
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json)
Hash identifier: r4t1eFza0+GfQkauLF6MMojYY3lEYICoz9KJBzzVg0E=
Subject key identifier: F8:EE:D7:5A:AC:45:8B:3F:DB:26:62:25:01:06:77:01:84:EF:6D:1E
Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38
Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
Certificate serial: 3587
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
Manifest number: 3581
Signing time: Fri 18 Sep 2026 14:48:48 +0000
Manifest this update: Fri 18 Sep 2026 14:48:48 +0000
Manifest next update: Fri 25 Sep 2026 14:48:48 +0000
Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: lgjG4IGY4gq7djKdYVht17WUwRIcrU217ZFUpm5da8A=)
2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: RTpAZwruc7NuoT/Wh4GeFBLqLMrhtkNDUYMQpCl+t8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl
rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13703 (0x3587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
Validity
Not Before: Sep 18 14:48:48 2026 GMT
Not After : Sep 25 14:48:48 2026 GMT
Subject: CN=6aad4f50-98d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:c4:24:ba:23:6a:c9:79:ee:a0:d5:d1:80:
db:a4:93:57:08:0d:5c:ba:f8:10:df:44:2e:6b:2b:
dc:04:73:f1:f6:33:d0:99:83:37:5d:d0:41:54:4a:
c5:cf:d6:ad:4a:c7:f0:84:12:1f:a1:7e:ee:fa:d3:
c2:94:cb:86:71:6f:c9:9b:22:82:8b:32:53:0a:f1:
33:04:c6:60:c1:c0:d7:6b:50:96:23:d0:04:66:51:
61:ba:89:d5:d1:d0:54:f2:5b:0a:af:fe:b6:e8:03:
08:10:f3:b9:93:83:09:f6:0c:d5:de:d7:7c:b0:50:
1d:16:be:aa:25:8b:06:04:47:c9:1d:43:f4:2d:01:
a6:70:26:74:bb:f3:af:be:6e:f3:5f:74:c4:08:30:
33:8a:45:ea:09:0d:76:d4:67:d1:b6:21:23:f5:07:
39:24:9a:1d:b0:ae:b4:3f:c4:5a:18:ba:10:9a:58:
4e:e1:ff:2b:e5:ff:f5:36:00:ae:d5:f9:9a:61:0d:
e1:c8:d9:36:ca:b8:09:84:9f:2e:86:d4:b3:f6:2a:
17:9f:d0:ff:76:5f:e4:d2:51:62:ad:b5:cd:06:94:
80:16:1d:02:95:4d:88:6b:f8:17:a9:04:82:83:ee:
96:34:f1:da:39:56:2f:6c:5c:d4:c5:4f:a1:de:b0:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EE:D7:5A:AC:45:8B:3F:DB:26:62:25:01:06:77:01:84:EF:6D:1E
X509v3 Authority Key Identifier:
keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:85:39:37:5f:0f:8a:88:43:60:c4:6e:07:e7:12:e1:68:05:
2f:d1:9b:9b:6b:bb:17:6f:ce:70:4a:2b:91:6c:ea:4f:81:0d:
5c:8d:78:bf:56:3e:92:66:ae:21:0f:e8:03:28:e3:2d:48:07:
54:ee:b4:92:14:b9:69:75:87:23:ac:2d:4e:8d:c5:a3:9d:e9:
ef:13:71:85:83:ee:7c:51:97:08:99:73:a7:a8:a7:98:da:f8:
7c:2f:64:4e:97:28:00:e8:89:ba:47:15:0a:56:00:40:c6:84:
54:28:4b:22:81:da:38:10:8e:d2:9f:07:0d:92:81:df:be:14:
db:5f:ff:cd:38:95:2c:6d:f4:38:0b:5f:af:fc:bd:d7:6e:0e:
33:f6:6b:58:6d:c7:b1:5e:cd:9f:69:e8:11:7a:2f:35:36:59:
1f:cb:c3:c3:2a:12:32:b4:92:84:cf:80:5d:16:db:6c:b5:a8:
d0:5d:b3:51:b3:dc:70:33:ed:e9:8d:03:6a:02:89:1b:c9:6e:
2e:cc:56:ad:12:9a:01:36:0d:6d:30:76:77:d0:38:ec:82:21:
6d:56:3c:5c:b1:0c:ac:c3:02:f2:ac:14:58:7c:5e:b2:3a:b4:
31:7b:ef:e6:51:5d:05:48:d1:50:8c:79:85:2c:35:2b:8c:19:
2a:e0:e0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:12:03 2026 by rpki-client