
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
File: 2K83cS1WsbaT720D40bADPPwST4.mft (raw, json)
Hash identifier: g92sPhLHM75GrKYVYm4JbFu2VyfKtU+oAGUcP1Q/XBE=
Subject key identifier: AF:21:E5:68:50:96:D0:D7:F0:92:51:62:E5:49:21:27:11:32:46:62
Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E
Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
Certificate serial: 1027
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
Manifest number: 1009
Signing time: Tue 12 May 2026 17:29:40 +0000
Manifest this update: Tue 12 May 2026 17:29:40 +0000
Manifest next update: Tue 19 May 2026 17:29:40 +0000
Files and hashes: 1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: 1az8nbEtTTFC4q2jOtZCn+kLRAVPVAFApiVMp3zFZ6g=)
2: F0F0DEC2C43411F0836DBC7DC4F9AE02.roa (hash: LMzi/nUop3Zg3Ri+ttMW1AIJQZt36oNcqeMlHwO8Bco=)
3: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: 1K8MV4sIj8T9zYYuz63dsbeo/qY6X7HrLn7VydAG5JM=)
4: AFCF76ECC43411F0982E427DC4F9AE02.roa (hash: jArh+Kx+M9ITkZfnTl8gN4nLiWXlDhetGK8juVgx8K0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl
rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4135 (0x1027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
Validity
Not Before: May 12 17:29:40 2026 GMT
Not After : May 19 17:29:40 2026 GMT
Subject: CN=6a036384-18b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0d:d8:3c:f1:c2:04:ca:13:cc:64:e0:9b:e9:
bf:e2:37:6b:63:c2:7d:06:8b:4b:0c:85:87:1f:e9:
95:89:ca:a3:fd:e1:a1:86:4a:88:d3:47:99:b8:1d:
af:5c:f4:55:c8:a5:9f:3a:35:e1:9a:1f:4a:67:e2:
e4:48:0a:a7:2b:1d:14:f2:fd:d4:91:e9:da:4c:c7:
ac:70:87:f9:80:f9:cf:26:cc:a4:23:38:e9:e9:50:
41:1b:62:65:6d:dd:5c:6d:36:a7:e7:86:e1:26:52:
61:d8:5e:b5:a9:77:f6:3e:2c:77:60:61:e4:15:ff:
e6:8d:9d:0f:6b:ef:b2:60:cd:e6:1e:93:1a:e0:0d:
7e:72:8d:f9:5a:f0:e4:8e:92:b8:89:a0:b4:eb:f4:
b1:e9:89:b6:42:6c:8e:56:d7:a3:78:bf:40:85:b6:
8e:94:a1:e9:a4:00:b7:b5:d9:9c:e8:35:54:55:27:
a7:20:91:42:c0:8e:2d:4e:e4:62:58:d1:fa:6e:05:
d1:3e:fa:d3:d3:eb:1a:2d:d5:29:e1:59:dc:ba:f4:
6a:72:37:77:25:ca:a4:fe:6a:79:a0:36:fc:9c:e8:
f7:d0:9b:20:a5:a6:3a:4f:45:44:18:d5:b9:da:70:
fd:d8:d7:a0:7f:4b:74:31:f1:99:9a:33:4f:a4:7a:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:21:E5:68:50:96:D0:D7:F0:92:51:62:E5:49:21:27:11:32:46:62
X509v3 Authority Key Identifier:
keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:58:f7:a1:07:d3:25:31:fa:24:c2:13:32:8f:31:21:f2:ea:
d0:72:3b:4f:30:d7:79:89:5c:75:0a:0a:1c:07:02:d4:2e:bf:
c6:0b:33:5f:57:11:c6:23:91:3d:d5:3e:ed:73:c1:bc:7e:5c:
fd:95:7c:bb:a2:e3:e3:32:ed:e0:45:d1:6e:7d:f0:57:59:07:
45:e0:1a:fc:0b:fb:5b:a7:d1:53:97:cb:94:dc:ca:1f:8a:07:
db:29:9e:2b:15:94:71:9a:d4:d2:7c:0e:eb:a3:f7:ac:37:37:
4e:21:97:77:fb:6d:55:d3:9c:6a:86:96:f2:0d:64:64:94:86:
ed:aa:ee:ea:4c:45:e8:91:ad:05:d3:1a:6e:47:d6:08:6f:6e:
fe:47:f0:45:7e:59:24:a5:eb:e8:a9:be:34:cf:34:32:43:5f:
44:f3:88:a0:ce:80:7e:05:25:4f:c3:9b:7a:27:cb:ec:5e:df:
58:bd:4b:32:14:c9:70:18:4c:d4:15:41:31:77:30:26:7b:e0:
87:92:3f:32:73:93:56:e8:f7:e5:ea:9c:42:8c:9e:14:8d:48:
1f:c5:60:1e:0d:d2:9b:f3:a0:c7:04:49:3d:4c:61:ad:73:32:
ea:c1:5c:b1:f9:35:23:51:e8:94:4b:10:b2:b6:6d:3c:40:c9:
dd:c9:8e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:12:48 2026 by rpki-client