
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier: GmA8gVCncyJinkwefYDQZcOIcTfipmpLPjeIy6l5JxM=
Subject key identifier: 0C:8E:1B:16:7C:6C:02:25:7B:92:0A:FD:12:AC:89:D7:30:E0:7C:A4
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial: 02CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number: 02B2
Signing time: Mon 02 Mar 2026 00:29:24 +0000
Manifest this update: Mon 02 Mar 2026 00:29:22 +0000
Manifest next update: Mon 09 Mar 2026 00:29:22 +0000
Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: ypc1BK/x3QiEMlYuzMn+kIGSzV4DVM1HrwZjW6GP8Js=)
2: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=)
3: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: N8hOIX9lBnkWNR17KITPRqZldmiFlqdcpwwzsFLdg0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715 (0x2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Validity
Not Before: Mar 2 00:29:22 2026 GMT
Not After : Mar 9 00:29:22 2026 GMT
Subject: CN=69a4d9e4-8ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:b5:17:46:3d:52:cf:e7:66:cf:1f:7f:d0:
70:ad:04:4f:ad:1e:c0:db:c1:93:f3:7b:e1:55:89:
8d:2c:8f:2f:ad:e3:4d:72:46:c8:8c:57:e2:7a:22:
71:12:36:27:26:c1:de:88:7b:07:95:d0:0b:73:a5:
c1:e9:c9:47:2b:0b:f6:c1:49:17:8a:32:8d:e0:02:
17:db:67:09:ee:eb:dd:03:fb:1c:5a:1a:22:af:ed:
25:7a:f0:f9:1d:8d:5d:bf:ff:5c:11:ba:34:45:46:
1d:c5:c6:f5:60:52:b6:0e:9f:a1:b0:b5:87:49:df:
f4:05:29:0b:b3:94:1b:f9:b0:a4:8d:52:24:f7:87:
44:f6:0b:0b:a2:3e:24:a3:29:28:53:a0:c2:e1:12:
29:ed:3b:f1:a4:22:ca:ec:dd:1e:68:5e:97:dd:08:
bb:fb:02:b3:f1:fc:a9:54:81:69:8e:e6:3b:d5:22:
14:a4:69:8c:c1:9f:de:b7:36:f3:bb:0e:d1:c1:5f:
d9:3a:9c:64:64:d1:f3:71:6a:73:96:9a:30:2d:eb:
e3:6a:87:13:46:e6:7b:ad:c2:e2:14:34:48:5f:dc:
e4:77:f3:4e:47:c0:d9:0a:78:2e:a1:cc:89:5b:ba:
12:9a:bc:1f:6d:8c:0b:6e:a5:dd:ca:54:b1:51:38:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8E:1B:16:7C:6C:02:25:7B:92:0A:FD:12:AC:89:D7:30:E0:7C:A4
X509v3 Authority Key Identifier:
keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5d:5e:c3:2d:6a:cb:3a:cc:22:00:2d:43:c7:6c:ef:6f:9f:
b4:3f:de:2a:a9:50:32:5c:d4:f8:87:77:a6:55:f1:b0:83:69:
e9:34:bb:64:5d:44:ea:96:12:fc:a7:d8:9a:6f:ce:b4:d8:0c:
43:8b:bf:38:d2:b7:00:90:12:50:4d:b4:95:d3:4a:ff:ef:c2:
fc:29:e1:aa:5f:46:83:9f:c4:a3:7e:7a:47:dc:f0:72:42:72:
f1:a8:d3:4e:75:3b:25:86:d0:16:6f:d4:1b:b9:cc:09:30:d1:
6a:7e:8a:c0:b4:40:89:84:b8:d8:6b:79:49:b8:06:85:2a:31:
5b:d4:20:09:b2:a1:89:01:f0:6b:32:a3:c0:f1:cd:30:09:3c:
30:c1:68:2b:cb:a9:a2:3d:3f:d2:7b:26:13:ff:5c:7a:66:6b:
4f:50:56:91:3e:d3:5f:6f:1b:eb:25:9c:93:12:44:f6:c2:93:
ee:a1:a4:c1:2a:b1:e5:36:06:04:26:ad:f7:11:47:6f:b8:88:
34:96:23:ad:e9:3c:f6:20:7a:f7:16:a4:8d:11:d9:3b:05:95:
ec:e7:7b:a8:32:a2:d3:9a:c0:cf:3a:16:bd:9d:c9:17:21:34:
b0:70:02:7d:e3:99:3d:07:88:ee:9e:1b:64:e7:7b:66:8a:1f:
c9:7d:99:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0
Q0FEOEMxNkYwHhcNMjYwMzAyMDAyOTIyWhcNMjYwMzA5MDAyOTIyWjAYMRYwFAYD
VQQDEw02OWE0ZDllNC04YWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2WK1F0Y9Us/nZs8ff9BwrQRPrR7A28GT83vhVYmNLI8vreNNckbIjFfieiJx
EjYnJsHeiHsHldALc6XB6clHKwv2wUkXijKN4AIX22cJ7uvdA/scWhoir+0levD5
HY1dv/9cEbo0RUYdxcb1YFK2Dp+hsLWHSd/0BSkLs5Qb+bCkjVIk94dE9gsLoj4k
oykoU6DC4RIp7TvxpCLK7N0eaF6X3Qi7+wKz8fypVIFpjuY71SIUpGmMwZ/etzbz
uw7RwV/ZOpxkZNHzcWpzlpowLevjaocTRuZ7rcLiFDRIX9zkd/NOR8DZCnguocyJ
W7oSmrwfbYwLbqXdylSxUTgpHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAyOGxZ8
bAIle5IK/RKsidcw4HykMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0
NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL
ajljUk9PSlVDWjlNcll3VzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi11ewy1qyzrMIgAtQ8ds72+ftD/eKqlQMlzU+Id3plXxsINp6TS7ZF1E6pYS
/KfYmm/OtNgMQ4u/ONK3AJASUE20ldNK/+/C/Cnhql9Gg5/Eo356R9zwckJy8ajT
TnU7JYbQFm/UG7nMCTDRan6KwLRAiYS42Gt5SbgGhSoxW9QgCbKhiQHwazKjwPHN
MAk8MMFoK8upoj0/0nsmE/9cemZrT1BWkT7TX28b6yWckxJE9sKT7qGkwSqx5TYG
BCat9xFHb7iINJYjrek89iB69xakjRHZOwWV7Od7qDKi05rAzzoWvZ3JFyE0sHAC
feOZPQeI7p4bZOd7ZoofyX2ZGg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:22 2026 by rpki-client