
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json)
Hash identifier: IAzAC8Szp8hkLwuHCr4okmpPF7X91Sv6vnXl6A0gDjk=
Subject key identifier: 6E:60:4F:48:5E:DA:0A:17:19:1E:B1:27:17:BB:9F:65:3D:48:B8:2A
Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Certificate serial: 02B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
Manifest number: 02AA
Signing time: Wed 07 Oct 2026 01:58:09 +0000
Manifest this update: Wed 07 Oct 2026 01:58:08 +0000
Manifest next update: Wed 14 Oct 2026 01:58:08 +0000
Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: D+CnFOPHfWoeRdLhhyWTJraOuTPC9M6PGmMO6mT5/50=)
2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: PvZuO5e4GchVGqAm1QbEBiq8YBp2L+bhbVxt20o+A5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Validity
Not Before: Oct 7 01:58:08 2026 GMT
Not After : Oct 14 01:58:08 2026 GMT
Subject: CN=6ac5a731-a336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:2c:3d:18:9f:f2:e3:50:bf:82:b5:eb:44:
36:b9:6d:4b:22:a3:7e:60:18:37:6f:45:c8:df:12:
7b:7f:cf:89:6a:56:33:b0:0a:a5:84:ee:1b:b1:62:
c9:4c:4e:cb:8a:35:d3:ec:61:3e:d2:8c:04:9b:fd:
2c:eb:50:65:1d:50:f7:bd:e2:34:9a:41:1f:ac:30:
00:29:cc:91:23:0b:21:9d:31:5b:3e:1a:e1:90:1d:
59:6d:8c:6f:94:bc:3a:05:98:e0:78:7a:69:f2:14:
bb:da:2c:6a:9c:4a:e9:14:e1:98:41:03:a3:ff:d4:
29:a1:01:67:fd:0c:b3:0f:df:21:be:b0:d5:f9:4c:
77:76:4b:f2:fc:1c:f8:88:72:5a:57:38:bc:3a:de:
7a:3e:bc:ef:e2:43:23:82:97:fd:67:82:53:39:a9:
b8:89:c1:28:f8:dd:c7:96:6d:f1:89:65:1c:40:c9:
6f:83:fd:f3:db:92:63:56:ff:df:08:c1:b4:ff:24:
c6:1a:e3:2a:c0:bf:59:a5:60:d0:0b:df:76:84:be:
12:35:98:f2:bf:37:89:ed:66:d3:66:5d:aa:91:fe:
eb:12:2d:09:f0:0d:21:d1:0b:c5:5e:b7:c1:3c:ab:
4c:39:c5:5e:8d:5d:1f:30:9f:14:37:d2:23:8b:23:
e7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:60:4F:48:5E:DA:0A:17:19:1E:B1:27:17:BB:9F:65:3D:48:B8:2A
X509v3 Authority Key Identifier:
keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a9:a6:0d:c2:56:ef:56:c6:ef:69:00:02:65:db:90:7f:61:
e1:3f:5b:36:c0:6a:82:25:90:4c:14:46:b2:69:00:1c:89:e5:
bd:77:5c:28:b6:6f:79:3b:e1:90:93:4a:a8:df:89:96:00:89:
6b:d9:3c:9c:a8:48:ca:39:c0:21:2b:e8:b3:41:bb:c6:1a:9a:
1b:74:de:b9:99:53:2b:62:df:4a:36:4a:85:99:09:b8:13:60:
b5:79:9b:d4:a5:82:25:0f:de:02:35:3e:ab:c5:be:74:eb:ac:
5e:f6:cd:52:a1:56:e8:67:51:42:6e:d2:68:8c:1a:55:03:a4:
42:e9:21:af:cb:73:b0:0a:8d:94:46:b4:8e:dd:29:0c:a3:b7:
69:83:c1:f1:e1:b8:08:c2:c0:15:e9:68:c5:2d:c0:2d:0e:06:
0a:65:52:00:f9:fb:88:06:2d:43:9a:31:f6:38:6d:87:23:2d:
88:7d:10:7d:d0:11:3f:10:35:f4:b1:52:f1:34:c5:4d:cc:e0:
58:eb:b8:03:fc:0e:05:65:19:70:5f:c8:7f:64:59:a2:66:b4:
21:09:25:d8:69:8b:62:0d:66:63:b8:ff:2e:fe:2f:60:4f:81:
5e:a8:8f:03:de:07:2c:d2:76:5c:61:bb:a8:15:88:23:64:19:
73:af:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:24:09 2026 by rpki-client