
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
File: t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json)
Hash identifier: twylPtAQ3jL/a/jzk3MO58H8r6haL4vP1aU0oDZZpDo=
Subject key identifier: 98:B6:9E:46:CB:11:6A:B3:BD:E5:E3:47:BA:59:F6:11:A1:1F:CB:E2
Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35
Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235
Certificate serial: 07DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
Manifest number: 2DF3
Signing time: Sat 28 Feb 2026 16:27:19 +0000
Manifest this update: Sat 28 Feb 2026 16:27:18 +0000
Manifest next update: Sat 07 Mar 2026 16:27:18 +0000
Files and hashes: 1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: h/Rn2GgYkM5NnNlf/zzN/4LRhmWKCJPiVm8zmotBrI8=)
2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: Ftg4ftCr2lGn4RvcA0VVEwLsH6nD0OpE3hi7kVlpjbs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl
rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2012 (0x7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235
Validity
Not Before: Feb 28 16:27:18 2026 GMT
Not After : Mar 7 16:27:18 2026 GMT
Subject: CN=69a31767-8b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:64:c0:5c:a3:ce:31:94:2e:20:ee:ab:ef:
08:6b:1d:40:e7:95:7e:5b:f3:80:ba:f5:24:10:64:
34:8a:2d:0b:cc:23:2b:ba:83:98:7c:4a:64:78:22:
8f:48:ed:ff:ae:7c:4a:cf:1d:da:ef:99:bf:68:13:
24:f9:55:d9:ac:45:bb:4d:97:eb:76:fc:c6:9c:26:
e7:d9:7c:7c:ef:32:5a:15:e7:16:af:84:a4:d4:12:
a1:53:f5:13:2a:c9:e8:a0:82:e8:c6:f6:03:40:bb:
9c:6c:2c:fe:d0:1c:f1:6b:5e:7a:59:01:fe:b5:18:
d4:49:76:f0:05:7b:95:e1:39:72:de:33:fb:69:ed:
df:bf:66:e9:22:0f:72:bf:d5:43:c4:c5:a0:e4:aa:
1f:1e:ce:80:a9:bc:a1:75:7a:3c:e7:37:b7:2d:33:
1a:eb:29:6d:8d:6e:2a:c6:71:65:4b:49:b2:4d:f0:
db:75:4a:e9:d1:8e:b8:06:8c:3b:3a:16:6b:f3:77:
4e:28:ba:ba:fa:b3:48:20:27:b2:14:4c:2c:f8:46:
f5:39:c1:99:0d:1a:02:68:10:1d:56:7e:0e:8d:6f:
22:a5:68:a8:7c:72:19:46:a9:50:73:27:fc:48:c6:
8b:b5:ff:9c:47:c6:ab:af:53:b5:13:81:22:2f:c3:
3a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B6:9E:46:CB:11:6A:B3:BD:E5:E3:47:BA:59:F6:11:A1:1F:CB:E2
X509v3 Authority Key Identifier:
keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c5:c5:85:f6:f5:82:97:04:8a:3e:90:eb:46:1d:51:55:22:
e7:e3:be:8f:77:81:b9:17:e9:b4:ef:4c:0a:a7:d7:f4:2b:18:
bb:60:fe:85:f2:e3:00:a0:5b:14:38:c8:b1:fa:5c:6d:1f:b8:
22:b8:1d:85:1b:6a:b1:d9:3d:ea:3a:54:2c:1f:28:61:d6:aa:
17:10:70:2b:04:94:1f:fc:4f:82:44:10:fc:fb:d9:1d:0b:43:
e1:51:93:66:33:8b:52:d6:ff:e0:51:1a:d7:7c:c3:91:e4:4a:
68:70:f9:09:1d:99:09:23:41:75:bd:3b:92:97:a6:00:e0:d4:
ef:40:9f:9e:32:94:ec:51:c2:58:af:1b:e7:85:e7:60:65:7a:
32:48:65:2d:17:5a:0f:8d:20:e1:95:b1:fa:7a:9d:3e:8a:7e:
dd:1c:47:ea:3f:a9:cf:ad:b0:d4:63:4e:05:0f:8d:e5:c1:18:
39:fc:80:37:78:4a:76:8b:b8:64:f9:1f:d3:c3:d8:25:d1:26:
ca:8f:c2:d2:af:ec:05:08:fb:b7:9b:57:79:1a:86:81:dd:1c:
f2:53:94:42:43:e6:f3:52:ac:aa:5b:59:86:12:f3:87:a4:ff:
c0:56:cb:e8:89:dd:0e:68:3d:4a:5d:76:9b:02:92:7b:ad:43:
b0:19:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:54 2026 by rpki-client