
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json)
Hash identifier: KlfvZWJTb9vIlVcVg+p9osaQIo9lkHBOJPBdt1nQNcg=
Subject key identifier: B3:95:CE:C9:50:13:7A:4E:17:5E:57:62:F7:45:D2:84:D5:89:08:9E
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial: 0265
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
Manifest number: 025F
Signing time: Wed 13 May 2026 02:12:53 +0000
Manifest this update: Wed 13 May 2026 02:12:52 +0000
Manifest next update: Wed 20 May 2026 02:12:52 +0000
Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: Pp9t/TAR65tDSSoOJycip5PnKeMe5qqnxzrC54qTzaw=)
2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: lg5BmvJvKTTVfM5jqqI1swljGGFx139JD9z+JtbKwVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Validity
Not Before: May 13 02:12:52 2026 GMT
Not After : May 20 02:12:52 2026 GMT
Subject: CN=6a03de25-8441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:c3:19:bf:11:ec:1b:3d:00:0b:47:f5:ff:
12:f1:cb:c4:05:38:05:28:62:d3:80:9c:bd:e1:57:
50:e7:96:2d:a8:9c:f7:b5:81:3d:38:25:e4:8e:fd:
be:d4:10:aa:10:17:ad:c6:5d:45:64:01:d0:81:6e:
8b:38:19:f7:f4:e6:0c:35:23:3f:92:4d:bd:df:6d:
b5:68:42:d7:83:66:3b:e1:f9:3e:d1:8e:7f:c0:cc:
5b:28:d8:ac:76:16:7a:b3:bc:4a:ff:54:e9:27:9b:
70:da:0d:d2:5d:9a:a4:7b:63:39:57:a3:4e:c2:e9:
c1:40:3e:f2:a0:da:50:ac:d4:7c:3d:c4:84:12:83:
a1:44:28:7e:a6:f6:72:f2:91:90:fe:31:6b:15:c7:
c1:d3:1d:25:6d:e5:77:01:8b:5e:91:e7:0b:18:76:
75:7d:29:36:b0:36:aa:6f:81:03:1b:f9:1a:32:c5:
c9:c9:9e:7a:5f:bb:a8:f9:99:07:bc:f0:cd:bc:3d:
7d:64:f0:87:35:aa:35:d7:84:30:db:d4:3f:1d:76:
b1:e8:45:44:66:e2:98:d0:a6:78:98:5d:29:26:fa:
19:ea:44:47:f9:0c:58:c7:27:ab:2b:75:fc:c4:6a:
cd:2f:42:74:70:85:87:90:4d:71:73:08:d1:ca:20:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:95:CE:C9:50:13:7A:4E:17:5E:57:62:F7:45:D2:84:D5:89:08:9E
X509v3 Authority Key Identifier:
keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:55:37:b0:90:f2:59:4f:2b:36:9f:a0:f8:16:4d:4c:82:f2:
7a:2a:b9:71:53:bf:2a:87:0b:77:5d:8b:1f:4a:d5:e9:cf:fd:
b5:64:b2:32:1d:bf:1b:2c:f6:8d:f7:44:08:cf:0b:53:a4:2c:
7c:62:b0:5e:0a:f6:b4:ca:22:60:0d:ea:8f:aa:a3:27:db:f2:
87:f9:78:9a:7d:e1:03:cc:90:5a:bb:d3:28:8d:c2:98:4f:53:
5d:9b:27:a6:05:f5:68:82:40:ea:ca:2f:22:25:d8:f6:09:62:
c6:aa:eb:02:c6:d6:18:e4:a9:db:e7:f9:d9:69:5b:5c:d1:5f:
d4:33:1f:71:00:ac:96:88:f5:06:59:f7:ae:af:1e:53:d2:f2:
3f:21:22:f2:0f:d5:7e:49:a0:cd:25:db:88:4d:c7:bc:d4:be:
d0:06:17:f3:d0:89:32:43:9f:2a:20:b9:94:fb:c8:79:26:f6:
3d:96:0b:8a:36:67:c3:c1:07:e7:47:5e:8c:38:39:26:50:29:
fc:a1:97:7d:79:50:39:ff:aa:51:ef:89:a8:d8:62:3b:fe:c6:
f0:4e:e8:be:57:18:a8:9f:d8:30:65:d8:a8:1b:7a:b9:c9:48:
aa:24:b5:e6:22:9c:8c:8a:1a:23:d9:45:b2:1d:95:80:6a:4b:
2f:4e:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:19 2026 by rpki-client