
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json)
Hash identifier: APuS4Z4CVWVzPRwB4LaM9nl3Wvwap7BqKWey8djX3Xs=
Subject key identifier: AD:15:4D:2F:E5:EC:09:AE:DD:31:AD:B0:1F:6F:98:3D:F9:49:05:3D
Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Certificate serial: 0311
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
Manifest number: 0311
Signing time: Mon 05 Oct 2026 01:06:50 +0000
Manifest this update: Mon 05 Oct 2026 01:06:49 +0000
Manifest next update: Mon 12 Oct 2026 01:06:49 +0000
Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: cpXiKqc18t4XcxmJKBq+Gp6lxtPVBRjwUYMvYhKIhZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785 (0x311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Validity
Not Before: Oct 5 01:06:49 2026 GMT
Not After : Oct 12 01:06:49 2026 GMT
Subject: CN=6ac2f82a-e618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:82:e7:de:cc:05:e0:37:3e:c3:59:9f:eb:
49:1d:c4:ad:af:7f:ce:3a:20:54:08:54:90:0b:da:
ea:3b:10:a3:38:51:e6:de:d3:a3:dc:bc:a6:ac:a9:
b7:06:86:a5:f6:cd:12:01:2e:a0:e6:3f:2e:99:82:
7a:92:8c:7b:3e:69:65:e6:b3:10:e2:75:d8:ea:ed:
b6:25:b9:2b:1f:d6:85:35:4e:b3:c4:fa:09:1e:39:
62:c5:19:1d:f4:e4:c5:e5:c5:5a:34:cf:28:41:6d:
cc:ae:78:45:40:e4:4c:4e:76:e0:90:27:a5:14:14:
a0:4e:21:26:9b:79:61:1c:6e:68:0c:72:9c:51:e5:
a1:55:f2:8c:9d:69:2e:b0:bc:74:5b:17:5a:a2:eb:
69:63:8a:9b:55:0f:ff:17:78:cb:f2:9e:95:83:83:
64:21:6c:5a:be:cd:f6:ae:40:38:64:7e:4c:0a:90:
e9:a4:62:dc:ab:26:16:68:98:16:21:6f:d3:ee:72:
52:3d:96:d4:4e:18:8b:b0:31:6f:7f:8e:c7:88:b5:
1c:43:1a:62:6e:e3:d0:fa:60:bd:d4:f3:4e:2c:ea:
f0:66:e6:18:1c:a4:ff:93:71:e7:4c:a1:d6:ed:c0:
4b:72:ba:4f:4a:c8:a1:25:d6:c7:fd:f4:fa:98:1d:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:15:4D:2F:E5:EC:09:AE:DD:31:AD:B0:1F:6F:98:3D:F9:49:05:3D
X509v3 Authority Key Identifier:
keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:35:51:79:7f:ce:f9:97:0a:05:60:93:21:c2:ca:64:a6:ee:
21:0d:95:e4:d6:1c:b1:d6:91:4a:50:ba:ea:9d:e9:97:d3:e9:
5a:c5:22:be:10:a9:d3:a2:cf:4d:bd:23:50:69:e9:b3:05:9a:
68:0b:13:f8:7e:1f:33:4f:e0:d9:16:bc:90:68:82:2b:0a:20:
00:20:96:57:0a:05:f7:d2:53:a4:45:1b:75:df:21:a6:a3:11:
64:4c:78:b1:d5:ff:5d:03:c8:3d:f0:fe:ec:e3:99:91:40:63:
06:13:c7:4a:7d:9b:8c:ee:2f:2a:3b:67:d5:87:1f:40:e4:b5:
8c:dd:1a:0b:01:49:f1:ec:8d:a2:2e:26:e6:46:1d:7b:92:38:
04:89:a5:7d:dc:bb:b3:96:20:d1:1d:45:0c:4d:97:94:10:73:
c9:05:fc:86:00:ec:2d:6f:9f:88:7b:fc:b1:fc:66:1e:b9:13:
1d:5f:45:6a:68:77:cb:01:3d:75:ba:d9:24:f1:5b:df:b0:ff:
0d:ac:4e:98:ca:13:ea:ef:ee:64:82:f0:b3:4c:49:78:21:95:
72:ef:b8:36:08:f2:86:11:ae:7a:31:e8:56:6a:90:bf:69:94:
d1:b5:89:f4:3e:9d:7b:04:df:a4:fe:fa:b1:24:18:2c:5c:b6:
cb:e2:24:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:14:46 2026 by rpki-client