
$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
File: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json)
Hash identifier: idRwCRECe8a1mBrYKpUyH76PYn2eSTXzVEc4/I9cMP8=
Subject key identifier: 6C:5E:9A:F0:16:D1:7A:D4:2F:3C:A4:97:8B:59:5D:F3:F8:9D:81:60
Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4
Certificate issuer: /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4
Certificate serial: 04D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
Manifest number: 04D6
Signing time: Sat 04 Apr 2026 23:35:18 +0000
Manifest this update: Sat 04 Apr 2026 23:35:18 +0000
Manifest next update: Sat 11 Apr 2026 23:35:18 +0000
Files and hashes: 1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: 7DYKl7n5mUtq1Ylet+z+ir7zfjgTb4qyKyNdnRQCPk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl
rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91487B2, serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4
Validity
Not Before: Apr 4 23:35:18 2026 GMT
Not After : Apr 11 23:35:18 2026 GMT
Subject: CN=69d1a036-33dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:90:62:5e:c9:4a:4e:fb:5c:c2:c1:78:39:
7e:5c:3d:3b:7e:72:84:60:2f:3a:f9:29:7f:9b:df:
1e:c6:07:cb:ee:67:05:e6:9c:73:ca:17:26:7c:90:
46:d7:a7:ac:32:35:24:00:90:ed:ce:fb:77:1c:0b:
7b:f5:c3:e9:9f:20:a4:c3:01:04:8f:b1:91:45:90:
c0:37:b4:51:f8:ab:d4:57:b2:42:79:54:e5:95:72:
f4:40:1c:9e:e3:4d:5e:56:66:06:ba:56:1f:bf:d0:
c4:c2:6c:21:ea:6f:80:3a:ec:cd:18:9b:55:fd:49:
ea:cb:e0:f2:8d:b4:bb:5d:32:7c:5b:35:65:e7:89:
eb:5f:98:4d:63:16:e7:b5:7b:5f:6c:e7:8c:8f:ca:
66:78:45:45:d4:48:b5:87:84:80:e5:a4:52:94:af:
14:07:8f:4e:02:1d:55:bd:46:7a:4c:83:65:9e:a3:
4f:50:f6:6b:38:7c:4c:7a:fe:8d:29:a3:ec:2e:11:
2d:3a:72:37:eb:5f:f7:84:c5:09:02:40:b9:e2:ef:
23:e6:bd:dd:27:82:6c:49:4e:da:87:4b:1f:0b:d9:
52:31:52:d4:6d:f5:1d:55:88:38:a7:08:5c:7e:2f:
8d:7d:3f:3b:5f:37:8e:cf:48:d9:03:bf:db:ce:ed:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:9A:F0:16:D1:7A:D4:2F:3C:A4:97:8B:59:5D:F3:F8:9D:81:60
X509v3 Authority Key Identifier:
keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:ed:19:7a:92:ee:b4:31:98:78:87:64:64:ec:34:b4:0e:6e:
75:ff:b9:87:bc:61:a1:54:78:d3:4c:f1:68:23:a4:59:77:e2:
f5:b2:83:80:bd:6e:62:ae:d0:6d:76:c4:1b:30:87:f6:cc:47:
f0:00:21:fb:fe:51:c1:61:9c:c2:75:18:80:21:21:f7:d2:42:
0c:17:39:2b:40:12:3d:1c:9c:13:d9:cf:37:69:2b:2c:b8:74:
51:c2:2c:e5:69:b7:0d:2b:fd:ef:5f:34:12:b0:12:e1:0c:8e:
38:49:09:29:3b:2e:2f:f4:ad:22:36:0d:ff:45:ea:f0:9e:d4:
3e:62:c5:8c:3d:5e:c1:68:11:2e:02:1d:eb:87:a2:49:f5:c3:
ad:d8:dd:6a:a0:8c:6e:86:f9:4d:69:12:11:15:88:1c:00:93:
8d:69:80:51:f1:06:24:3b:0e:9f:44:c2:32:2a:34:64:a6:4a:
44:30:4f:63:12:8a:6d:88:a1:10:fa:68:dd:e8:07:5b:0e:ba:
56:c6:51:af:35:fa:58:93:d6:18:95:1c:bd:1b:cb:e6:1b:e8:
d7:6e:5a:48:da:57:73:38:1b:c5:f6:70:a8:52:73:b2:c2:91:
59:7c:bc:28:c1:37:5e:73:1d:95:1f:c6:bb:8b:9e:97:12:7b:
7d:f6:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:54 2026 by rpki-client