
$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
File: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft (raw, json)
Hash identifier: cGAvQXT2xLZmsfTHuELwCnHkuaLvhmPI9la3U4VBMB4=
Subject key identifier: 09:E5:91:EF:25:DC:54:9B:36:ED:57:22:72:D2:CF:F6:8A:0D:2E:04
Authority key identifier: D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66
Certificate issuer: /CN=A918049D/serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
Manifest number: 55
Signing time: Sun 05 Apr 2026 07:29:07 +0000
Manifest this update: Sun 05 Apr 2026 07:29:06 +0000
Manifest next update: Sun 12 Apr 2026 07:29:06 +0000
Files and hashes: 1: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl (hash: 4xK3eMfJA4cVHMIGDI1hL/Va/5N/5qnrcikPvBZKkXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl
rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918049D, serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66
Validity
Not Before: Apr 5 07:29:06 2026 GMT
Not After : Apr 12 07:29:06 2026 GMT
Subject: CN=69d20f43-81a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4f:da:41:b3:27:44:30:21:4b:12:56:ba:69:
58:ff:68:a3:0e:11:fc:d8:98:4c:f8:d1:90:aa:0c:
e8:19:ce:eb:8f:24:11:61:25:10:3c:c5:77:42:f1:
f4:4e:70:94:87:39:ad:07:f6:ac:7d:9a:da:49:58:
37:3d:37:32:65:a4:b9:ef:52:25:80:34:39:1f:f5:
7a:38:db:55:9c:23:85:51:7e:fd:d5:dc:c0:21:d3:
41:2b:5e:63:54:0d:ea:80:3e:ab:ad:76:e0:dd:d1:
8c:a9:01:ad:4a:9d:fc:32:32:86:82:4d:7b:82:75:
ae:0f:6a:40:22:ac:ef:6c:ce:72:c4:93:7d:d8:e0:
75:a1:8b:fd:82:0c:c4:5a:ac:68:46:f8:e1:00:46:
3e:eb:99:e0:78:0d:d0:33:99:25:b9:0f:bc:68:f5:
62:c8:14:f5:e8:80:24:28:15:49:25:9e:46:da:91:
d2:b9:aa:51:a6:f2:be:5f:38:96:1d:ac:09:20:02:
88:5f:10:96:2c:d7:ff:4e:c0:ab:31:15:ce:6d:21:
61:d0:78:66:c3:6c:0a:f9:ab:9e:b9:59:22:f3:c2:
42:4c:d4:9c:bc:1d:23:5f:a0:8f:70:1e:83:36:b8:
49:10:1a:07:79:9c:88:52:16:6a:aa:9b:e4:b2:8d:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E5:91:EF:25:DC:54:9B:36:ED:57:22:72:D2:CF:F6:8A:0D:2E:04
X509v3 Authority Key Identifier:
keyid:D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9e:c5:1f:50:43:86:c2:e6:31:1c:a4:ef:e5:5a:39:6a:01:
1b:e8:b6:d7:b3:75:79:1c:5a:ca:c8:f7:cf:54:d1:8e:d9:9c:
ac:40:b3:94:52:9e:2e:b6:13:6f:19:21:22:ba:c1:28:fe:e8:
64:bd:42:a1:94:67:ab:f8:55:57:96:ed:eb:96:15:48:ca:01:
15:25:4c:16:c7:dd:bd:9c:df:03:31:e6:ab:e5:64:5b:f0:4c:
09:0b:00:4a:87:9d:25:89:88:2f:41:30:ff:cb:d9:6e:a4:24:
d4:96:a4:e3:6f:91:96:82:19:3d:4f:3a:e6:22:4a:ce:cc:fe:
75:0a:ec:0e:6c:ab:ce:e7:01:1e:df:d4:2b:7b:74:e7:7c:07:
01:bb:6d:4e:5a:37:b6:df:ff:a0:66:83:f2:ab:d8:a3:8f:bd:
a8:26:12:69:59:66:fe:6a:e3:a5:6a:8b:07:0f:fc:36:bf:57:
d7:e0:18:88:cc:f9:97:ec:f7:c5:2f:a4:f8:5b:48:8b:d3:32:
45:39:52:0f:a5:c0:16:99:c3:b9:3c:91:00:a7:b7:57:9b:3a:
33:72:46:87:8d:9c:a2:cb:8d:9d:ea:89:5e:bf:d8:62:8a:38:
fa:21:b3:34:f4:bb:e4:c6:14:3f:2b:64:75:12:00:e1:cf:8d:
e7:02:b0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:03 2026 by rpki-client