
$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
File: 2iwTK47FBxr425BJG63bwPCntEU.mft (raw, json)
Hash identifier: j6FyJmk6uvUZxTDO8vgGoo7JFFR1Z8o7E/cNhLgP2QY=
Subject key identifier: 31:65:CF:CF:AE:03:85:4F:7D:3A:9A:4A:85:F0:F3:A5:1E:DE:C3:90
Authority key identifier: DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
Certificate issuer: /CN=A91534B8/serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Certificate serial: 035F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
Manifest number: 035F
Signing time: Tue 21 Jul 2026 01:51:30 +0000
Manifest this update: Tue 21 Jul 2026 01:51:29 +0000
Manifest next update: Tue 28 Jul 2026 01:51:29 +0000
Files and hashes: 1: 2iwTK47FBxr425BJG63bwPCntEU.crl (hash: RIVo12sq+JqFSg3fQViauwiXlw4aCM6c16xA1tklfZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:51:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863 (0x35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91534B8, serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Validity
Not Before: Jul 21 01:51:29 2026 GMT
Not After : Jul 28 01:51:29 2026 GMT
Subject: CN=6a5ed0a2-646b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8d:d9:2e:75:7d:fb:1a:4c:ef:05:25:c5:2f:
0b:d3:61:c5:f3:45:e4:b5:9a:c9:d9:cf:55:89:15:
96:5c:b3:7a:6b:29:28:51:69:ee:b5:45:29:60:5f:
ea:2d:a0:dd:67:0e:8a:cc:4a:1f:98:de:1b:dd:45:
c0:1d:bf:64:0f:82:37:9d:74:88:7b:f3:cd:30:bb:
49:48:13:77:0e:0c:d9:54:a4:d1:47:b9:82:74:be:
bc:7b:e6:02:a4:3c:b1:9f:b4:b5:83:75:c6:42:85:
e2:77:b8:5f:be:06:67:26:f4:78:11:44:eb:67:c1:
a2:53:e7:2e:f6:20:9c:f1:87:23:d5:ad:0c:61:c0:
4e:33:51:52:c7:d7:2c:9a:d1:ef:53:05:b9:6b:90:
08:1f:1f:76:7f:70:6b:d1:29:fd:c1:3f:7e:74:f7:
89:bd:70:e7:c3:a6:60:69:0a:06:c8:4d:23:74:61:
f0:e9:27:74:d0:c8:2a:cc:6a:46:6a:8c:08:6c:c2:
ba:5d:5d:d4:4c:71:94:b5:63:7e:af:9e:52:93:ed:
39:1a:a5:d0:b2:50:f2:67:f4:69:11:f1:e9:17:a9:
86:a6:87:8b:d8:36:cc:18:69:1b:6a:f9:ab:93:f1:
c0:5a:2a:3e:56:0d:cc:85:49:7a:6b:c7:50:af:e1:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:65:CF:CF:AE:03:85:4F:7D:3A:9A:4A:85:F0:F3:A5:1E:DE:C3:90
X509v3 Authority Key Identifier:
keyid:DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ca:81:88:33:15:e4:28:3c:d0:e3:ed:6e:10:6c:65:4d:92:
c9:47:2b:35:84:3e:6e:c7:64:1e:d6:7a:1c:9e:45:5c:07:02:
98:a1:1b:fd:bf:1f:60:d3:6a:4c:de:c3:47:e0:b8:d7:1e:f3:
f7:5d:52:01:53:75:c1:af:23:87:46:2d:27:24:3a:c2:d1:63:
8a:89:c5:03:74:fd:51:bb:1c:21:d3:65:0c:9b:d5:c0:be:fb:
63:38:eb:bc:27:7e:b6:5c:02:07:ea:59:1f:d7:42:09:b6:72:
3f:f7:67:b2:d0:07:ef:49:ae:b1:ab:19:6b:2a:3c:fb:e8:e1:
7d:c9:65:a1:3d:ba:34:eb:e4:1c:3b:5f:b3:34:b2:16:dc:9b:
f2:3c:41:b5:0c:86:50:9d:66:b4:61:48:9b:92:77:3a:72:e4:
53:5d:d8:44:48:cf:7d:e8:0d:23:87:a8:3e:c0:ed:14:5f:45:
d4:57:27:25:99:fd:5a:75:e4:cd:f1:e6:fc:d6:ae:28:af:23:
85:6a:3d:e1:ee:b9:0e:17:63:16:70:35:b3:6f:0c:45:96:81:
ab:d6:c1:80:0e:1b:b0:5e:fe:40:77:48:c1:d8:a3:08:a7:bd:
d3:65:9a:47:a9:e3:4f:b7:0a:40:41:4d:16:5e:8c:68:8b:9c:
95:80:72:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:35 2026 by rpki-client