
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json)
Hash identifier: QJMwuqsHImBN80Yy3YF/Oxfxo9y0p+OeoRAFjplKi3w=
Subject key identifier: 6D:11:3A:3D:8D:A0:9C:5E:F0:5E:78:52:E3:4B:C0:A4:B7:30:48:69
Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
Manifest number: 0237
Signing time: Sun 01 Mar 2026 03:19:37 +0000
Manifest this update: Sun 01 Mar 2026 03:19:37 +0000
Manifest next update: Sun 08 Mar 2026 03:19:37 +0000
Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: 9+UO9iAi4EmFAfzaKEA5w3pjpwmLulDEnf4YYxl5L20=)
2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: 9PFfWoEAx34K/EBsgtnvK29zGTSC+viKRrz9B+FgvaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Validity
Not Before: Mar 1 03:19:37 2026 GMT
Not After : Mar 8 03:19:37 2026 GMT
Subject: CN=69a3b049-52b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:b7:6d:75:58:45:e8:6b:94:32:bd:34:1e:
11:e8:16:69:e7:52:dd:b5:a8:d4:35:e9:5a:fe:c8:
d6:71:8b:c3:77:ef:f4:94:70:10:af:f1:21:49:b1:
58:97:b3:67:85:ee:cf:f7:cf:b9:6c:ca:d3:9f:1e:
88:c5:34:03:77:bd:6c:b0:b9:a0:ca:04:c5:87:ae:
ff:e6:3f:18:64:01:48:e7:d0:ec:e6:ef:70:8b:ad:
8d:4a:05:f5:fb:fb:5a:2c:da:8f:c9:e5:5f:31:65:
64:7c:87:8e:9a:aa:31:ac:32:56:6d:4a:7e:14:aa:
33:af:da:07:aa:3c:13:98:d7:70:25:c6:6e:9d:10:
fb:13:38:f5:f2:84:4e:c8:3a:a5:fb:0a:37:d1:64:
9f:f5:9a:56:b4:c8:f1:f7:e6:71:1e:f8:f4:07:28:
4c:87:12:a7:a7:64:89:28:b6:bb:5a:10:3d:a3:e9:
1f:c7:ce:5a:99:03:db:9e:0a:49:77:f9:65:7b:e5:
23:c9:58:f5:c5:47:bf:ea:09:ce:f1:87:d7:23:41:
3e:e9:ea:af:2b:3d:41:da:77:fa:e6:c3:e6:ca:de:
0a:7a:5c:da:96:61:4a:d6:58:a9:65:bc:7a:32:93:
08:32:bb:99:1d:fb:65:c2:52:1b:fd:be:55:2f:d8:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:3A:3D:8D:A0:9C:5E:F0:5E:78:52:E3:4B:C0:A4:B7:30:48:69
X509v3 Authority Key Identifier:
keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8d:f2:d4:02:b0:3b:3d:e8:bd:a7:e6:e0:7c:2d:db:2e:77:
f7:61:89:4a:1c:bc:dd:99:d2:ed:4a:b4:5c:d1:7d:65:98:ca:
5d:15:d8:15:fd:6b:f1:49:b7:e8:32:1d:a5:dd:98:eb:82:d6:
e4:9a:79:c4:99:94:67:b1:6a:e1:f9:1e:56:d8:42:3c:28:a0:
79:d7:3a:da:5d:05:f2:52:d7:50:33:bd:18:c8:e8:ec:0c:f0:
44:0a:6f:3c:d2:8a:40:e7:ff:9f:41:f1:16:ce:f2:8c:f0:ce:
47:0b:c0:68:14:c1:c0:ba:be:0d:a0:a0:01:b0:1a:ae:4c:b1:
cc:8b:d3:aa:39:e0:fc:8e:70:b6:ab:88:5e:69:c1:03:38:db:
30:56:78:5e:5a:cb:0e:3d:e4:94:1e:3c:ce:5b:fd:df:35:4d:
9b:66:03:23:6d:cd:7f:64:71:29:7f:c6:f1:2f:4f:db:21:4a:
94:ba:6c:1d:4b:e8:e4:42:54:23:ad:38:2f:2f:09:09:58:2a:
49:c3:cd:0c:8e:09:0e:ba:54:44:33:37:47:05:67:18:c6:31:
8f:bd:3b:8b:ad:cb:6a:aa:19:07:25:37:69:6e:21:fb:9b:c4:
9f:3b:3a:6e:fa:3f:72:10:e4:4d:e2:18:a1:f2:e2:f8:70:fb:
3a:dd:1e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:31 2026 by rpki-client