
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json)
Hash identifier: Yb9p5giJQ/nxxak3NeObaZcWNJ4Nm7pIgRDDIXvne1E=
Subject key identifier: FE:3E:DC:AB:BB:D6:C9:71:CD:FF:A0:CE:49:33:03:06:0C:B3:37:CE
Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
Manifest number: 024D
Signing time: Sun 05 Apr 2026 01:58:15 +0000
Manifest this update: Sun 05 Apr 2026 01:58:14 +0000
Manifest next update: Sun 12 Apr 2026 01:58:14 +0000
Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: FxWPNySr14PjwU9J/ng36eFg2M334zG/0uZUHtY2mys=)
2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: PvZuO5e4GchVGqAm1QbEBiq8YBp2L+bhbVxt20o+A5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Validity
Not Before: Apr 5 01:58:14 2026 GMT
Not After : Apr 12 01:58:14 2026 GMT
Subject: CN=69d1c1b7-f001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:a4:e2:69:83:ec:79:e4:2a:4c:20:d0:02:
a7:b7:75:70:ec:11:7e:2e:15:60:ea:5b:7f:e3:3a:
17:bb:38:f1:7d:33:a9:10:4e:07:aa:8e:51:77:38:
4e:6e:f0:00:a7:f2:5c:66:02:bb:21:79:36:4a:d2:
c9:c9:09:30:cb:3d:69:e3:34:d5:39:e8:9f:cb:1c:
ae:1f:0f:fa:f6:b6:df:38:7e:ca:34:84:92:06:ba:
c7:bc:c6:81:f4:70:6f:21:56:a7:87:26:40:67:8a:
85:a1:16:96:01:3b:79:c5:54:3f:17:32:b8:b3:54:
e6:e2:a6:26:42:7a:a2:bb:e5:a0:6a:55:6c:e8:af:
c2:89:6c:ed:61:08:5e:c5:27:2f:18:dc:65:71:ca:
69:a4:b2:ab:f0:20:11:5d:1b:18:ca:e0:11:04:62:
aa:19:c6:7f:06:98:4d:c8:a0:29:e5:df:a5:00:dd:
29:25:29:ec:24:b9:b4:29:bd:e0:f2:5f:90:a5:f9:
eb:91:33:da:aa:12:0e:70:d8:9d:13:1c:f8:4c:4b:
70:e6:68:1a:e8:66:32:a2:8f:ff:0c:f6:99:ae:9a:
5c:dc:8e:43:26:db:f4:11:e3:ca:0b:1d:5e:bf:42:
41:5c:d3:63:aa:0c:fe:74:46:82:d5:09:b3:92:56:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3E:DC:AB:BB:D6:C9:71:CD:FF:A0:CE:49:33:03:06:0C:B3:37:CE
X509v3 Authority Key Identifier:
keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:14:45:6d:f1:29:1c:2b:ae:4a:e2:4f:ea:ea:c2:e0:f5:56:
cd:97:04:0d:91:68:43:e1:db:12:de:e8:ed:b8:39:83:1a:bc:
c6:8c:dd:76:e4:a2:6b:bd:fd:23:10:84:ae:4f:b5:18:03:14:
c0:4b:97:e9:be:0d:3c:89:c8:85:5e:9d:94:bf:2a:c9:c2:8d:
61:54:eb:7a:b7:6e:1a:a8:2e:1d:67:90:73:9f:49:24:dc:4a:
62:5e:23:28:f9:17:08:10:b3:06:99:cf:a1:60:fb:e2:cc:60:
48:81:63:20:98:6c:9c:dc:3e:7f:38:cd:d8:1e:51:fb:55:b6:
7d:b9:42:7c:22:2a:3d:c1:64:00:12:3e:f7:41:f8:b2:ea:25:
a5:c0:b9:e5:46:7f:ce:b2:80:56:ca:43:25:89:fb:90:72:50:
01:79:ca:fc:38:b0:7d:e1:41:f8:5e:1c:47:42:93:8e:c5:cd:
23:44:3c:da:d8:c1:c4:94:ff:71:02:45:36:db:e3:88:23:24:
77:b6:b4:53:94:02:81:ee:a7:9d:72:54:d6:dc:70:50:03:ee:
46:01:ec:4b:39:0d:36:61:6c:84:d8:d5:08:75:f6:bb:72:d7:
ed:57:35:2b:58:2a:01:bb:6d:1e:11:4a:2c:4d:f9:87:d9:52:
62:3c:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:23:31 2026 by rpki-client