
$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
File: 2iwTK47FBxr425BJG63bwPCntEU.mft (raw, json)
Hash identifier: m4kxmPT/5jAx4e07QpwsdlZlFpXZ4+J7IHPnG3TZqSs=
Subject key identifier: 28:E5:FB:2F:04:07:41:D9:B2:57:ED:EB:4F:8A:D6:05:90:D3:00:58
Authority key identifier: DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
Certificate issuer: /CN=A91534B8/serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Certificate serial: 033C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
Manifest number: 033C
Signing time: Wed 13 May 2026 01:10:36 +0000
Manifest this update: Wed 13 May 2026 01:10:36 +0000
Manifest next update: Wed 20 May 2026 01:10:36 +0000
Files and hashes: 1: 2iwTK47FBxr425BJG63bwPCntEU.crl (hash: tKsDIVAK7qXZ5tFeibqNuuZf/K46JfrZHF5v3pCbLpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:10:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828 (0x33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91534B8, serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Validity
Not Before: May 13 01:10:36 2026 GMT
Not After : May 20 01:10:36 2026 GMT
Subject: CN=6a03cf8c-0d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:79:c6:a6:7b:be:14:7e:23:2a:aa:0d:71:
5d:c1:d1:6f:97:c7:ea:b9:6a:5b:6c:31:0b:af:78:
21:a6:f1:dd:61:a5:ef:bd:a5:c1:e1:0b:f4:5c:d8:
0a:1d:21:e3:6d:dc:25:c9:ea:b8:c5:36:d8:fd:0e:
4b:57:78:9a:e3:c1:41:97:8e:ee:4c:23:23:25:f6:
d8:a8:e5:e8:4a:da:ea:c1:c8:bb:2f:d7:c0:5d:ec:
a8:2d:5e:21:ce:24:59:11:ca:22:69:25:f4:6f:7b:
bc:c9:71:ed:e7:0e:18:b0:99:84:d9:6c:ef:19:2f:
4d:a8:0e:4d:03:7d:ac:77:dc:d9:65:69:91:cb:bd:
94:55:47:c3:a4:d1:36:7b:c8:7d:82:48:9e:a3:63:
07:cd:39:c7:ae:a0:e5:aa:fd:9e:dc:9e:7c:c0:b0:
86:81:0e:c4:67:c0:0f:53:2d:d2:a0:d3:84:b3:ee:
1b:d2:6e:fa:ca:f5:02:09:d9:30:ca:ba:57:b5:20:
47:23:dc:7a:20:73:ab:9c:5e:61:d3:14:ad:d5:bb:
7d:bf:aa:18:fc:98:57:a8:05:c3:f2:6b:b9:04:72:
d4:89:6b:77:3a:b9:d7:c7:4b:81:50:13:91:f0:06:
6b:f1:33:3b:10:c0:ac:99:30:0b:ce:70:60:86:35:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E5:FB:2F:04:07:41:D9:B2:57:ED:EB:4F:8A:D6:05:90:D3:00:58
X509v3 Authority Key Identifier:
keyid:DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:31:ce:05:f5:f6:8c:68:26:a7:8c:1d:4e:01:75:df:e0:71:
a4:3f:b7:fe:a4:6a:0b:d6:04:85:71:1e:bf:8a:fd:99:b7:2e:
3e:68:f6:a3:9c:3b:08:5c:3e:b9:01:e4:ee:3b:30:cb:3a:41:
6c:1a:3b:1e:d9:50:5a:8d:49:9b:bb:cc:97:17:38:c0:f4:4a:
6e:b7:8a:62:63:d7:74:0b:ee:2e:9b:47:3a:e1:7b:b7:98:33:
6a:be:9b:83:c6:62:62:ed:7b:80:1d:d9:7a:af:1f:17:99:89:
fe:54:8e:e7:d4:44:e1:08:54:7f:7e:58:09:08:8a:98:dc:8c:
f4:d9:e7:59:da:33:9f:c4:c5:d6:d5:3a:a3:4f:c1:55:d7:ff:
e9:a2:3d:54:68:bd:10:0f:2e:58:c5:1b:0f:22:c2:13:a1:37:
ae:a7:05:9e:54:9b:c1:f9:6a:01:16:ca:a6:d2:ff:34:fd:4f:
63:f3:d5:60:6c:c5:68:59:5b:dc:cc:de:d5:94:04:69:a4:4b:
00:be:12:81:8b:d1:93:ba:d5:a6:91:ea:b1:ac:1b:59:93:ac:
85:f4:cc:b3:6f:29:a5:d4:6c:8b:32:2f:d0:7e:f8:74:8b:30:
fa:d0:c9:02:a7:b4:5e:c8:ea:cf:50:b7:34:1b:60:49:4d:4f:
b9:8c:f8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:38 2026 by rpki-client