
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json)
Hash identifier: OaUoMId6nSZ/ONLRPusw5RtjCubYr/HpjsV79mJNOvo=
Subject key identifier: AB:0C:13:22:FA:7E:33:D2:C8:98:08:ED:BB:56:10:A7:A8:FA:77:C2
Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23
Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
Certificate serial: 06CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
Manifest number: 06C2
Signing time: Sun 01 Mar 2026 22:39:28 +0000
Manifest this update: Sun 01 Mar 2026 22:39:26 +0000
Manifest next update: Sun 08 Mar 2026 22:39:26 +0000
Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: 757uH1URHLBstMLBX1v1h5Izx02eem0Kvl7Un175qWA=)
2: 2CB68FE8943211F0B1116B74C4F9AE02.roa (hash: 3MyKsLacs+jSNFLg0g6siYMmeYjfiDOjgCzdQeB8N4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl
rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1741 (0x6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
Validity
Not Before: Mar 1 22:39:26 2026 GMT
Not After : Mar 8 22:39:26 2026 GMT
Subject: CN=69a4c020-0061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:32:77:1e:ed:de:bc:66:af:a7:ee:b8:44:
e5:3f:99:90:79:89:f2:af:16:dd:6a:4d:af:52:2c:
3f:b1:8a:76:3b:2e:4d:e9:2d:0c:46:67:6e:ca:80:
bd:c3:a4:8e:f6:64:46:ab:08:fb:73:04:c9:1e:1a:
76:2b:be:97:5a:ea:ac:16:d1:14:89:b4:f5:c0:ab:
c2:da:67:9e:a6:c1:d7:6f:fc:85:b8:b5:4c:4d:d4:
1e:94:30:c1:58:c6:d0:51:6e:53:fa:90:da:03:63:
fd:a6:77:b1:59:77:a2:a4:62:09:9a:fa:be:61:98:
87:f1:55:52:cc:50:fb:04:84:bc:16:ce:69:85:83:
e0:9d:33:23:b2:08:6c:d1:5b:45:3b:8a:cc:84:25:
a6:60:1d:04:a3:b5:1b:39:f5:de:7a:ed:7d:41:af:
6c:70:81:3c:95:bf:c2:76:29:75:eb:7d:c3:18:e3:
e2:94:4a:18:3d:c1:38:f5:bd:64:d0:55:d0:07:bb:
9f:da:58:77:6e:bf:d1:1b:0f:9c:88:a2:b1:bf:a4:
3b:2c:bd:6b:ac:93:06:7f:a1:b4:9c:e2:0c:9b:df:
e8:4f:33:d0:d5:86:b5:ba:d8:a6:13:79:39:f7:23:
ef:32:06:4a:07:72:04:64:18:2f:6e:6c:dd:6b:e1:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0C:13:22:FA:7E:33:D2:C8:98:08:ED:BB:56:10:A7:A8:FA:77:C2
X509v3 Authority Key Identifier:
keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:20:8b:8e:7f:55:de:63:dc:f7:35:07:23:b0:66:ec:3e:5a:
d3:96:63:6e:83:b3:d1:f4:16:c1:d5:bb:27:b4:41:17:fa:4f:
20:73:9e:d9:b1:79:b7:d0:21:46:8f:32:4f:34:0a:52:c4:80:
b1:20:df:cf:6c:9c:da:55:42:ab:a3:8b:15:92:cb:79:ce:54:
e5:f0:5b:d0:2d:d1:7f:10:a9:3b:40:f4:fa:8d:58:c3:84:c2:
92:78:a2:61:0f:c2:bb:b0:1d:a0:db:c0:e8:dd:a4:1f:c0:75:
bd:f9:0a:6b:61:43:82:92:c1:f8:ee:7a:59:5a:6a:c3:8a:65:
5f:77:94:17:36:98:8c:31:2e:07:91:53:28:c9:8e:35:42:00:
e4:13:c5:93:26:78:de:aa:2a:ad:66:9c:58:e5:3b:53:01:59:
15:a9:d1:e5:fd:48:51:b7:80:88:23:43:ad:3f:2c:ba:d2:63:
bf:28:e1:49:bf:0b:82:c8:82:5a:1b:7a:9f:85:6e:c8:76:0a:
20:4a:f9:6e:07:96:b3:78:bf:4a:37:b0:4d:01:c5:72:d0:40:
30:ea:b9:a2:72:14:1b:25:74:d6:6e:19:93:34:00:66:ae:7d:
28:d7:4f:a6:b6:df:34:cd:31:06:fc:21:1d:bd:f2:37:f9:0d:
ef:0e:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:26 2026 by rpki-client