
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json)
Hash identifier: D30blMrp1B8/XCinK7+Vaif/pXW/5QA/bD5zMx6gIsE=
Subject key identifier: 69:75:92:D4:DA:CA:F9:11:D5:F3:18:84:2F:41:64:B8:D3:CD:8C:5B
Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
Manifest number: 0260
Signing time: Wed 13 May 2026 02:17:24 +0000
Manifest this update: Wed 13 May 2026 02:17:23 +0000
Manifest next update: Wed 20 May 2026 02:17:23 +0000
Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: EnHZOR0gdVS+dX0LSntHY8Kz/xIZlbiGXq2Ug2Qv2/g=)
2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: PvZuO5e4GchVGqAm1QbEBiq8YBp2L+bhbVxt20o+A5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Validity
Not Before: May 13 02:17:23 2026 GMT
Not After : May 20 02:17:23 2026 GMT
Subject: CN=6a03df34-b14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:58:45:32:d2:5b:d4:73:28:17:48:34:5f:
a7:c8:11:32:0e:86:22:48:7e:c9:4b:e2:68:22:77:
5e:30:11:19:91:de:33:aa:5d:46:b8:27:7b:5f:cd:
6c:4e:26:b3:5e:dd:ee:3d:e8:12:56:f5:7f:d1:14:
5b:14:2c:00:5b:45:f0:8f:0b:31:b7:1b:a4:e6:33:
c2:24:25:7d:d2:06:94:f7:7b:cc:c4:14:ab:a1:c5:
c0:44:f7:08:40:16:ad:0f:96:0c:7c:bd:75:6f:27:
12:ed:2a:fd:68:51:2c:35:fe:9e:34:ec:ec:85:23:
63:97:b1:9c:33:9f:75:fa:57:c0:72:3c:7b:9a:55:
ef:3a:78:59:f8:22:66:d5:c8:a4:ce:3a:5d:be:e7:
99:da:db:17:50:56:4b:09:ff:6e:5a:df:91:6d:95:
45:e5:c8:2c:59:47:05:db:86:6b:88:0e:b3:b9:a4:
4e:17:98:47:6a:20:7d:c0:c0:67:52:79:25:b4:2b:
52:62:44:97:c9:b9:1c:6c:74:2a:38:7e:b3:c1:e3:
d2:c3:f6:1a:ce:7a:cb:ce:a0:98:02:f2:07:3e:4d:
29:c3:17:78:24:14:51:48:8c:db:19:8e:a5:3a:05:
4f:c8:7e:5b:b9:08:ac:ed:9e:c7:fc:01:30:96:8d:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:75:92:D4:DA:CA:F9:11:D5:F3:18:84:2F:41:64:B8:D3:CD:8C:5B
X509v3 Authority Key Identifier:
keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:3c:a3:a7:0c:09:83:16:5e:59:d3:2c:35:48:60:16:9c:cf:
a5:06:9a:37:94:22:22:4b:c7:89:2a:b3:77:90:3c:7d:78:85:
e0:e8:ee:b8:d9:6e:10:9b:f7:62:48:6a:1a:12:85:3c:38:36:
85:0a:d9:16:4b:06:94:08:0f:8c:ff:19:3b:c6:e0:f5:01:a3:
ba:cb:d4:30:60:d5:34:13:20:48:80:00:49:17:08:9d:93:f8:
e6:16:7c:85:6f:ac:c2:c4:3a:95:30:83:cf:43:bd:29:59:41:
c3:35:46:92:88:ed:96:4a:8a:06:1b:2b:68:bf:d5:c9:96:7e:
3a:46:17:a1:1a:c6:e7:63:69:21:34:10:4a:90:94:fa:fd:79:
2d:f0:57:3a:26:ba:d1:f9:c7:fc:6c:02:f5:b1:d8:92:62:fc:
b7:cb:a3:8d:c5:6d:dd:e1:b9:55:f8:25:f4:fc:86:8a:dd:d0:
15:d3:a0:78:ef:a7:be:59:9a:b7:19:ef:a0:45:7f:e3:32:7b:
93:3c:e1:84:34:30:d9:2b:2c:78:4f:53:c4:9c:ae:b4:e3:f1:
50:31:59:71:aa:17:77:bc:df:97:08:34:76:d1:7e:2a:5e:8f:
cf:56:af:de:74:60:3d:66:12:b7:df:eb:b5:d3:32:a7:be:7f:
8b:e5:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:54 2026 by rpki-client