
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json)
Hash identifier: 2wcJUWf49Y5HTSx2xI+6mUaq1SXpsbqa2EapXFy25c4=
Subject key identifier: AB:52:EB:43:76:29:8D:98:57:EC:53:21:13:D6:31:AA:19:6D:75:D7
Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Certificate serial: 02AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
Manifest number: 02AC
Signing time: Wed 25 Mar 2026 01:06:24 +0000
Manifest this update: Wed 25 Mar 2026 01:06:23 +0000
Manifest next update: Wed 01 Apr 2026 01:06:23 +0000
Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: zj6VQBzDZBBudM+hIzp8PlpMi7nDlXZQ7zH2+LOuZhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Validity
Not Before: Mar 25 01:06:23 2026 GMT
Not After : Apr 1 01:06:23 2026 GMT
Subject: CN=69c33510-c666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:da:54:e2:d2:21:54:55:6d:6d:c0:94:99:
d3:78:2a:23:6d:87:53:be:3f:b4:d1:d9:05:74:0e:
b6:ee:3e:95:62:82:1f:3c:d2:92:dd:c8:05:ee:8f:
8d:02:be:66:fc:6d:72:ee:d3:a4:f5:92:11:73:1b:
62:b6:7d:94:5e:e9:a6:c3:b5:36:cd:be:8c:24:5a:
36:8f:68:10:e9:f6:2b:f9:88:8a:e8:97:a5:82:a2:
a0:be:22:42:d2:32:c2:93:e3:e0:91:6e:d3:f0:d3:
d2:41:9b:eb:31:0b:17:25:36:a0:02:3d:f8:fb:f6:
ec:4e:c0:ba:63:63:b3:89:60:6e:6f:61:7b:91:dd:
83:d2:42:0f:9a:59:31:9f:f6:ed:00:f0:81:ae:5d:
2b:dc:0f:04:37:19:0c:9e:54:4f:90:53:f1:ca:e0:
3d:18:d8:6a:02:59:36:e2:8b:6b:2f:95:64:26:02:
f5:95:0c:6b:36:f3:69:27:09:c5:1f:ae:7f:6f:81:
e3:28:5f:4c:fe:d0:b5:83:8d:c5:f7:9b:37:ac:69:
e1:d7:dd:23:f5:05:b6:0a:fe:1b:69:94:8b:f8:0e:
d3:c8:b0:5a:72:31:6d:c5:51:b6:a0:ec:f5:e9:96:
20:9b:3a:4b:6f:6e:72:81:6b:62:63:d1:7e:54:82:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:52:EB:43:76:29:8D:98:57:EC:53:21:13:D6:31:AA:19:6D:75:D7
X509v3 Authority Key Identifier:
keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:a9:7d:c4:4b:1b:48:a9:3f:50:14:e0:a9:98:31:31:03:3f:
d9:ee:48:5c:bb:95:08:26:72:55:10:52:53:89:1d:e8:32:d3:
00:5e:95:58:bf:16:b7:0e:4f:dc:17:0a:3d:a6:d5:56:d9:db:
e3:8f:a1:b9:6d:66:8f:c9:79:4a:53:6a:47:fd:41:62:cd:4b:
40:da:3a:c4:2e:8f:c3:68:e5:36:27:69:8d:66:26:6b:70:16:
13:c5:0f:a8:3b:04:b1:86:02:65:48:64:9b:df:fc:fa:b9:db:
59:cd:79:82:b9:e5:cd:fd:11:d3:54:31:dc:d1:84:39:24:ed:
ca:be:12:41:59:39:89:6b:01:5e:bf:37:c4:15:bf:80:3c:7f:
e9:4e:f0:bd:49:bc:c0:3d:3c:10:f2:c0:64:a7:09:68:1b:b4:
05:27:7c:49:d6:55:a2:e6:95:c5:5d:6d:0f:26:ca:b0:c1:79:
31:0a:e4:e9:a0:c9:18:6a:7e:0d:53:e0:24:87:47:f3:a6:1f:
51:3c:40:fb:fa:27:8d:f0:ba:4b:ed:5a:15:07:bd:34:71:91:
9b:be:88:7e:c3:a2:24:ec:db:36:57:03:39:5d:fd:38:0d:47:
50:15:47:3f:52:1d:07:5b:ce:ca:f9:37:03:cf:4f:05:38:62:
2b:0f:92:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:47 2026 by rpki-client