
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
File: 2wVNT_SDuJTYCF4P43hs4um1MGI.mft (raw, json)
Hash identifier: zAjoxyXfQ0QF18CZhDuT/wG9QeM0X8zG5K1Oaj79YQw=
Subject key identifier: 59:00:7E:00:D4:3E:84:3B:5D:1A:A9:2A:13:E9:02:99:28:73:FD:CA
Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
Certificate issuer: /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
Manifest number: 26
Signing time: Fri 12 Jun 2026 20:26:08 +0000
Manifest this update: Fri 12 Jun 2026 20:26:07 +0000
Manifest next update: Fri 19 Jun 2026 20:26:07 +0000
Files and hashes: 1: 2wVNT_SDuJTYCF4P43hs4um1MGI.crl (hash: uiAz6gW6N/Bu1SXVyB8sRL6T42fB82ltcmVrHxZGN/k=)
2: 031A6E544E9311F19004C0C7A2EE528E.roa (hash: w/4wlpVVsUwM2QVkvZtJ7suuuKCdp4EEZYeS6K8GgLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Validity
Not Before: Jun 12 20:26:07 2026 GMT
Not After : Jun 19 20:26:07 2026 GMT
Subject: CN=6a2c6b60-e1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:2f:bd:3e:56:3f:b1:d1:75:35:e8:2d:eb:
9c:44:49:ee:46:34:8f:f5:7e:64:27:0d:be:e7:86:
b4:e6:9a:b0:22:70:3a:ef:90:36:c0:75:50:db:2f:
f8:c7:4a:71:51:b1:34:a4:04:9f:71:a0:70:2a:24:
69:ad:9d:fe:6d:82:3b:df:d5:30:f9:21:e7:5e:b9:
ad:c8:62:27:3e:6d:61:6e:e6:58:47:c1:9b:3a:13:
8b:08:e2:29:20:18:37:8f:b6:32:28:c9:47:b3:12:
ef:25:af:4b:4b:12:12:06:3e:e1:23:b5:a5:81:ae:
84:f5:10:d5:ae:e3:0f:6d:00:7e:f7:6e:1b:13:58:
09:bf:4b:9f:96:26:8c:a4:2b:31:5e:91:82:9f:15:
ee:16:61:96:c3:bd:08:d5:6c:30:55:1d:0c:b5:9d:
c8:86:e4:60:4b:28:6b:39:22:c4:94:5b:31:d1:bc:
ca:0b:d3:d9:9b:94:8b:a7:90:08:4d:dd:42:5d:ee:
65:19:5a:89:43:48:0c:3a:5a:17:ab:a4:a5:cc:6b:
98:6f:55:02:86:6f:08:70:51:fc:52:31:3c:bc:1b:
d3:72:72:9c:8f:51:ed:5d:3b:bf:29:88:cd:36:ab:
9f:b4:77:e3:1b:48:11:e3:e2:00:f1:29:4c:32:18:
ab:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:00:7E:00:D4:3E:84:3B:5D:1A:A9:2A:13:E9:02:99:28:73:FD:CA
X509v3 Authority Key Identifier:
keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:cc:75:2a:f5:6a:21:58:f8:48:96:97:52:1a:8c:d4:1f:5d:
38:02:3e:34:d2:70:f3:d2:89:90:8e:b5:3c:e8:3b:c6:b2:07:
ca:ec:5c:9a:0f:f2:48:e1:d0:ea:43:7d:e2:01:a8:e3:88:8c:
41:d3:cd:17:42:af:e1:97:86:e6:35:bb:9a:ee:d6:9a:1c:99:
53:94:dd:3f:91:3f:32:dd:1d:86:48:21:8e:78:a3:40:b1:b3:
a0:35:6f:b9:d3:df:fa:3d:8b:e9:ba:a1:7d:4f:1e:a8:5a:2b:
b5:2c:5e:e6:7c:f5:95:13:99:9c:8f:b7:ef:68:44:0f:0d:c7:
96:72:57:09:1d:29:ee:b9:fc:73:13:97:d2:98:4c:49:7a:e1:
56:8d:2f:40:f2:11:5e:d9:42:7e:a4:34:fc:0f:64:b7:6c:d5:
28:cb:9c:7b:8d:91:1a:f5:9f:95:ca:52:ba:69:27:11:24:69:
38:86:86:4b:60:a4:09:7a:8c:5b:32:cc:35:af:ad:7c:f0:1f:
34:24:a6:b0:fc:b5:20:74:6d:9b:fa:70:e9:22:31:f9:e4:f5:
3c:40:ef:2d:9a:10:21:29:a0:58:65:a0:3b:df:77:d0:84:f9:
5e:f9:93:ef:e9:38:d0:fa:a7:c1:54:dc:bc:a4:1b:7a:07:0d:
f2:a6:8b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:19 2026 by rpki-client