
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File: 2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier: x1rFf1zfAVhss6S9tZLBP2q2TMd6QtaNyahk0PbVUiM=
Subject key identifier: 23:5A:08:4C:78:2B:7C:9A:7A:4A:22:FE:F5:3D:D5:04:F4:07:DB:FE
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer: /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number: 24
Signing time: Wed 25 Mar 2026 08:00:57 +0000
Manifest this update: Wed 25 Mar 2026 08:00:56 +0000
Manifest next update: Wed 01 Apr 2026 08:00:56 +0000
Files and hashes: 1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: uWt3Lsawmm+2Mb7iGtQdbLrDDN12N3LnjIrnX8rJkqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Validity
Not Before: Mar 25 08:00:56 2026 GMT
Not After : Apr 1 08:00:56 2026 GMT
Subject: CN=69c39638-de3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:5b:c1:cd:7d:37:f5:9b:3f:a7:98:a1:b7:
a8:5c:58:19:b3:3b:39:88:e0:18:93:a5:c1:5c:8a:
15:fd:8c:cb:83:bf:60:03:3a:67:e4:1b:34:3f:cc:
22:09:5d:4e:c5:cf:9b:8e:aa:d3:83:7b:3d:d8:46:
5e:93:c6:c8:d8:3f:89:ab:c8:09:4c:13:68:2e:7e:
96:ae:5e:a8:1e:e3:9f:05:03:1f:fc:cc:91:ae:8a:
63:c3:74:da:45:81:57:b0:73:9b:8a:d1:d9:f1:e7:
f1:59:3a:b8:ea:c5:c6:30:ce:30:7f:56:b5:d6:79:
01:c3:ae:3b:db:8c:ad:3b:33:00:4f:6a:cc:6e:b1:
65:66:2f:81:20:a0:9e:58:50:33:fe:23:42:fa:5c:
39:cd:53:ea:c9:9c:ee:38:c0:4b:14:52:3f:26:47:
ac:1f:13:08:fb:64:aa:0b:6e:b0:21:c6:92:85:c7:
97:ab:3e:b8:ae:37:d4:22:fc:92:cc:a9:8c:64:cf:
d9:ce:3f:a4:2f:44:c4:cc:86:c5:d9:f7:5b:6b:0f:
6b:89:8c:86:e1:eb:1a:b8:99:59:b6:0e:3b:7a:ec:
17:d3:f0:56:41:78:5e:75:e5:a6:5a:b6:bc:d1:bd:
25:6c:e0:c4:8f:96:7a:e0:d2:4c:19:68:51:85:67:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5A:08:4C:78:2B:7C:9A:7A:4A:22:FE:F5:3D:D5:04:F4:07:DB:FE
X509v3 Authority Key Identifier:
keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:01:6b:63:e9:7f:c2:2b:91:bd:33:a2:76:a8:c4:89:45:44:
25:5e:d0:90:c2:94:d2:0c:49:c8:7f:b7:60:ab:17:64:f2:e1:
61:f2:38:f9:b7:a7:cb:1f:3c:c7:67:c7:e7:9f:53:43:15:57:
d6:a8:6d:aa:04:d0:e4:e3:fd:cc:26:4b:80:22:82:9d:99:45:
76:f3:ba:fa:40:88:71:ac:a1:41:dc:8b:b2:c0:8e:39:07:9f:
53:8b:36:80:f0:25:19:86:22:c6:14:e3:97:19:8a:75:5f:c1:
d7:4a:d4:ee:62:25:b0:b5:6d:40:c9:2c:77:ee:61:87:e1:5e:
36:0b:17:45:3f:c1:d4:f3:9a:5c:bc:e1:fe:aa:56:95:ca:5d:
c4:b4:22:87:19:a8:6c:de:a2:b8:d6:b2:69:15:2f:c7:eb:b1:
9b:f4:f3:dc:c9:93:24:97:83:c5:9d:50:81:46:6a:17:60:fa:
00:07:c8:9a:7a:cb:39:79:13:de:65:55:23:88:d8:de:70:a4:
aa:d8:41:fc:f7:08:0f:09:11:77:c1:d0:2b:ca:65:f6:09:79:
d7:9d:6d:5b:bb:aa:ff:73:db:03:84:7b:96:58:6f:5a:be:35:
3e:b3:ce:4c:6b:bf:53:e8:8b:05:dd:86:8d:5c:9a:b4:2d:8e:
fb:85:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:28 2026 by rpki-client