
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json)
Hash identifier: RrEf3SmTchB41CwAV9Igh+7Z/6z1sR5H9yqw9Qg9nMM=
Subject key identifier: B2:72:38:75:88:52:AA:E8:96:D3:03:B4:91:9C:70:31:BC:CE:20:70
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
Manifest number: 024C
Signing time: Sun 05 Apr 2026 01:53:09 +0000
Manifest this update: Sun 05 Apr 2026 01:53:08 +0000
Manifest next update: Sun 12 Apr 2026 01:53:08 +0000
Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: PRQ/EuZBC40j0L6xnU8WPkQ1QSb/dwU9uxko2kyTD+s=)
2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: lg5BmvJvKTTVfM5jqqI1swljGGFx139JD9z+JtbKwVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Validity
Not Before: Apr 5 01:53:08 2026 GMT
Not After : Apr 12 01:53:08 2026 GMT
Subject: CN=69d1c084-a31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:f3:34:9e:c8:80:f8:cc:93:1e:01:fb:90:
93:72:a6:fc:1e:e4:ec:fa:99:33:48:9b:be:dc:55:
9f:44:3b:3c:bd:69:a0:1e:63:c2:06:86:8c:79:e4:
b6:42:41:83:16:52:f0:63:b7:0e:38:77:99:13:36:
4a:a4:7a:64:1d:68:6b:6d:6f:9f:a9:cf:e9:7f:67:
38:ec:c5:93:6e:57:a3:2a:cf:1f:83:58:fd:36:ef:
73:af:35:e0:5a:5d:9f:58:39:0e:d7:d9:68:45:49:
97:8a:8a:d4:e0:c3:b0:a9:0e:ad:54:e8:8c:d7:24:
02:bd:97:4d:f2:43:d7:07:e6:f2:81:d0:16:43:15:
75:77:97:ff:7b:a9:79:34:86:47:58:84:6e:5b:9e:
69:d0:15:c7:2c:58:37:a4:7a:24:33:0b:67:8b:f4:
02:8c:a9:21:44:ff:81:21:62:18:3b:eb:98:ae:73:
27:7f:c7:d1:b9:3c:c7:ed:dc:f7:bc:1e:5c:a8:7d:
59:ea:ad:f1:ca:e4:8b:70:ae:78:f4:b8:ef:81:13:
0d:d6:e8:25:18:b0:47:a9:2e:94:f3:07:d3:3f:8c:
4a:86:a3:01:9c:6d:dc:0e:3c:46:2a:5f:96:d6:dc:
7a:9d:8d:4f:79:56:08:ec:3e:a4:ac:30:7b:f2:05:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:72:38:75:88:52:AA:E8:96:D3:03:B4:91:9C:70:31:BC:CE:20:70
X509v3 Authority Key Identifier:
keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:7d:12:a9:2c:33:39:e3:e6:ad:4e:6e:a2:ee:27:e9:84:39:
3f:ec:e2:f3:1b:20:46:e6:4f:af:04:8c:10:29:ac:1c:51:bb:
b4:6a:72:4c:a9:40:88:bc:f4:50:21:78:fb:29:03:f2:cd:3c:
3c:25:a9:b4:bf:0a:82:7f:fd:3c:3e:72:5b:5e:ef:50:76:63:
9f:3e:08:4d:e0:87:d8:9c:39:10:44:f5:bc:99:0d:09:ac:94:
d4:88:3f:02:2b:de:90:71:22:c2:38:16:6d:b1:ce:6f:93:82:
ac:93:a1:af:a8:93:de:7c:3f:72:ba:7f:a4:54:bc:11:a9:1b:
eb:15:99:66:e7:c9:bc:6c:2b:82:d0:df:b5:6c:59:71:74:6f:
ab:ea:0f:45:a5:f4:ff:fe:94:6e:9d:c5:69:74:90:00:8c:20:
a4:21:72:f2:73:87:af:9f:98:3f:0c:76:c2:39:19:50:e8:32:
db:5a:c6:7f:16:3c:de:57:88:0b:dd:0e:af:64:62:41:a8:2e:
e3:fd:b3:29:21:4b:fa:5d:c9:98:fe:a5:1f:70:73:a9:af:6a:
b1:3a:67:55:21:d3:15:1a:8c:02:04:f2:f5:17:9b:ea:4a:51:
59:8a:00:4a:22:2d:3a:6d:c9:61:eb:bf:22:a8:27:70:fb:aa:
be:b9:18:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:10:14 2026 by rpki-client