
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json)
Hash identifier: z3hiHV3W75ncs4UW1sIW5S+K18R6qC8qZi+ALMQL2sw=
Subject key identifier: D5:92:87:73:51:AE:15:25:B0:A4:5E:10:71:D2:51:EB:B2:2E:02:CD
Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70
Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
Manifest number: 024D
Signing time: Wed 13 May 2026 02:25:05 +0000
Manifest this update: Wed 13 May 2026 02:25:05 +0000
Manifest next update: Wed 20 May 2026 02:25:05 +0000
Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: AS9+6FCBo8/tOJHqgierzAew+LtoJE87edCWdaAe5rk=)
2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: z68jUM3pwDuhNvw5K6zmL6nh/8X6Z+78EEQu+Tv6QwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl
rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
Validity
Not Before: May 13 02:25:05 2026 GMT
Not After : May 20 02:25:05 2026 GMT
Subject: CN=6a03e101-3729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:15:67:0f:36:df:86:00:91:79:e8:35:12:
24:9e:d7:2c:92:f9:fc:cf:d6:ca:00:1b:fd:17:2d:
63:c1:04:80:fa:08:58:cc:58:a5:c6:f2:24:3b:db:
1e:e8:c3:09:a1:13:56:ae:b7:8f:dd:fa:d5:d2:dd:
cf:e7:e7:fa:03:4d:62:63:2f:df:9d:23:1b:a6:40:
59:93:15:48:6b:65:10:19:60:bb:9c:f0:df:77:71:
3a:b9:9c:75:31:6d:41:77:48:0b:79:50:e0:0a:58:
d3:b1:4c:82:a5:39:87:2a:6a:c2:2a:1e:29:5b:2d:
30:7b:ed:f1:86:73:ab:d8:13:9b:df:42:ac:80:b0:
eb:17:dc:00:c1:2e:bb:09:8e:5e:06:9b:e4:6a:2f:
7b:e8:75:e3:43:3c:65:4b:22:7d:6f:2f:aa:61:cc:
92:bb:88:71:17:57:6d:b3:76:7b:cf:72:19:db:10:
4e:66:ee:52:09:61:78:56:43:af:e5:b5:c8:0e:a8:
dc:a4:ed:ca:ef:66:98:26:a3:6a:7f:1c:f9:4d:cd:
be:23:da:9e:4d:79:02:5b:87:be:86:8e:2f:da:87:
21:fa:cc:b0:c3:e7:7f:53:e1:81:9c:6c:7a:50:96:
72:7d:90:01:4f:6b:4f:0b:8b:be:f8:27:67:38:d0:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:92:87:73:51:AE:15:25:B0:A4:5E:10:71:D2:51:EB:B2:2E:02:CD
X509v3 Authority Key Identifier:
keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e5:54:de:4c:f8:50:52:d7:77:86:d5:0a:2d:26:a0:49:fe:
d0:ed:73:e9:5e:05:2c:84:d7:0b:a7:d0:32:d8:11:66:6c:ea:
be:6c:e6:b5:0a:a2:7a:69:b2:21:ce:dc:a0:f3:46:df:57:02:
c6:53:34:be:10:12:95:7a:2f:e3:24:c3:23:7b:f9:1e:39:c3:
30:bb:85:af:0c:8b:4e:86:b2:be:ba:62:2f:2a:14:d1:b9:b5:
cf:dc:40:33:98:78:f0:91:eb:e2:04:a7:ff:c6:ef:76:e5:f1:
f3:09:4f:91:d2:44:46:9b:1c:8c:2e:18:0d:0e:cb:81:ef:02:
7d:dd:07:cf:03:bd:67:91:87:74:c4:de:cd:01:6d:45:85:7b:
66:96:68:6d:7f:e3:f9:3f:fb:39:2f:95:48:7e:83:08:4a:be:
a4:b6:2e:d7:7d:3a:e1:4b:8f:38:36:b6:10:54:c7:00:21:97:
e6:46:4a:c4:b1:50:f5:36:28:f8:ed:4d:9a:52:cd:da:0f:89:
9b:2d:b1:6d:41:d2:6b:68:2e:c3:86:b9:c9:74:a8:c8:c8:b1:
63:4e:b2:bb:43:21:6b:80:8f:6e:90:2f:f1:b1:fa:92:8b:e6:
a8:bf:e7:6c:60:a3:46:21:f4:5d:d0:3b:ba:2f:2f:50:b2:d1:
c7:77:b6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:53 2026 by rpki-client