
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
File: 2K83cS1WsbaT720D40bADPPwST4.mft (raw, json)
Hash identifier: xAdBKvyJed7qZLXokchSmkztzOEbJJR0YMPE8iLnrWE=
Subject key identifier: A7:61:7F:DB:FA:41:1C:33:75:92:DF:16:AB:0B:14:63:5C:3A:27:20
Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E
Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
Certificate serial: 102B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
Manifest number: 100D
Signing time: Wed 20 May 2026 17:28:30 +0000
Manifest this update: Wed 20 May 2026 17:28:30 +0000
Manifest next update: Wed 27 May 2026 17:28:30 +0000
Files and hashes: 1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: 6OtRiWTI8Tyf6nnCJACXdyKydZdzLz897rlNKeoR+RA=)
2: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: 1K8MV4sIj8T9zYYuz63dsbeo/qY6X7HrLn7VydAG5JM=)
3: AFCF76ECC43411F0982E427DC4F9AE02.roa (hash: jArh+Kx+M9ITkZfnTl8gN4nLiWXlDhetGK8juVgx8K0=)
4: F0F0DEC2C43411F0836DBC7DC4F9AE02.roa (hash: LMzi/nUop3Zg3Ri+ttMW1AIJQZt36oNcqeMlHwO8Bco=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl
rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4139 (0x102b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
Validity
Not Before: May 20 17:28:30 2026 GMT
Not After : May 27 17:28:30 2026 GMT
Subject: CN=6a0def3e-d5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:1b:3b:44:a7:5a:fa:62:40:a4:54:63:eb:
c3:1a:07:72:70:9b:fc:20:06:fe:4a:5f:2a:7f:2f:
59:16:a5:ed:1a:bf:26:34:a9:06:08:ec:6e:e7:fb:
88:29:d9:f1:a0:04:1a:5a:e0:86:98:fb:8f:0f:3b:
8d:34:49:a0:da:29:3a:ff:0e:af:67:30:4a:b3:be:
21:7e:98:c5:95:2d:33:ae:d4:8b:85:1c:76:dd:ea:
9c:40:6a:02:81:a8:f0:6d:2d:c8:f2:28:8a:90:a1:
b2:d7:e9:c7:24:a7:d6:ef:87:05:76:bd:8d:e2:0c:
af:10:72:67:ae:dc:d4:fb:2d:75:de:43:74:d3:bb:
cc:ce:5a:19:77:ea:7f:8a:7b:68:34:7d:3e:4f:1c:
a6:a7:95:e5:f4:9e:a0:7e:d1:be:e0:13:f5:71:a2:
fb:03:2c:ec:f6:a8:26:5e:85:5d:b4:1f:91:c1:63:
68:9e:01:2c:d1:75:c9:b3:60:46:f1:11:a2:bf:3e:
e1:af:d9:e4:3a:9f:08:36:01:00:5f:ad:c0:3c:9b:
2b:40:a2:6c:84:16:eb:b6:08:9c:d5:0a:e9:5b:b1:
51:01:57:09:3a:76:a5:22:6f:55:42:61:9a:21:62:
58:22:01:55:e2:80:3c:19:cc:77:a0:1c:8c:6b:b3:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:61:7F:DB:FA:41:1C:33:75:92:DF:16:AB:0B:14:63:5C:3A:27:20
X509v3 Authority Key Identifier:
keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:54:72:db:15:24:de:0c:69:ca:c7:4d:e3:f6:42:38:b5:95:
04:88:03:cb:49:4c:c8:c3:47:52:7f:ae:f4:6b:40:cc:52:11:
4c:f4:da:85:dc:6a:b1:db:6e:a4:52:fe:a7:cc:c2:77:e9:ee:
2f:16:4d:4d:c6:2b:87:2e:b2:cc:7d:ee:ff:50:da:a9:db:d0:
f5:e0:69:15:40:2d:e3:e3:1b:f5:ce:24:2c:a9:4b:97:8a:61:
1d:66:04:15:f9:fe:a3:64:da:2c:2f:58:50:b1:21:64:c3:7e:
bc:55:10:ef:17:58:fa:1d:37:32:dc:6c:56:8b:88:56:65:50:
68:b7:79:9e:7b:96:76:2e:97:4d:e6:6c:b0:2f:9a:69:1c:fa:
f7:cd:d0:0d:15:5e:7a:33:09:5a:68:eb:a7:6e:3f:c5:25:45:
b5:54:a3:86:e6:6e:a7:8e:fe:7c:11:0f:20:14:88:77:e6:dc:
61:21:a0:8e:bb:ec:8a:d1:20:2a:f5:0b:e0:f3:3e:52:68:81:
85:6d:96:98:b6:6f:30:91:77:ae:10:17:78:be:28:59:82:48:
c5:6f:26:63:d3:ff:d4:aa:ce:89:43:49:00:25:23:f2:8b:6c:
e2:63:77:b7:67:29:ed:6b:0a:0e:af:e1:83:51:85:95:0c:cd:
a7:a4:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:18 2026 by rpki-client