
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json)
Hash identifier: AaVjCNhB4d/jpZG4MPb6PLJPutAwBc515IXNMRH1w+8=
Subject key identifier: 53:D9:77:AC:39:B3:53:A3:FF:AD:DA:48:EB:5F:67:01:C0:7C:29:EC
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial: 02DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
Manifest number: 02C2
Signing time: Sun 01 Mar 2026 02:20:44 +0000
Manifest this update: Sun 01 Mar 2026 02:20:43 +0000
Manifest next update: Sun 08 Mar 2026 02:20:43 +0000
Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: YJOZr9+ILQ4OG07k2APjWfhYiuIupIq+t502DYiZmxQ=)
2: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=)
3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=)
4: BEE96BA212A811F1A54B75AE3D3D8C67.roa (hash: 7bvo4mBDMY/e6OkguwJkgygdJ+S1zQIf6ARCXI18tdk=)
5: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=)
6: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735 (0x2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Validity
Not Before: Mar 1 02:20:43 2026 GMT
Not After : Mar 8 02:20:43 2026 GMT
Subject: CN=69a3a27b-f951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:96:d8:d5:b8:fa:a6:3d:d6:8f:84:bb:26:
94:f8:ca:0e:ac:c6:f6:9a:7a:2b:00:c1:75:2a:af:
7f:58:b4:e5:57:9e:45:ba:0e:86:23:74:5b:76:ba:
db:d6:7d:ae:99:bd:e4:d0:9c:d5:c9:84:43:7a:07:
69:95:94:8d:74:d9:45:c9:7c:6a:c1:b1:3d:61:1e:
a2:3a:4a:82:2d:f8:8e:58:9c:19:42:b1:53:d5:1b:
2f:c8:47:ff:3b:97:73:18:73:53:2b:34:5d:7e:5a:
e4:24:3e:c7:6b:59:af:08:79:84:62:9e:b3:0e:ec:
24:e0:d2:79:a4:c7:20:e6:b9:98:37:bf:86:5a:8f:
cb:88:34:dc:32:43:21:41:88:36:e8:fc:c0:24:85:
80:40:af:0e:c1:be:ab:b1:bf:52:ca:92:b7:25:cf:
f3:52:f8:ec:12:45:45:2e:2b:fd:c5:a5:af:ac:7b:
e7:19:b7:38:57:ae:1e:eb:b5:8b:64:e7:da:b9:7c:
61:1e:2c:c6:59:d3:59:19:8c:22:69:e0:9f:5f:24:
dd:08:43:ed:10:12:6b:4c:7c:37:af:d8:c3:44:53:
41:77:2f:d3:78:23:2a:a9:d0:c5:d2:c5:ae:f3:97:
3a:b5:ce:ed:68:3d:9d:8f:cc:28:aa:4d:5a:32:6a:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D9:77:AC:39:B3:53:A3:FF:AD:DA:48:EB:5F:67:01:C0:7C:29:EC
X509v3 Authority Key Identifier:
keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d7:33:52:11:48:bc:0a:fb:1b:aa:dd:d5:a2:56:5b:a2:66:
e7:a9:60:bd:5c:28:9b:ba:bd:e3:83:c4:2f:d3:89:14:6b:8f:
8e:a1:3a:51:10:76:b0:8e:f9:04:32:6a:13:1c:35:31:99:5a:
8c:c9:79:ca:f5:f7:18:bf:54:6d:c2:87:84:85:ef:c3:3c:83:
74:8a:b3:56:9f:b1:f8:6d:ec:97:22:a1:f0:2d:09:8c:7d:bc:
1f:c4:1d:41:b6:b8:d2:24:a2:e3:3c:9b:97:2f:fb:76:6c:ac:
0f:cf:32:3a:63:0f:4a:35:ba:28:58:58:0d:31:9d:11:9d:16:
34:00:04:2c:18:17:18:97:cd:b5:11:8b:19:37:c6:00:90:f2:
3e:83:7b:4b:02:1c:26:cb:93:28:a2:14:4e:29:d8:03:ed:38:
dd:85:f8:4d:c6:96:fc:fb:88:28:b5:44:e1:98:e5:f0:89:ae:
28:1c:dd:3f:d7:3e:73:47:40:b2:c4:70:f0:d1:34:ee:d7:f8:
c8:cb:03:e1:d9:b0:17:fd:b0:25:c9:20:77:fb:2f:46:78:d5:
5d:58:93:0b:18:35:c4:5a:a6:5e:9c:9d:b6:46:5c:1b:36:44:
ec:ca:6b:d4:8b:56:dd:b0:6a:8f:9c:2d:10:12:09:82:5f:76:
e9:52:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:49 2026 by rpki-client