
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
File: 2wVNT_SDuJTYCF4P43hs4um1MGI.mft (raw, json)
Hash identifier: Kw/UYRBTJfasNpO0n2ZP6xqbpedVXV7UAIqIWU4kKqk=
Subject key identifier: 50:DC:14:C6:CF:8E:C1:B1:F3:5C:B1:4E:DA:20:90:91:B5:E9:75:77
Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
Certificate issuer: /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
Manifest number: 05
Signing time: Sat 18 Apr 2026 20:20:20 +0000
Manifest this update: Sat 18 Apr 2026 20:20:19 +0000
Manifest next update: Sat 25 Apr 2026 20:20:19 +0000
Files and hashes: 1: 2wVNT_SDuJTYCF4P43hs4um1MGI.crl (hash: IPIS7ZVL/GQEbODiNokl0XXE6EOIO2sOXQKbtjl6bIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 20:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Validity
Not Before: Apr 18 20:20:19 2026 GMT
Not After : Apr 25 20:20:19 2026 GMT
Subject: CN=69e3e783-102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d8:fc:27:47:e3:6a:62:b5:ef:4e:66:b6:6a:
59:58:6f:ef:17:73:6f:76:d2:b3:26:49:a9:e1:72:
19:57:14:39:57:17:37:9d:aa:a5:d1:a0:d4:08:c8:
1d:3a:5e:9c:28:d9:8a:bc:d8:02:d3:b1:72:db:d6:
64:a4:7f:27:20:96:b6:57:42:da:8b:81:75:49:8a:
84:9d:22:b5:e8:c7:b5:fa:0a:57:49:f4:31:47:e3:
75:84:f4:48:a8:ac:af:a6:de:33:24:45:27:d6:4e:
83:d2:1f:57:93:42:d0:a4:83:44:e9:6e:8a:06:79:
22:7c:68:27:46:ff:41:a0:40:38:ee:59:93:d8:47:
d0:a4:ac:59:7d:c8:34:54:dd:67:e9:6c:90:5d:08:
c1:f5:85:eb:3a:ff:76:60:5c:14:3b:60:1c:77:60:
4b:df:f9:93:c7:ba:4a:ea:20:cd:6d:9e:47:ea:46:
f0:98:f5:89:d4:c1:48:d4:fa:77:e4:85:fb:60:9f:
77:f7:8d:be:ec:83:a4:7f:6d:ff:e7:f5:8e:06:17:
f4:78:e4:b9:0e:47:0c:24:3a:f5:83:d7:5c:f2:75:
21:9a:4d:a6:72:7b:6d:b2:5a:2d:c4:da:e8:37:1c:
4c:41:a2:a0:78:de:f2:84:5d:a0:8f:0e:5b:05:51:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DC:14:C6:CF:8E:C1:B1:F3:5C:B1:4E:DA:20:90:91:B5:E9:75:77
X509v3 Authority Key Identifier:
keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:86:6d:c4:6e:01:f2:e1:fe:d4:78:6c:65:1f:28:de:e8:19:
af:83:01:76:54:a8:d4:74:50:87:bc:79:a9:d8:80:4b:63:ab:
2c:58:fe:df:76:06:9e:10:83:45:9e:cd:67:62:be:0a:76:0c:
f2:e8:36:7d:2a:18:41:b8:b0:4d:bf:7b:51:3e:b6:a5:3a:4e:
81:58:08:3a:a2:73:f3:93:f4:d6:b3:8c:05:f9:f7:6e:bf:23:
c4:6d:f4:77:24:4f:fe:28:15:7c:f4:f6:92:53:b4:3f:b7:71:
39:75:bb:99:16:83:f1:ca:fa:3a:fe:b9:18:7b:a4:cb:a5:68:
98:21:1c:53:72:f4:30:14:28:1a:8a:fa:9a:9f:a0:1c:4f:70:
88:3a:42:af:f9:84:00:b2:70:ab:8f:34:5b:f6:dd:f2:1f:04:
0e:7a:2f:fc:70:6c:99:95:8c:cc:17:14:22:c6:76:e6:6d:56:
bf:7e:30:bb:c7:ab:2f:a8:85:4b:ca:69:1a:9b:ce:1d:4d:0d:
5d:8a:c3:f3:17:1f:bb:1c:42:f3:df:ad:9d:95:34:93:84:7b:
74:ab:63:fe:fd:bf:8c:2d:d1:b3:eb:0f:24:67:4f:77:3c:ff:
95:1c:75:d1:e8:f6:05:3b:b8:ed:93:5d:50:46:ef:40:03:28:
c0:f6:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:22 2026 by rpki-client