
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
File: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json)
Hash identifier: FJz29Ndn1ZHBGgBfHqmeekVa/PVEevk18OGU41VtBf0=
Subject key identifier: 44:63:91:21:6E:C5:52:5D:E4:9D:C4:8D:2C:18:07:AB:19:AF:24:EC
Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
Manifest number: 0184
Signing time: Sun 01 Mar 2026 05:29:30 +0000
Manifest this update: Sun 01 Mar 2026 05:29:30 +0000
Manifest next update: Sun 08 Mar 2026 05:29:30 +0000
Files and hashes: 1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: jo7SXp4dHNUZ4qqsu/moJMyJeecvFHpBP+5V3SZRz/0=)
2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: G8LAWFDM7ySLTe/ZJTkJCLPXRoKFmaYaIusDW3bZoi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Validity
Not Before: Mar 1 05:29:30 2026 GMT
Not After : Mar 8 05:29:30 2026 GMT
Subject: CN=69a3ceba-f27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:4a:68:cf:dd:21:eb:ec:e2:a7:5d:92:ff:
75:02:e2:22:be:26:f0:76:5c:a6:73:32:25:ab:40:
de:0e:a9:c6:89:f9:7e:5f:4c:0f:31:eb:e2:fb:3c:
59:98:06:66:2f:3f:fa:22:85:a0:da:eb:c3:68:8d:
07:dd:4a:78:d8:d0:05:77:ed:02:23:d3:4c:e1:0c:
5c:2a:e7:ce:4e:e5:2a:4d:25:35:33:ab:dc:a8:a2:
48:9f:1b:58:3a:50:9c:fd:bf:9d:09:b4:db:b9:c0:
bd:d6:79:5b:70:af:87:60:ac:67:ac:4c:55:9e:2a:
43:80:ae:6d:4a:79:17:83:44:e4:17:b4:53:68:8c:
7f:f7:e0:14:c9:2c:d5:ef:5e:2a:9a:ef:86:c4:a6:
c5:b8:6c:c5:36:86:e8:90:8d:e1:14:93:ee:e3:79:
e9:95:d5:ff:55:33:2c:ee:34:cf:6f:ae:07:4e:f3:
17:63:12:c0:f7:29:ec:cd:19:09:b5:1b:4e:ae:4c:
4f:38:62:33:e4:c4:5e:6e:68:2b:30:82:aa:8e:1e:
5a:36:09:04:38:f8:c4:fa:7f:e0:51:34:72:53:cb:
6e:41:0f:d4:c5:c6:a5:85:7c:88:68:8f:a0:64:69:
b7:4c:3c:3d:97:bf:0c:72:94:24:9c:77:1c:e7:f0:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:63:91:21:6E:C5:52:5D:E4:9D:C4:8D:2C:18:07:AB:19:AF:24:EC
X509v3 Authority Key Identifier:
keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:65:76:b8:2e:81:12:40:00:ba:86:cd:e3:d3:09:7c:94:57:
48:9a:a2:17:3c:41:64:f7:86:86:ea:ae:cb:b9:d0:39:07:fb:
22:d0:90:6e:82:78:65:f3:60:14:c4:8c:85:e4:df:f5:d8:53:
e9:fe:cb:00:7d:f2:09:b2:64:4b:d4:fe:94:92:25:78:c6:2e:
d6:39:d5:95:1f:13:f6:bd:19:53:e1:9b:6a:a8:a8:b2:48:ef:
6f:63:46:d7:c5:1d:f4:f6:4c:32:22:56:76:cc:f9:67:df:52:
e3:64:f7:bf:2b:cb:62:8f:dc:42:e1:f3:ee:97:be:53:7d:cd:
81:ec:c7:4b:bf:c3:2f:c8:56:2a:55:c5:80:ec:fe:52:14:30:
3d:83:6f:06:0c:37:20:01:85:b8:23:80:6b:7b:65:bd:02:dd:
06:72:4d:db:21:18:f1:20:cc:28:44:b7:0d:e1:ab:24:36:af:
de:af:94:7a:3c:e3:42:68:9c:42:a4:01:1c:ef:c2:a2:01:d3:
09:05:09:71:c6:c7:1e:1a:ee:83:13:ae:3b:b5:b4:f0:bb:f8:
3c:18:70:60:09:0a:7d:7d:32:7f:b4:e9:8f:b5:98:57:82:fd:
b1:c2:3b:63:fc:51:c1:ec:6d:84:3c:d6:3b:5a:33:d5:80:e3:
a4:13:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:12 2026 by rpki-client