
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
File: 2wVNT_SDuJTYCF4P43hs4um1MGI.mft (raw, json)
Hash identifier: yO7gNUh56RXGhfhvOZRJ6KW92nzEdjd2nK/lm9xxMIE=
Subject key identifier: D6:FA:CD:E5:B4:43:CC:84:AE:CD:77:48:6C:BC:89:CF:1E:03:89:41
Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
Certificate issuer: /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
Manifest number: 13
Signing time: Tue 12 May 2026 20:30:10 +0000
Manifest this update: Tue 12 May 2026 20:30:10 +0000
Manifest next update: Tue 19 May 2026 20:30:10 +0000
Files and hashes: 1: 2wVNT_SDuJTYCF4P43hs4um1MGI.crl (hash: 4O+fxrcp6symPMoIHnQn06JxnAHpQqgk82W7IBuQINY=)
2: 08AE48C23CEB11F1B92AFD80C4833773.roa (hash: 6tcLUJAPpXxMhDjYEZ6Foh2oBrAUGB58QWwlBnxvt7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Validity
Not Before: May 12 20:30:10 2026 GMT
Not After : May 19 20:30:10 2026 GMT
Subject: CN=6a038dd2-20ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:30:e0:39:1a:5f:a7:e2:1f:7b:6b:73:32:
5f:b7:e1:5b:c7:9f:f6:89:09:fb:de:3f:b7:01:b9:
eb:bb:8c:c3:3c:49:23:4c:29:e5:5b:bf:16:6a:8b:
d1:ab:46:96:50:56:65:e8:8b:39:57:75:11:51:fa:
dc:50:47:a6:8b:83:8b:42:7c:6c:88:bb:8b:d7:06:
8e:73:83:1c:2d:1d:89:8d:1f:ea:f0:15:a8:e1:58:
5a:eb:06:4b:69:2a:b4:c2:11:d9:5b:8f:87:19:15:
dd:f0:b3:ab:69:85:99:3b:d1:18:c7:95:9e:33:7c:
51:af:7e:a9:29:28:cc:f4:d0:a3:0e:91:78:d0:30:
64:e9:c9:90:a6:c9:62:25:c9:d1:56:2f:7b:4b:4b:
1c:5b:73:ae:89:52:94:41:7b:73:b1:7d:2b:3f:9c:
71:02:86:a0:d3:16:61:8e:e7:c0:eb:da:dc:9a:a0:
06:8b:ff:ad:04:ad:90:4f:05:08:cd:8f:a8:21:2f:
c1:ed:0f:6b:e3:d7:fe:c4:de:87:2f:20:ee:fa:f8:
5d:6e:9b:b7:39:2c:82:e9:6c:5a:34:15:14:0b:6e:
12:4f:7d:15:6d:70:c4:a9:46:02:74:64:31:db:cd:
61:65:92:03:9f:7d:e6:ce:aa:1c:a7:a3:da:af:5a:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FA:CD:E5:B4:43:CC:84:AE:CD:77:48:6C:BC:89:CF:1E:03:89:41
X509v3 Authority Key Identifier:
keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:11:86:46:5c:9d:9f:7c:80:a3:fe:35:2b:6d:24:2c:14:8f:
ed:42:57:45:4b:c9:d3:a0:7b:48:cb:e5:ed:16:21:dc:0a:71:
85:28:e2:44:e7:b7:58:83:5d:42:7f:b1:43:07:05:90:bd:a6:
95:d2:1f:5a:ba:92:7a:f6:5e:93:79:ff:0e:2e:aa:d7:92:0e:
a3:e9:e8:63:cc:0d:d0:ec:0b:ca:e0:74:ba:44:f7:2f:22:20:
80:f6:4c:18:d8:23:5d:89:2d:2a:af:44:36:1b:3d:a5:f9:cb:
d6:d4:1a:ad:c7:5b:30:b4:0d:c9:46:16:8e:49:fd:9e:cf:7d:
3b:a6:f4:e8:90:85:91:7a:ae:2b:b0:2d:b2:6e:4f:45:5a:2c:
f8:f6:3d:5d:73:ec:98:17:4d:cc:58:0b:05:da:81:df:6d:a0:
31:06:54:11:32:d3:03:22:3a:05:ce:eb:6f:9f:83:d6:7c:7f:
74:8c:54:94:85:2a:46:b5:0b:35:d6:81:eb:28:94:70:2b:e5:
f3:62:f5:3f:30:f7:fe:fb:52:7d:03:39:02:3d:5f:b4:52:02:
74:6d:87:9e:9a:ec:78:65:55:88:d8:08:fe:5a:d3:02:c6:43:
ee:8e:6e:b0:d0:21:f3:a2:d9:de:43:3a:51:50:4c:27:2a:29:
81:16:58:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:12 2026 by rpki-client