
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
File: 2iwTK47FBxr425BJG63bwPCntEU.mft (raw, json)
Hash identifier: 97itm1YkVyH7wp+MWJgmYnBY8YxxSP4QnmNiI3qHUgo=
Subject key identifier: 09:A8:18:B0:12:10:02:E2:23:76:9D:1B:A1:7D:B9:7C:FE:A3:6B:92
Authority key identifier: DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
Certificate issuer: /CN=A91534B8/serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Certificate serial: 0380
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
Manifest number: 0380
Signing time: Wed 23 Sep 2026 00:24:01 +0000
Manifest this update: Wed 23 Sep 2026 00:24:00 +0000
Manifest next update: Wed 30 Sep 2026 00:24:00 +0000
Files and hashes: 1: 2iwTK47FBxr425BJG63bwPCntEU.crl (hash: 2sZf9WNx3Mw0fxjlWQJ1k3HRwKN9rMSg1UjdPFF/Pqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896 (0x380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91534B8, serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Validity
Not Before: Sep 23 00:24:00 2026 GMT
Not After : Sep 30 00:24:00 2026 GMT
Subject: CN=6ab31c21-c8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:d7:02:b9:7f:fd:97:16:61:89:40:db:4a:
9c:46:72:66:08:2f:7d:96:56:e4:f8:26:85:8d:19:
71:b7:28:76:96:22:b2:cd:a8:da:86:88:b5:a4:39:
73:35:6b:c3:de:de:21:da:fd:67:a6:05:31:1b:0c:
19:e1:fd:48:e3:5a:d6:bb:f7:05:03:2f:cc:27:d6:
b9:ba:15:b5:d9:54:7d:24:63:91:c0:20:69:55:db:
92:de:24:a9:09:90:cf:6b:bb:67:27:db:d2:4a:50:
bd:04:f2:91:0e:cd:10:08:2a:41:cc:0c:5e:bd:9e:
bb:56:b3:8f:2a:97:c9:f5:03:c5:21:bb:0e:ef:5c:
17:51:6b:3f:6b:23:e4:70:14:a8:cf:bb:49:3d:bd:
12:e7:c4:8a:3e:2d:86:d0:ec:c2:53:97:82:c8:5d:
83:63:b5:bf:6d:7b:b2:29:75:f3:6a:3a:21:21:29:
50:d8:ee:d4:90:23:93:65:d2:1d:3c:4d:12:88:19:
56:fa:35:5a:54:d4:0a:a0:dd:f2:e9:fb:e5:bc:f6:
8e:44:1c:14:8a:eb:95:de:c8:6d:77:2f:65:5f:58:
3d:c2:e9:c5:6d:d7:85:bc:eb:37:ab:81:fa:dc:dd:
4d:62:a7:08:e7:43:a2:63:a5:3d:f2:9a:e9:99:c5:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A8:18:B0:12:10:02:E2:23:76:9D:1B:A1:7D:B9:7C:FE:A3:6B:92
X509v3 Authority Key Identifier:
keyid:DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:f5:5d:3f:2d:9c:87:45:59:ce:1c:8f:de:4a:72:13:0c:7d:
55:69:56:88:6f:f6:0c:b2:51:3f:59:ff:9d:d7:4b:d3:74:af:
93:fa:f0:d3:1b:8c:d8:0b:4c:6c:02:9b:3c:89:21:08:a9:02:
dc:f2:44:59:e1:b0:5b:88:22:33:51:7f:e6:22:db:09:66:e3:
3f:66:b9:27:53:21:e1:9f:e8:dd:4b:47:b9:e1:b8:48:7c:96:
74:3a:a6:e5:ff:25:86:29:c5:1a:c3:18:4b:60:c0:e7:0e:a3:
4b:6b:1e:a1:85:a9:ba:f9:9e:eb:1a:88:72:17:f7:05:7c:5a:
7c:53:6f:a5:c6:84:75:69:59:a8:3c:2b:81:00:1c:05:20:61:
ab:71:b1:9a:c9:6c:42:ce:ec:f6:13:c0:38:ab:b5:bb:72:17:
87:5b:34:3b:c5:08:14:ec:87:27:1c:77:36:5f:23:c3:db:0f:
55:61:93:66:b3:52:98:51:35:4a:8c:6b:e0:0e:6f:2e:c5:b0:
83:d5:bf:15:c9:f3:4d:7c:38:c1:28:57:cc:8b:3a:55:ee:5c:
10:81:61:23:a0:f7:16:48:49:b7:4b:c9:32:4e:1b:d9:8f:f5:
f7:3f:14:93:d2:0f:77:b4:6c:7e:2a:2b:ca:d8:90:54:51:99:
84:51:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:42:06 2026 by rpki-client