
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json)
Hash identifier: H8iuZYQbscYZeAge+LKXP39EzWAbP2peeaq32giECYY=
Subject key identifier: 27:FC:B4:6D:4E:BA:36:53:D4:D6:8C:38:ED:84:30:D5:71:DD:C8:68
Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Certificate serial: 02C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
Manifest number: 02C9
Signing time: Thu 21 May 2026 01:28:03 +0000
Manifest this update: Thu 21 May 2026 01:28:03 +0000
Manifest next update: Thu 28 May 2026 01:28:03 +0000
Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: 4eZJ4r1NPEFwZEUw+hL+WPpJdkn62ujlEfArjgeb5y8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Validity
Not Before: May 21 01:28:03 2026 GMT
Not After : May 28 01:28:03 2026 GMT
Subject: CN=6a0e5fa3-b810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:73:a9:d5:18:61:5a:c7:44:06:b8:68:0e:
8c:fc:b1:31:8c:52:d1:8c:99:64:6c:e9:57:56:59:
6b:2a:57:3d:f2:ef:a2:e2:4d:f6:b2:cc:5f:4c:79:
aa:11:60:cf:41:8d:34:23:62:ad:50:13:24:8d:3c:
7d:33:dd:1c:7b:e4:ee:ee:0e:64:b7:56:f4:f8:c1:
28:8e:29:a1:f3:06:7c:2c:9f:ed:d7:ee:9a:c1:04:
bb:bc:bc:13:68:10:b9:35:87:0a:8e:22:5a:1d:73:
58:49:46:b4:7d:82:63:46:d2:74:43:fc:22:4a:c1:
45:7b:39:77:86:db:9e:4d:f1:68:4e:db:86:7f:f9:
e8:99:c0:21:38:f4:fe:68:fd:98:f2:5e:28:92:cd:
5a:1f:85:cc:a8:c1:6a:5e:57:5e:7b:b7:96:e5:6c:
33:f6:44:cb:67:5c:e0:db:7f:55:47:4b:86:2a:be:
71:cc:e0:9b:6e:5f:43:a0:b4:a9:fe:1c:4a:ce:a2:
94:d1:7c:87:86:ec:e8:83:0a:e6:f0:64:cc:c3:57:
55:25:84:79:d3:85:53:07:d1:00:4b:de:c5:f3:94:
6c:7b:78:5b:a2:56:1a:ab:3f:e9:7b:f1:b4:03:a9:
46:8f:fe:ec:69:7b:64:a0:76:03:77:25:f7:fa:73:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FC:B4:6D:4E:BA:36:53:D4:D6:8C:38:ED:84:30:D5:71:DD:C8:68
X509v3 Authority Key Identifier:
keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:f3:2b:16:cb:ec:23:60:7c:de:c9:2e:4d:77:a3:0e:71:f8:
e0:b4:af:31:9e:03:ce:e6:29:c1:50:3e:5b:12:1f:d0:b0:fa:
02:fe:ef:e6:72:8a:14:87:84:32:c8:4b:17:d8:1f:11:38:8c:
24:65:60:50:a1:97:6a:5b:53:51:43:35:62:ef:a0:0b:88:51:
1f:80:e6:34:b1:11:da:d7:14:2f:8f:eb:07:3e:dc:15:81:40:
07:9f:b2:92:fa:a0:7e:33:17:aa:66:7a:35:c9:35:53:ba:01:
29:12:ef:33:32:8d:88:1a:21:dd:b5:d3:7d:a9:ef:43:07:50:
4c:18:d2:8d:73:1f:c7:c8:98:58:c0:30:21:74:f7:7d:dd:48:
4d:49:53:e3:c3:e4:7f:58:0b:aa:21:8d:ce:b2:fe:d3:3c:25:
1a:14:67:c7:d4:54:3d:b3:de:a0:cc:d1:2e:96:25:fc:64:64:
43:84:d7:b7:d3:9f:18:a6:5e:6b:b5:2c:f9:ea:9d:54:34:aa:
78:65:0b:23:f4:20:b9:3a:7d:43:48:5a:82:db:b5:89:1a:76:
98:cc:d0:44:b4:c8:2b:2b:4d:74:74:86:64:e9:2c:e4:73:c7:
a5:63:a8:4c:92:ef:df:1f:17:1e:8d:88:02:e5:e9:de:1f:f4:
2e:b6:3e:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMxQTIxMTAvBgNVBAUTKERBRjU5OTlDMDc0MEI4QzkyQ0Q1NDAzN0I2OUIwNDRD
RDU1QTk1NTgwHhcNMjYwNTIxMDEyODAzWhcNMjYwNTI4MDEyODAzWjAYMRYwFAYD
VQQDEw02YTBlNWZhMy1iODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0TJzqdUYYVrHRAa4aA6M/LExjFLRjJlkbOlXVllrKlc98u+i4k32ssxfTHmq
EWDPQY00I2KtUBMkjTx9M90ce+Tu7g5kt1b0+MEojimh8wZ8LJ/t1+6awQS7vLwT
aBC5NYcKjiJaHXNYSUa0fYJjRtJ0Q/wiSsFFezl3htueTfFoTtuGf/nomcAhOPT+
aP2Y8l4oks1aH4XMqMFqXldee7eW5Wwz9kTLZ1zg239VR0uGKr5xzOCbbl9DoLSp
/hxKzqKU0XyHhuzogwrm8GTMw1dVJYR504VTB9EAS97F85Rse3hbolYaqz/pe/G0
A6lGj/7saXtkoHYDdyX3+nPXLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCf8tG1O
ujZT1NaMOO2EMNVx3choMB8GA1UdIwQYMBaAFNr1mZwHQLjJLNVAN7abBEzVWpVY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ERTAzMzMzNjM1
NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVNa3MxVUEzdHBzRVROVmFs
VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ2V1puQWRBdU1rczFVQTN0cHNFVE5WYWxWZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzFBMi9ERTAzMzMzNjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVN
a3MxVUEzdHBzRVROVmFsVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdfMrFsvsI2B83skuTXejDnH44LSvMZ4DzuYpwVA+WxIf0LD6Av7v5nKKFIeE
MshLF9gfETiMJGVgUKGXaltTUUM1Yu+gC4hRH4DmNLER2tcUL4/rBz7cFYFAB5+y
kvqgfjMXqmZ6Nck1U7oBKRLvMzKNiBoh3bXTfanvQwdQTBjSjXMfx8iYWMAwIXT3
fd1ITUlT48Pkf1gLqiGNzrL+0zwlGhRnx9RUPbPeoMzRLpYl/GRkQ4TXt9OfGKZe
a7Us+eqdVDSqeGULI/QguTp9Q0hagtu1iRp2mMzQRLTIKytNdHSGZOks5HPHpWOo
TJLv3x8XHo2IAuXp3h/0LrY+VQ==
-----END CERTIFICATE-----
Generated at Thu May 21 10:20:48 2026 by rpki-client