
$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
File: 2iwTK47FBxr425BJG63bwPCntEU.mft (raw, json)
Hash identifier: nFY9+tBq0J8d8s+PpI2umlreL7SJ0HigQxyBGg2qDtI=
Subject key identifier: B0:CB:55:E9:7C:88:58:01:D9:D8:8B:A9:F0:4B:09:C6:17:85:C9:68
Authority key identifier: DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
Certificate issuer: /CN=A91534B8/serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Certificate serial: 0323
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
Manifest number: 0323
Signing time: Wed 25 Mar 2026 00:46:42 +0000
Manifest this update: Wed 25 Mar 2026 00:46:41 +0000
Manifest next update: Wed 01 Apr 2026 00:46:41 +0000
Files and hashes: 1: 2iwTK47FBxr425BJG63bwPCntEU.crl (hash: K5H+U/9FO9rXxMmKr+RIi2X8PwYgXCMIEt3sNhx9las=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91534B8, serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Validity
Not Before: Mar 25 00:46:41 2026 GMT
Not After : Apr 1 00:46:41 2026 GMT
Subject: CN=69c33071-95c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:e6:ed:71:ce:80:f8:e2:d9:80:4e:8e:88:
d7:ae:78:c7:3e:f9:0b:37:e6:e7:53:a0:68:78:03:
74:8d:16:c3:c1:9d:43:0b:9d:db:87:6f:b0:4e:7a:
5c:9c:78:b1:c3:f5:ca:a3:0b:3e:ab:d9:f4:09:51:
86:85:87:3d:c4:4b:1c:bc:60:5e:7b:5c:16:b2:9d:
f9:fd:21:05:de:a9:91:1e:07:66:45:d5:5a:4c:63:
eb:82:1a:0f:65:71:1d:92:1a:41:e1:5a:52:e6:e2:
55:d3:7d:84:86:94:d4:28:fb:65:81:19:5a:d0:d8:
08:f8:e8:17:6b:08:b0:f6:a6:30:6d:2a:56:a0:64:
cd:eb:04:a2:26:62:a9:ff:05:40:b8:d2:83:a2:5d:
7d:fd:82:c9:ef:26:49:91:05:40:28:7f:ec:fe:cb:
a3:fa:fe:16:6f:bb:86:27:78:da:2c:78:fc:e1:65:
6d:09:38:17:1b:dd:2f:0c:1d:89:be:3a:e8:82:55:
c7:61:68:49:93:f2:b7:b6:ec:1e:7e:1d:2c:58:1e:
fd:62:9e:32:26:d6:5e:5c:84:15:a9:8c:e3:89:f3:
6a:e4:df:91:f2:da:43:74:28:ff:5b:6e:59:d0:50:
4d:11:0c:c4:5c:c0:f1:16:33:72:4f:96:f5:24:23:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CB:55:E9:7C:88:58:01:D9:D8:8B:A9:F0:4B:09:C6:17:85:C9:68
X509v3 Authority Key Identifier:
keyid:DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ca:88:c6:e1:64:68:f5:23:41:4b:58:02:16:8f:49:a9:ac:
b1:44:21:3b:59:2e:25:d2:17:73:e0:59:c8:a1:6e:4b:89:7f:
d5:f1:1e:54:eb:10:dd:4d:9a:7e:bf:ae:97:21:9c:90:ea:4c:
c2:34:7c:d9:67:30:e9:0a:cd:38:49:d2:00:5f:87:03:13:1f:
7b:ef:95:39:50:67:e4:24:5a:c0:84:cd:1f:cc:24:b7:b2:27:
a9:4e:04:d2:ca:96:4d:77:19:c6:8a:0c:38:80:05:b7:dd:27:
2f:8b:83:bf:69:34:37:5a:6c:f2:73:39:68:a0:77:71:75:63:
6d:1c:be:f2:fb:44:61:e3:6b:11:71:17:9f:f5:98:3a:3d:52:
6b:9b:4c:9e:fd:40:87:1c:a2:0b:7f:fb:28:48:15:80:a7:d9:
55:f3:37:07:71:fa:b9:30:e7:2f:8f:ea:64:d1:2b:47:2f:19:
1a:76:8e:06:a3:85:d8:af:a0:0b:57:a2:3b:bd:fc:dd:bf:3b:
6e:20:27:a1:96:79:f2:f7:a1:00:e6:9f:8f:fe:08:c4:31:df:
ec:b7:a1:14:6b:27:6c:b1:b6:63:47:02:2b:30:79:50:64:9f:
a1:40:19:a2:e4:5f:94:88:5c:bb:63:bb:43:ee:c3:d6:6e:a0:
d1:87:29:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:43 2026 by rpki-client