:2D:3A:07:07:2A:27:01:B6:68:FD:61:FC:69:A4:2C:DE:DB:ED:BD
Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
Certificate issuer: /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Certificate serial: 083A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
Manifest number: 082D
Signing time: Sat 28 Feb 2026 21:19:49 +0000
Manifest this update: Sat 28 Feb 2026 21:19:49 +0000
Manifest next update: Sat 07 Mar 2026 21:19:49 +0000
Files and hashes: 1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: SOredgRUzbeBVE7eWppNscY6MOE6wMDSa3+RKQV8YnU=)
2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: PTG7v7H/L/iB1kTQek05PTVpPv3OUl73Y3q6ui+6etU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Validity
Not Before: Feb 28 21:19:49 2026 GMT
Not After : Mar 7 21:19:49 2026 GMT
Subject: CN=69a35bf5-8866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:5e:0e:ff:c6:d4:b8:b9:c6:aa:4f:fc:19:
61:3f:84:32:9b:49:48:a8:55:21:87:f1:b3:e4:23:
d2:76:b7:83:83:38:1f:06:ed:a6:0e:8c:3e:9f:f2:
5b:bc:5a:43:29:b4:1d:43:f3:0c:ae:c6:c8:cc:a2:
9a:5d:7d:3d:c3:63:4a:06:7d:35:34:96:b5:b2:be:
3b:63:2d:fa:8c:50:45:20:17:df:07:6b:6f:6f:40:
f2:79:ac:e5:3d:b1:a8:fc:32:9b:6e:f7:87:d4:d8:
a7:52:06:94:0c:96:ef:47:c5:bb:21:8d:7b:72:38:
99:e9:47:3a:88:98:e2:43:02:d9:cd:28:d6:8d:df:
d9:92:b2:21:50:08:ce:d8:4f:1a:d3:dc:7d:56:a5:
02:97:62:38:50:f0:40:29:23:cb:ee:ce:51:0f:2a:
15:7c:03:95:0e:8b:ae:77:c0:8f:8a:c9:b3:21:93:
37:21:ad:dc:9a:36:36:17:e5:64:e3:f0:ed:96:c1:
0a:b4:09:4b:ae:65:dc:f8:96:a0:24:4b:3e:e5:23:
78:2a:e7:e7:38:da:66:a0:3a:93:15:30:9b:2f:bb:
0d:4b:01:7c:40:7a:5a:44:b4:ca:c6:0c:cc:c3:92:
8b:15:ec:dc:2e:e2:7d:2f:ce:bb:ae:ef:ef:5d:90:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2D:3A:07:07:2A:27:01:B6:68:FD:61:FC:69:A4:2C:DE:DB:ED:BD
X509v3 Authority Key Identifier:
keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:17:ce:69:c6:4a:0d:e0:72:e3:78:8b:85:f7:62:d2:93:f8:
06:8b:2e:3a:71:d3:a1:7d:eb:8d:ef:e3:3e:45:37:a4:c4:e2:
da:0e:e6:df:2d:e4:06:5c:8e:ea:3e:b8:e4:6a:ee:47:4d:20:
1f:12:7d:89:f5:2c:3c:4e:1b:2a:d4:2c:cd:64:c3:d0:23:0a:
a3:7c:92:be:fb:4e:86:e0:40:d8:ac:3c:46:5e:59:46:b0:84:
e2:e1:42:03:f0:83:ca:e6:91:be:51:47:ca:8f:e9:4f:e7:16:
b9:9d:5c:5e:3b:1f:56:e5:34:0b:e5:d7:ba:2c:b4:33:7a:b6:
81:ee:c3:f8:e5:a3:b1:f6:06:7d:10:a8:37:c0:37:16:22:ea:
aa:94:01:49:e0:5a:66:34:c6:d7:41:60:74:c7:ed:67:9a:43:
7b:b8:fb:78:fb:94:b6:7e:62:ad:c3:34:d5:84:b3:21:db:11:
af:ed:d9:fc:04:05:fe:1e:ca:b1:3d:9a:a7:4c:f6:45:cf:24:
0c:40:23:26:0b:00:c1:c8:d8:4c:c0:3c:f4:24:73:ce:94:c2:
30:26:d6:4e:54:ea:63:36:c7:fb:bb:dc:69:cf:53:57:4c:de:
9f:0a:8c:08:cb:9d:bc:22:25:af:7b:c6:82:81:54:80:ee:d9:
cc:73:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:52 2026 by rpki-client