
$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
File: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json)
Hash identifier: q2lSiSJvttcwnNZpbq3v8EL9KQ7anqmZ7FTVeAW0ZCE=
Subject key identifier: 8A:19:F7:4A:FF:4B:87:4B:C9:27:64:A6:F1:C3:71:F6:99:1E:59:2D
Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4
Certificate issuer: /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4
Certificate serial: 04D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
Manifest number: 04D0
Signing time: Tue 24 Mar 2026 23:30:16 +0000
Manifest this update: Tue 24 Mar 2026 23:30:15 +0000
Manifest next update: Tue 31 Mar 2026 23:30:15 +0000
Files and hashes: 1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: p6F3LkW7inXdqbK1CkmxDiiyDlxn0kobBoAixaTcuXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl
rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1233 (0x4d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91487B2, serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4
Validity
Not Before: Mar 24 23:30:15 2026 GMT
Not After : Mar 31 23:30:15 2026 GMT
Subject: CN=69c31e88-f12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:9f:52:48:80:73:1a:cc:68:35:41:31:4b:
05:a2:1c:f0:cb:df:5b:58:eb:e8:e2:63:c4:34:b4:
99:c6:6a:73:6d:84:f0:37:17:3a:dd:cf:6b:76:29:
b6:f2:d5:aa:1c:b8:29:21:c3:a8:7b:9f:eb:b1:4b:
9e:6e:7b:4b:3d:d4:ae:13:9c:53:44:02:c8:4c:10:
60:8e:6e:e1:92:dd:24:ff:40:22:eb:9a:0f:1b:0c:
53:37:e5:7d:78:9f:77:a5:74:ae:cc:11:38:0d:e4:
61:27:ca:4a:14:2d:d6:09:fb:2f:70:bf:37:3c:c6:
dd:6d:23:21:f5:1c:d0:78:4d:5c:46:0e:c6:67:69:
0b:d1:98:56:bd:82:10:6f:06:39:a6:8f:3c:5b:03:
2a:66:8b:00:b3:82:02:6a:c7:7f:33:0b:9e:cf:f8:
51:fe:ce:d9:6d:c9:8f:67:50:e6:70:e5:3f:ff:b8:
ce:d8:d1:2c:29:dc:b5:d7:47:c5:67:1a:bc:cb:51:
89:5c:bb:d2:8b:b8:aa:31:32:ed:49:5c:67:e7:63:
62:d7:84:79:e1:46:cb:7f:cd:9f:23:1b:a4:87:8f:
3d:cd:54:33:fe:f6:9b:37:3e:2f:b1:49:c5:3a:06:
e5:42:17:ee:07:38:d9:b2:77:a6:f9:31:f7:7c:8b:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:19:F7:4A:FF:4B:87:4B:C9:27:64:A6:F1:C3:71:F6:99:1E:59:2D
X509v3 Authority Key Identifier:
keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:b6:91:57:00:5e:dd:c3:64:1a:0d:7d:7d:c1:38:28:6f:e9:
43:48:21:ba:06:ab:5d:ba:0c:e5:53:f4:94:18:78:18:52:14:
a6:38:fc:48:9a:30:9f:82:8a:fa:60:d0:33:f3:57:48:f4:79:
88:ff:23:e1:05:e7:5b:d8:7b:dc:6c:c0:df:a4:d4:1f:7c:ce:
74:8f:a6:9c:89:bc:1b:7f:3f:b3:a5:6c:8d:ee:c4:fa:7e:e4:
3f:f7:11:ed:2d:2c:64:9a:6b:13:10:0e:1d:1b:de:c9:3f:1e:
63:28:8b:29:f3:09:64:fb:f7:db:a7:cc:7d:4a:99:02:7f:9f:
8f:a9:4e:95:cc:4c:64:4d:44:03:7e:57:9f:40:ec:9e:35:5a:
58:21:43:da:b0:9f:81:22:b4:9d:9f:d9:80:9e:4c:f0:73:a1:
69:1c:51:d6:c4:0d:f9:3d:07:f7:e8:c9:e2:e2:f8:b1:47:9a:
79:26:ca:db:8f:0e:82:34:88:6c:ef:a9:7e:46:43:2c:b8:f2:
b0:42:0c:07:9e:96:4b:55:2f:c9:e0:25:aa:e9:b6:99:f1:08:
a5:83:28:46:8b:78:38:59:4e:63:ce:28:93:c8:29:f7:5f:22:
56:38:ce:cc:a8:3f:f1:de:89:f7:bc:af:28:db:4a:41:18:45:
6c:90:d0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:36 2026 by rpki-client