
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier: n/CGeBbFhRigxs594WvYrK4HUh5P5LXC1MXpPN/75Ps=
Subject key identifier: DA:9F:5D:7D:68:4A:6A:76:36:51:0F:C9:D8:6F:A8:8B:2C:40:E5:98
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial: 02E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number: 02CA
Signing time: Fri 17 Apr 2026 01:20:12 +0000
Manifest this update: Fri 17 Apr 2026 01:20:11 +0000
Manifest next update: Fri 24 Apr 2026 01:20:11 +0000
Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: MAsu1OLxQd2eoLEuAdZhEbEn3n3EV6dOGARNk5LIGVc=)
2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: N8hOIX9lBnkWNR17KITPRqZldmiFlqdcpwwzsFLdg0U=)
3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Validity
Not Before: Apr 17 01:20:11 2026 GMT
Not After : Apr 24 01:20:11 2026 GMT
Subject: CN=69e18acb-54c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:20:41:06:ed:8e:08:d3:67:bb:eb:8b:80:
8e:0a:35:6c:5f:76:4a:09:65:9e:89:ee:17:56:b0:
2b:dc:62:b3:a2:76:00:20:40:b6:20:03:c2:e8:58:
3b:88:da:fe:b1:e9:b1:8b:d5:b2:64:61:02:9b:1a:
7a:84:f7:37:36:92:7c:ed:32:fb:ae:8c:a3:40:a9:
d8:35:11:5b:15:ac:36:ba:13:a4:dc:6c:3c:14:ea:
ca:2c:f7:05:9c:1e:b4:2a:18:e7:37:84:dd:55:cf:
87:a0:34:5b:0f:03:f0:54:ff:60:1f:ae:a0:8d:ec:
49:11:21:fa:7f:13:2b:99:e5:bf:58:66:4b:04:ba:
68:71:62:d7:8c:f1:af:70:12:a8:2d:c8:3d:70:df:
0a:a4:0f:4c:fa:9f:08:2f:eb:0d:b9:3e:47:c1:43:
0b:86:b4:56:30:44:11:2b:e7:a8:d1:98:12:9e:38:
6d:62:02:4c:ad:f7:93:d4:d9:87:b1:d8:63:c5:37:
dc:3e:17:5d:6d:dc:47:a7:c0:ec:99:8c:a9:25:df:
69:d4:51:84:10:00:c0:47:d1:8f:df:01:52:37:0a:
bb:a8:e6:64:00:c0:df:7f:89:4b:a6:8a:a3:3e:ee:
f6:4a:0f:fd:ea:1f:2e:22:59:e4:aa:09:62:55:f1:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9F:5D:7D:68:4A:6A:76:36:51:0F:C9:D8:6F:A8:8B:2C:40:E5:98
X509v3 Authority Key Identifier:
keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d4:cb:53:28:77:30:34:6a:2a:a3:d7:ac:9c:8b:f0:e1:23:
13:bc:d9:09:8a:c1:a6:2f:f5:22:8f:b7:43:21:22:93:33:19:
d0:a4:f5:56:bc:e9:e4:8b:1c:74:2a:40:de:4b:07:12:e9:48:
3a:e8:94:47:a2:42:45:6f:ea:ae:e7:9e:e2:b0:e0:b8:56:63:
0f:fa:a1:cd:ff:0f:34:db:7a:09:4f:d8:2a:34:08:22:6d:d7:
1d:50:87:c8:f7:0d:37:73:4c:a1:cd:17:79:97:ef:01:cf:29:
62:06:30:18:cf:e0:61:5a:56:cb:12:85:a2:25:9c:3d:55:71:
c3:52:36:51:fb:de:60:6d:2c:72:87:f9:db:ec:c2:b2:8e:43:
d3:b5:fe:df:5b:07:52:4a:49:0e:34:60:73:6c:89:12:9a:4f:
4e:1f:29:d0:2a:3a:b6:ee:27:f3:9b:51:18:0e:ca:51:4f:9b:
e8:62:0d:a2:51:d9:d8:1b:f5:f7:a2:1f:28:a3:c3:a0:39:0d:
e9:7f:e3:1e:65:a7:1b:12:f9:1b:f9:4c:8c:59:31:a5:a9:2e:
e1:05:e5:f9:03:a9:07:c7:11:df:bb:22:7c:f7:54:84:01:ae:
f5:63:76:75:c6:3b:32:31:55:12:37:22:7a:f7:5d:87:46:95:
d5:34:09:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:25 2026 by rpki-client