
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json)
Hash identifier: lNVJx5bln7xajiKeAFiCHy2s0NWKhWnT7yFKdgN1gf0=
Subject key identifier: 86:88:64:9A:18:E3:BF:80:3E:7B:00:9C:83:91:B9:09:F6:3C:24:26
Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38
Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
Certificate serial: 352C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
Manifest number: 3526
Signing time: Tue 24 Mar 2026 14:49:14 +0000
Manifest this update: Tue 24 Mar 2026 14:49:14 +0000
Manifest next update: Tue 31 Mar 2026 14:49:14 +0000
Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: wUv3FVYR6bAhEVK4rrhFhJOLzKbQ50MCPaBUyewJWsU=)
2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: RTpAZwruc7NuoT/Wh4GeFBLqLMrhtkNDUYMQpCl+t8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl
rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13612 (0x352c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
Validity
Not Before: Mar 24 14:49:14 2026 GMT
Not After : Mar 31 14:49:14 2026 GMT
Subject: CN=69c2a46a-bb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:ce:4e:9f:ac:12:1b:09:29:61:67:62:cf:
70:6f:91:00:cd:b5:ce:6e:c6:78:87:2e:c0:b4:71:
e3:ec:6e:1e:46:30:42:87:aa:a0:28:7f:32:4e:52:
cb:0a:aa:fc:7f:d9:42:47:06:32:57:ab:0f:84:0f:
6b:bd:17:ea:3a:33:ca:8d:8a:8f:bd:9a:1f:d1:00:
a0:ae:f3:06:a8:c4:0a:6c:68:f5:b5:77:1b:e6:09:
e4:51:1b:34:d1:9d:a3:d2:6b:e9:76:ee:d3:33:76:
9e:86:79:63:07:5b:5f:43:27:83:fe:f9:d6:d6:d3:
b4:ba:0d:81:e6:cf:ab:c5:2e:b8:95:d0:72:b0:1b:
22:df:59:3b:33:a5:42:be:bb:f6:a0:d0:31:c8:82:
41:20:e5:9c:45:75:76:c7:15:05:17:d1:25:5d:bf:
5e:5b:59:6c:72:fb:fd:b2:8c:ec:7c:8b:ec:1b:b4:
fc:84:e8:5d:73:01:da:4a:19:e3:54:ef:50:1b:3f:
6b:1d:07:2a:2e:20:b5:9d:9c:f4:f3:e2:9b:9d:04:
2a:ac:7d:1d:9f:ad:ef:d4:91:bb:c5:47:75:a9:6b:
2d:c0:40:0a:49:71:64:68:b5:02:56:8c:57:8f:fa:
ba:2c:30:e0:05:64:fe:2f:3e:93:41:b3:91:40:e6:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:88:64:9A:18:E3:BF:80:3E:7B:00:9C:83:91:B9:09:F6:3C:24:26
X509v3 Authority Key Identifier:
keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:19:5f:47:19:22:31:1f:9b:55:7a:33:09:e0:6f:b2:f6:cb:
25:ec:a6:20:d8:1b:4f:cc:12:21:20:a9:c7:a4:d4:af:e2:7a:
cb:9d:e4:c5:ff:84:27:95:5f:ae:29:47:5f:33:08:6d:d9:fb:
fb:a3:0d:94:1b:26:5c:91:ae:92:33:f0:4e:b2:b7:32:f8:41:
51:d5:68:5c:6f:33:b9:d4:9f:80:1e:e8:e5:38:59:0c:10:4a:
ab:93:4e:d6:38:da:65:bf:b0:50:f1:ae:83:c2:99:5e:87:71:
75:fd:30:92:a2:30:5f:48:e6:0b:3a:7a:85:13:17:1b:35:b3:
43:47:2d:f7:40:2b:fc:55:1d:c8:44:e2:d3:24:27:59:e4:4a:
02:72:1a:cf:bf:30:24:7d:8d:42:b9:63:d0:5f:8a:a6:ce:73:
7e:50:b2:f7:4b:d8:bb:20:78:ea:ca:14:cc:e4:7e:20:2e:1e:
b4:9e:0e:65:f5:94:b0:50:7e:cf:38:6c:83:0f:67:88:8c:26:
e9:d7:24:90:01:58:93:4f:1a:c0:87:65:99:46:b1:a0:9e:89:
05:45:f7:12:5c:d2:41:3b:49:84:8b:48:00:59:44:66:b4:17:
c8:7f:49:3c:06:63:4c:27:96:a8:4f:a5:5b:92:4c:55:9f:bf:
d4:0c:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:11 2026 by rpki-client