
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json)
Hash identifier: K/nZ+HWC6jX7AygmY/XX/fpR6j4TuTjdsvgdRbEW188=
Subject key identifier: C2:F9:22:55:64:AE:11:1C:56:F5:32:46:9C:9A:16:23:62:A0:FC:CD
Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Certificate serial: 04C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
Manifest number: 04B9
Signing time: Thu 16 Apr 2026 23:49:02 +0000
Manifest this update: Thu 16 Apr 2026 23:49:01 +0000
Manifest next update: Thu 23 Apr 2026 23:49:01 +0000
Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: z0g7HFdif+2swnp2UqzkjVDLdTCxxo9/NjdJXhhRGVk=)
2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: pn9LmjcYfqtWkrqq70s413/aWhMNAUVc8lSHHO31hw4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Validity
Not Before: Apr 16 23:49:01 2026 GMT
Not After : Apr 23 23:49:01 2026 GMT
Subject: CN=69e1756e-9933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:bd:e8:0e:65:1c:18:ff:02:06:43:e8:30:
23:52:56:2b:06:88:a2:37:51:7b:dd:f6:d8:a7:a1:
54:54:0d:56:50:68:28:11:7a:59:9d:ea:01:e0:e4:
d4:06:be:42:a9:ee:87:09:e4:2e:fe:86:66:4f:4e:
80:00:3d:23:18:1f:f9:60:21:0e:6a:11:a6:5f:80:
fe:bf:3a:7a:07:df:42:87:b5:cb:65:6d:3e:13:44:
89:b6:67:c8:69:91:5b:09:94:37:87:b3:d5:82:8e:
20:cb:e7:1a:9c:63:45:ab:61:ed:ad:86:7b:39:98:
95:c1:2b:9f:94:8b:2c:2b:bd:52:05:13:ee:15:73:
1b:0f:1a:71:02:c2:ce:10:c6:c8:a2:58:c3:17:bf:
5c:3a:a1:79:55:d8:60:39:28:0b:18:6b:dc:a1:ad:
54:a9:25:d8:da:16:96:c1:04:1c:2a:57:c9:dc:f7:
f0:00:21:2d:d6:2c:37:d5:2e:31:96:ad:bd:fa:94:
c4:b5:d1:11:bf:09:34:98:a6:73:15:09:e1:bd:aa:
44:74:c7:06:f1:86:05:07:c0:fc:be:e3:05:a5:1c:
fb:21:83:4f:a4:25:84:94:d8:2a:b3:8e:ba:82:bb:
2e:97:32:66:d6:15:67:74:2a:4c:c3:35:94:c0:1b:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:22:55:64:AE:11:1C:56:F5:32:46:9C:9A:16:23:62:A0:FC:CD
X509v3 Authority Key Identifier:
keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:1b:99:4c:cb:ab:d4:77:59:97:6a:e7:1b:70:ad:56:41:21:
b9:81:f1:67:e9:3d:8d:a9:1c:3a:6f:7f:ab:87:dd:6c:3a:24:
3f:44:74:0a:b3:40:29:30:f9:0f:f9:f9:81:85:5b:45:a8:a3:
85:ce:79:d0:f8:df:d7:9b:2b:ff:38:2d:7e:a2:19:b3:4c:62:
cc:66:79:cf:34:a0:38:ee:d6:cf:1d:5a:4a:f6:19:32:9b:d4:
8f:99:c0:d9:09:0c:48:a1:7a:10:3c:dd:1e:ee:a0:89:1f:6c:
d0:2a:5f:e3:83:f4:df:26:e0:7f:c2:30:78:15:22:ac:c3:48:
78:b4:07:10:6e:d2:26:fc:98:e6:52:f1:7a:4f:40:75:80:83:
72:01:75:57:7b:be:78:1e:6d:d1:58:77:60:2c:2b:de:06:5c:
eb:a8:b2:5f:d9:f4:64:57:f8:dd:fd:49:34:ac:b3:15:2e:e5:
94:20:de:02:39:cc:9a:89:17:ac:e0:94:8b:e6:f5:3e:49:23:
9a:2f:fd:9d:0e:52:4b:c7:3f:b3:1d:ae:c9:63:03:07:70:99:
bf:3e:cd:56:a8:81:08:af:b8:7c:b0:1e:e9:da:aa:da:f3:30:
16:8d:a0:67:07:f6:46:f5:c8:e1:97:3d:46:e8:a1:59:72:fc:
e6:02:fd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:48:38 2026 by rpki-client