
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json)
Hash identifier: PQ1e4i1coUGyEWZz5PLtx5NtCr9LPz6pfiPuL5KCugs=
Subject key identifier: 16:AE:1E:36:E2:15:81:2B:53:29:53:AB:02:E5:9B:8D:0A:2E:8E:2B
Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38
Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
Certificate serial: 3545
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
Manifest number: 353F
Signing time: Tue 12 May 2026 14:50:49 +0000
Manifest this update: Tue 12 May 2026 14:50:48 +0000
Manifest next update: Tue 19 May 2026 14:50:48 +0000
Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: 7kBksnVLCoihT2YuhAd0Bmz6hkcGkr5cbdaTOpDI8ME=)
2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: RTpAZwruc7NuoT/Wh4GeFBLqLMrhtkNDUYMQpCl+t8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl
rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13637 (0x3545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
Validity
Not Before: May 12 14:50:48 2026 GMT
Not After : May 19 14:50:48 2026 GMT
Subject: CN=6a033e49-ff79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:d5:3a:d3:d7:28:22:34:72:1f:20:9f:07:
6b:5b:19:f0:00:28:66:d7:dc:a2:21:02:bc:99:07:
38:53:84:90:ec:62:c0:da:26:f0:ac:bc:1a:4d:98:
de:3e:fc:95:82:22:7a:f5:1e:f6:94:84:34:cf:d6:
28:9b:42:06:79:3f:ad:e9:be:17:4c:b9:a5:2f:96:
e5:e6:90:11:a1:be:20:01:41:e8:10:aa:18:29:a4:
5f:05:ff:3e:56:e2:1e:02:36:fb:de:75:86:19:8c:
cf:a1:9c:90:f2:4a:d0:f1:bd:b7:85:a1:f2:7d:92:
95:e5:21:a5:5a:05:dd:21:f4:61:83:33:aa:3e:f3:
0c:b2:7b:7a:08:e6:7b:fe:5a:37:ff:6c:1f:43:bf:
db:32:66:b2:0f:f0:cc:8a:93:f3:8d:5e:c3:43:0b:
65:c4:e5:92:eb:0b:9a:79:d7:5b:83:a6:6c:65:17:
1a:87:06:e1:28:a6:8f:ef:76:d6:b4:7b:71:77:fe:
b7:4a:8e:8a:87:64:1b:e0:10:04:59:40:44:f7:27:
e5:3f:f8:5f:2a:91:01:dd:4d:b8:a6:eb:08:4a:c3:
94:e9:ae:d7:8f:64:96:4c:6f:b0:6d:30:c7:f7:dc:
eb:d4:96:f2:b5:df:6a:ad:8a:7d:fb:c2:34:04:d6:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AE:1E:36:E2:15:81:2B:53:29:53:AB:02:E5:9B:8D:0A:2E:8E:2B
X509v3 Authority Key Identifier:
keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:c9:22:71:bd:f5:d8:04:02:4a:a3:9e:29:a3:41:9c:03:
c9:88:50:67:59:91:f6:a5:62:47:84:39:d0:5c:5f:a2:0d:c8:
b6:b6:24:29:2a:3e:bc:28:ff:84:99:62:f6:40:a8:21:44:76:
b0:31:e1:72:e5:32:9c:81:3e:6e:f4:07:15:f9:68:96:31:2c:
f7:35:68:b5:ae:ca:2c:5f:ac:08:f6:c5:00:c8:56:31:2b:12:
a4:72:f9:ea:ef:d8:eb:d9:5f:3c:20:a1:8b:5f:31:79:a2:f7:
03:1e:86:88:90:e1:59:06:ac:5a:3e:81:09:93:3c:cd:68:5b:
fc:c1:d0:a7:36:9a:67:e1:ca:35:f7:3b:33:82:cf:47:eb:a9:
54:50:3f:6a:28:02:2e:e8:a6:26:06:ef:90:04:a8:d5:9e:70:
87:31:84:f4:64:b9:05:7e:b5:e4:e0:27:1c:c5:5e:b2:9e:41:
60:2a:74:6c:49:65:d5:ef:36:cc:f3:3a:dd:c3:dc:91:62:9f:
a5:9e:98:05:7a:f8:a8:f2:23:ec:6b:87:d4:43:8e:12:c2:27:
96:de:fa:a8:b8:04:d3:13:78:f0:93:34:3f:c8:56:69:f2:97:
2d:59:47:ff:2f:de:df:3e:8d:59:68:96:a4:37:bd:6d:03:a4:
0f:d4:46:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg5QjYxMTAvBgNVBAUTKERCMDMyNzE0NDNFNzVENkQxOTUwNTBFREM4QjYxM0VE
NUZGQkQ4MzgwHhcNMjYwNTEyMTQ1MDQ4WhcNMjYwNTE5MTQ1MDQ4WjAYMRYwFAYD
VQQDEw02YTAzM2U0OS1mZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkc3VOtPXKCI0ch8gnwdrWxnwAChm19yiIQK8mQc4U4SQ7GLA2ibwrLwaTZje
PvyVgiJ69R72lIQ0z9Yom0IGeT+t6b4XTLmlL5bl5pARob4gAUHoEKoYKaRfBf8+
VuIeAjb73nWGGYzPoZyQ8krQ8b23haHyfZKV5SGlWgXdIfRhgzOqPvMMsnt6COZ7
/lo3/2wfQ7/bMmayD/DMipPzjV7DQwtlxOWS6wuaeddbg6ZsZRcahwbhKKaP73bW
tHtxd/63So6Kh2Qb4BAEWUBE9yflP/hfKpEB3U24pusISsOU6a7Xj2SWTG+wbTDH
99zr1Jbytd9qrYp9+8I0BNYTFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBauHjbi
FYErUylTqwLlm40KLo4rMB8GA1UdIwQYMBaAFNsDJxRD511tGVBQ7ci2E+1f+9g4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8zOUFBMEEwMjFE
OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhXMFpVRkR0eUxZVDdWXzcy
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ3TW5GRVBuWFcwWlVGRHR5TFlUN1ZfNzJEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODlCNi8zOUFBMEEwMjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhX
MFpVRkR0eUxZVDdWXzcyRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASc7JInG99dgEAkqjnimjQZwDyYhQZ1mR9qViR4Q50Fxfog3ItrYkKSo+vCj/
hJli9kCoIUR2sDHhcuUynIE+bvQHFfloljEs9zVota7KLF+sCPbFAMhWMSsSpHL5
6u/Y69lfPCChi18xeaL3Ax6GiJDhWQasWj6BCZM8zWhb/MHQpzaaZ+HKNfc7M4LP
R+upVFA/aigCLuimJgbvkASo1Z5whzGE9GS5BX615OAnHMVesp5BYCp0bEll1e82
zPM63cPckWKfpZ6YBXr4qPIj7GuH1EOOEsInlt76qLgE0xN48JM0P8hWafKXLVlH
/y/e3z6NWWiWpDe9bQOkD9RGag==
-----END CERTIFICATE-----
Generated at Wed May 13 04:27:36 2026 by rpki-client