
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File: 2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier: Z+5iWzFNWQYzf4ZNgvQRgWjopfB5UGkAkMtdFtBe7Wg=
Subject key identifier: 30:73:62:49:66:85:EC:3D:84:1C:A0:60:73:5A:5F:FE:3F:D2:3F:C8
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer: /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number: 40
Signing time: Tue 19 May 2026 08:21:20 +0000
Manifest this update: Tue 19 May 2026 08:21:19 +0000
Manifest next update: Tue 26 May 2026 08:21:19 +0000
Files and hashes: 1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: +80OKcErz+ZFyru8+Cvv16iZ8TwNlknVqwNPy/o8TUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Validity
Not Before: May 19 08:21:19 2026 GMT
Not After : May 26 08:21:19 2026 GMT
Subject: CN=6a0c1d80-b13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:83:5e:84:a8:b7:9b:a9:b9:51:36:7d:54:
11:14:99:06:d1:04:15:e8:f6:da:51:6e:cc:25:b4:
10:cd:e1:38:7e:b4:83:35:70:38:ef:c8:ff:07:89:
d1:60:9b:fe:83:52:bf:20:57:58:16:29:5c:5b:6a:
46:2c:d1:36:99:a6:86:a4:1d:3d:c9:d8:a7:4b:69:
91:28:3c:ad:16:b1:4e:4a:48:19:1e:36:35:45:db:
99:da:c1:52:f3:dd:f6:d7:4e:ff:39:89:f3:72:e3:
26:07:b0:ed:e5:3c:a4:7f:f9:d9:69:1c:b4:39:85:
37:f6:f9:b9:e2:18:f5:28:05:db:a7:bf:91:50:73:
c9:54:ac:60:3b:d3:73:d4:3e:e5:af:ff:01:11:05:
ca:ca:da:b5:68:1d:cc:4b:d9:06:b4:9b:97:0b:46:
36:fd:fc:e6:b7:14:c8:97:00:a1:29:3e:83:d5:1a:
a3:b8:9e:e5:3d:36:c4:db:07:6a:74:35:f0:a7:7b:
65:66:e0:09:64:4f:f1:db:e1:e4:fd:b9:ce:d1:be:
ac:10:57:82:2d:d0:90:8f:5f:6a:47:b7:13:ea:e6:
ca:8e:e2:f4:e7:e7:5f:6a:01:10:f8:dc:9c:71:f8:
e7:90:fa:cf:6f:72:c6:d8:38:06:90:8e:b6:13:a6:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:73:62:49:66:85:EC:3D:84:1C:A0:60:73:5A:5F:FE:3F:D2:3F:C8
X509v3 Authority Key Identifier:
keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:66:5e:a1:50:df:eb:98:01:a0:64:a4:30:4b:d4:9f:b8:d9:
2f:6c:ff:0c:2f:d0:1a:0e:af:3f:8e:63:e2:e3:e0:3d:3d:b1:
ff:d3:28:40:f3:37:97:57:36:55:cd:c0:8b:e4:ac:c4:42:3f:
15:fb:d6:a5:c4:7c:94:4c:4c:a4:14:50:19:45:85:72:35:88:
4a:42:91:24:4d:86:15:83:2b:c9:2b:78:e0:8a:6a:49:73:2b:
d7:28:e2:3e:b5:07:ae:64:34:e9:f9:bf:2f:bb:36:3e:e5:80:
cc:a7:48:47:b6:f7:1f:e1:c6:ee:b9:75:fe:a8:e2:0d:2d:47:
68:35:10:e8:4a:3d:74:cc:5d:15:ee:71:a6:e0:70:29:be:ed:
e3:6a:36:24:ae:cc:d8:1c:46:ba:0a:0d:ba:7a:07:b6:fb:7b:
51:4b:79:4b:52:c2:7e:87:2f:d5:a3:c1:08:9d:69:63:e6:ff:
7d:be:a5:80:16:d9:55:21:fc:40:da:2e:37:73:19:ae:7a:52:
ce:4a:04:5b:38:0e:10:cf:31:e8:2a:d7:af:56:4e:62:af:b2:
68:bb:1b:d3:2c:e0:47:d3:e8:c0:5c:52:fa:40:cd:2e:e2:e1:
9f:d6:ac:04:1a:a6:4e:b6:43:17:4a:7c:1d:82:fb:73:05:ff:
c0:b2:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:51 2026 by rpki-client