
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft
File: s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft (raw, json)
Hash identifier: WLQA32NyHPpXGK+Q3/rYbWf83QMacJrTPPCIGCH/9P0=
Subject key identifier: D1:DF:18:9D:B5:45:5A:A7:80:AB:21:DA:78:16:56:A7:B3:BB:46:1A
Authority key identifier: B3:60:DB:14:9D:55:C1:8E:03:71:E0:42:87:57:CA:F1:FD:D4:2C:33
Certificate issuer: /CN=A91A05BF/serialNumber=B360DB149D55C18E0371E0428757CAF1FDD42C33
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft
Manifest number: AB
Signing time: Wed 23 Sep 2026 06:52:16 +0000
Manifest this update: Wed 23 Sep 2026 06:52:15 +0000
Manifest next update: Wed 30 Sep 2026 06:52:15 +0000
Files and hashes: 1: s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl (hash: EOuq4y9RD9S6TxsZQcasXqOMZEjnoAkXEFADMXcBD8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl
rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A05BF, serialNumber=B360DB149D55C18E0371E0428757CAF1FDD42C33
Validity
Not Before: Sep 23 06:52:15 2026 GMT
Not After : Sep 30 06:52:15 2026 GMT
Subject: CN=6ab37720-1979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:93:15:78:1a:56:77:f5:3c:60:39:9d:9c:
13:98:d9:6e:ab:3b:b5:48:55:34:e8:4a:71:51:4e:
ce:1a:17:a9:c6:76:e2:cd:1f:86:92:11:e2:d0:30:
62:f8:7f:f7:7d:d9:a2:69:23:76:ec:6d:79:38:88:
0d:10:8f:5b:bc:28:3c:d6:81:de:36:f3:c0:77:13:
9b:70:12:72:80:a1:4e:49:21:cb:06:e1:bb:c4:9c:
13:8e:53:7e:e4:5f:41:f6:06:37:7a:0b:9f:3c:cb:
fa:1a:8c:50:4a:04:ec:c7:5f:74:75:c8:c5:14:06:
8e:06:41:41:bd:ee:83:c1:09:ee:26:52:85:54:19:
6b:8c:f9:ba:b1:b5:68:da:da:e9:64:87:6f:1b:a0:
a6:7e:a8:2c:e9:0e:96:9e:47:06:7d:25:c7:99:6c:
93:90:d7:59:fc:6d:23:ec:b7:d1:ef:1c:ce:a4:d0:
cd:c2:c9:7b:df:6a:7b:c9:1b:81:20:74:86:60:13:
18:03:cd:09:a5:02:29:f2:76:60:1c:05:2d:f8:38:
d0:c1:d4:1e:a3:f0:4f:10:60:aa:9d:fd:03:e6:d9:
51:85:37:1b:62:62:b6:dd:c2:e3:f2:22:27:b9:05:
b4:ec:99:ad:e2:7a:83:3b:79:dd:01:44:9f:a0:ed:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DF:18:9D:B5:45:5A:A7:80:AB:21:DA:78:16:56:A7:B3:BB:46:1A
X509v3 Authority Key Identifier:
keyid:B3:60:DB:14:9D:55:C1:8E:03:71:E0:42:87:57:CA:F1:FD:D4:2C:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:b9:06:1f:53:bf:8c:27:83:77:4e:6f:ee:b3:48:c7:dc:13:
4e:47:00:52:dd:bb:ce:1c:aa:d2:d8:1d:25:21:40:5e:ab:e4:
9e:81:91:57:73:89:c5:9c:f5:f5:22:9a:df:9f:d9:7f:a0:fb:
43:a4:51:a5:e9:74:25:d9:18:74:4f:ce:0a:b4:44:c8:e2:19:
a2:52:8c:8f:18:5e:bc:15:9d:6d:14:7c:11:2e:d5:63:c5:cd:
0b:8a:d0:b7:1b:1f:52:25:63:95:aa:23:db:4c:2a:cf:c9:ab:
be:b2:48:fc:9c:e4:90:24:f6:29:fc:fc:49:80:92:88:5a:1d:
a4:99:89:08:51:a3:a7:d0:02:aa:af:c8:fa:54:f9:05:c2:b9:
3d:75:12:ee:d5:2a:7b:14:f3:18:b8:e5:27:f9:2d:1d:6c:7a:
e3:72:a2:ba:57:f7:3e:b8:63:66:2f:b7:c5:87:c7:2c:14:dd:
7f:f5:ca:92:f9:c6:da:a2:60:52:0f:07:ff:2c:cf:e9:6c:4a:
bd:d8:0e:e3:8c:f2:52:2c:1e:87:61:f9:07:bf:13:d7:99:b0:
b4:a4:d2:6e:e0:fd:73:f4:8f:2d:65:f0:42:04:4b:00:9a:cf:
57:c7:ae:e1:73:e5:86:4a:25:e2:f8:fe:4b:87:4f:39:34:ec:
42:50:9e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:39:51 2026 by rpki-client