
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
File: 2YRcGequkJIocqDK_QUfFmFPhK8.mft (raw, json)
Hash identifier: dwIw+S96U6f/2u/Q1PRmSkDhU+wJoeNNkspKRtb/DHs=
Subject key identifier: 27:EE:D0:0D:AC:69:25:1C:91:2F:40:94:44:BE:D3:D6:5B:20:FE:CA
Authority key identifier: D9:84:5C:19:EA:AE:90:92:28:72:A0:CA:FD:05:1F:16:61:4F:84:AF
Certificate issuer: /CN=A91C6BF0/serialNumber=D9845C19EAAE90922872A0CAFD051F16614F84AF
Certificate serial: 0ECB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YRcGequkJIocqDK_QUfFmFPhK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
Manifest number: 1107
Signing time: Tue 12 May 2026 17:44:22 +0000
Manifest this update: Tue 12 May 2026 17:44:22 +0000
Manifest next update: Tue 19 May 2026 17:44:22 +0000
Files and hashes: 1: 2YRcGequkJIocqDK_QUfFmFPhK8.crl (hash: GvMizPdPWBvZeUZAtx5haO6s8i0Vk0Yed4jyGSZx6cE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.crl
rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YRcGequkJIocqDK_QUfFmFPhK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3787 (0xecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BF0, serialNumber=D9845C19EAAE90922872A0CAFD051F16614F84AF
Validity
Not Before: May 12 17:44:22 2026 GMT
Not After : May 19 17:44:22 2026 GMT
Subject: CN=6a0366f6-ceaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:04:8f:56:fc:de:03:62:10:4e:9e:26:46:
a8:b7:96:ce:f2:cc:47:f8:ef:13:fd:4e:32:cc:fa:
96:34:3a:c3:4a:b8:99:4a:8c:99:f3:32:e6:27:f5:
39:94:97:4d:63:84:3a:a0:6e:7a:d6:e0:b4:dc:0b:
23:66:0a:03:ae:75:ea:3b:59:21:15:b4:0a:61:2f:
91:80:d5:b7:de:87:dd:ac:86:43:20:7b:d4:c4:fd:
62:a0:2d:d8:e7:2a:62:1e:9e:a6:0f:7f:f0:00:30:
79:0b:de:5b:90:42:8a:b1:73:e5:a6:10:07:f5:ba:
0b:33:7a:a7:d1:ce:01:60:dd:aa:e2:40:5b:17:f2:
fc:2d:82:81:ab:54:f7:bc:69:23:53:f4:91:ce:d9:
bc:b6:1d:20:13:53:8c:30:11:71:d0:7b:71:a3:d1:
49:e7:1e:0c:32:5d:9c:cc:38:0d:8f:fe:a8:99:3d:
06:4a:03:6d:8e:7e:82:b8:62:49:30:6d:15:9e:28:
44:43:6e:9c:ba:8b:5c:59:3d:ec:db:fc:7d:1a:6a:
02:4f:25:73:a9:f6:6c:cf:c5:7c:dc:19:8b:f0:ff:
bc:5b:2b:a6:38:f2:28:b4:6c:66:48:5b:f4:b6:10:
5e:46:43:ca:57:c6:9b:f1:67:7c:a8:3f:8d:b0:bd:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:D0:0D:AC:69:25:1C:91:2F:40:94:44:BE:D3:D6:5B:20:FE:CA
X509v3 Authority Key Identifier:
keyid:D9:84:5C:19:EA:AE:90:92:28:72:A0:CA:FD:05:1F:16:61:4F:84:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YRcGequkJIocqDK_QUfFmFPhK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b4:54:ec:6b:d4:f4:50:5e:c8:7e:e6:6c:9e:75:f3:cb:9f:
64:df:7d:dd:bd:4a:fa:74:6d:d4:f7:3e:58:b3:dc:b2:08:c7:
d7:5e:37:65:eb:3f:3e:64:76:c8:92:ca:3d:c3:2a:5f:5e:78:
7f:3e:38:db:a6:0a:3e:62:5c:12:64:54:58:cf:fc:7b:4f:e3:
ed:70:23:cb:73:47:b1:a6:2e:d8:59:f6:1c:01:4a:62:b4:18:
e8:76:80:01:5a:b1:bc:7e:c7:25:85:e4:17:a9:33:d1:2c:d1:
05:d0:32:93:7a:83:33:25:ca:8b:8d:f9:78:33:bd:d4:7a:7d:
4b:cf:a2:b1:b6:4f:1f:89:d0:94:e2:c9:86:a9:22:26:53:cc:
e5:6b:7a:45:2e:5d:b7:75:32:3d:ad:cb:73:8f:27:50:49:3c:
3b:f6:cc:0e:b8:83:f6:07:ee:ae:d7:dd:fe:25:4b:ec:5c:7c:
67:24:3d:84:12:79:77:6a:1c:37:7d:cb:79:75:1e:79:88:56:
05:b2:64:d4:db:6b:ee:08:4f:53:fa:b5:4c:5b:c3:05:8c:b4:
4d:d1:3d:39:f9:f0:d1:41:93:f5:75:a5:05:fa:d1:1e:1b:6b:
e5:6f:3e:42:9d:60:8b:e3:f9:57:1f:e1:21:f9:e5:f8:4e:37:
da:85:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:51:25 2026 by rpki-client