
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File: 2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier: kgvrSFjPo/rEsGOhC6asuDlMIJpptb+RtingwNFIfww=
Subject key identifier: 07:B1:57:9A:06:8D:C3:21:70:E6:B1:00:02:55:DA:DA:91:06:11:0C
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer: /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number: 3C
Signing time: Mon 11 May 2026 08:42:06 +0000
Manifest this update: Mon 11 May 2026 08:42:05 +0000
Manifest next update: Mon 18 May 2026 08:42:05 +0000
Files and hashes: 1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: Kb0UslMPMlvkAbneBHy2pU0VULGu7nltmbk0tTnisTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Validity
Not Before: May 11 08:42:05 2026 GMT
Not After : May 18 08:42:05 2026 GMT
Subject: CN=6a01965e-e6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:2a:1e:2a:31:a4:db:7a:1b:54:fe:43:a3:
aa:cf:d2:39:a9:56:56:b4:a4:7a:c4:e7:9c:c2:e2:
a4:5e:15:39:d7:a6:bd:84:39:42:11:d7:c3:47:ca:
83:02:1e:b4:42:ed:c4:85:64:cc:54:48:08:49:41:
8d:28:8d:5c:e7:b9:f7:a2:ff:26:27:10:90:b1:de:
7e:70:ac:92:d0:08:be:e8:05:c4:c3:02:7b:f0:c4:
98:16:0d:7d:12:c8:a2:a1:a9:ff:36:b0:6d:e2:f3:
fa:6d:a9:97:e4:dd:5c:44:95:6d:df:27:73:d5:42:
b1:c7:f7:2b:0a:34:98:0c:9a:d0:11:f8:98:fb:b3:
b9:a9:79:fb:d5:d1:97:a6:c4:1c:5b:5e:8f:da:53:
73:40:82:89:42:24:ff:70:56:45:1e:76:d3:07:db:
4e:30:78:13:88:db:72:8c:cb:56:5e:6c:c4:09:96:
38:37:c9:cc:bd:f3:57:2f:1f:7c:21:7f:7c:37:d9:
da:b7:4e:ab:e8:c2:28:74:66:fa:dc:5a:b3:e4:36:
e4:f7:6c:b8:d2:8d:8d:7a:ce:24:57:73:15:d7:4c:
dd:12:25:74:7c:78:4c:40:da:95:c7:eb:d7:26:a0:
2f:3d:01:a1:10:df:6d:97:f6:f7:01:e4:05:32:b1:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B1:57:9A:06:8D:C3:21:70:E6:B1:00:02:55:DA:DA:91:06:11:0C
X509v3 Authority Key Identifier:
keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:49:d7:3a:fc:0b:cd:d3:63:96:79:29:86:51:ef:1b:d9:86:
6e:1e:06:ec:04:2c:14:48:b7:2c:22:32:72:86:6b:df:01:b5:
5b:3d:bd:66:94:e1:7b:6a:63:6b:fb:39:d6:f8:38:16:ad:13:
ad:04:60:24:e3:63:de:de:91:fd:59:54:e9:16:ff:60:73:55:
6b:c8:c6:04:b8:58:07:8e:6e:5d:ad:d3:40:a0:b1:00:a5:66:
73:cd:01:45:b3:78:51:e6:26:dd:b0:c7:ad:54:a2:97:26:2d:
a6:45:a7:9e:40:35:3f:7c:95:6e:38:46:58:52:0d:34:8b:d3:
49:c2:80:b7:7e:97:d3:02:a5:d7:0d:2c:10:89:01:9f:ce:36:
15:2a:a1:21:1e:02:a8:43:79:9c:86:41:ca:54:60:6b:0a:66:
06:4f:45:2c:4d:54:98:dd:28:da:40:52:8c:bf:ec:01:66:5d:
31:d2:ad:3c:1f:5d:bc:66:fa:bb:22:4f:b1:8c:83:ff:10:2b:
19:b0:f5:24:b4:df:8d:31:c1:02:33:9a:87:45:6d:a1:54:20:
f3:55:a4:16:d2:cf:45:44:9c:94:70:eb:34:66:dd:e1:8a:4b:
34:5c:bb:c2:59:25:3b:02:6b:f5:2e:e3:dd:4e:38:2d:ba:02:
14:ab:f3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:29:45 2026 by rpki-client