
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File: 2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier: YKF8VIH2CJ30aeSsWrybwLPM0K/cjFtY853+UOo8C20=
Subject key identifier: E7:65:3B:00:A1:CB:DA:7A:AA:E4:C2:99:BB:D1:5D:02:EE:F9:35:7D
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer: /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number: 18
Signing time: Sun 01 Mar 2026 10:28:08 +0000
Manifest this update: Sun 01 Mar 2026 10:28:06 +0000
Manifest next update: Sun 08 Mar 2026 10:28:06 +0000
Files and hashes: 1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: G971KuiKTaI9dUKrJpDs/x6lwZZQuf+/4ZHpVfX6rfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Validity
Not Before: Mar 1 10:28:06 2026 GMT
Not After : Mar 8 10:28:06 2026 GMT
Subject: CN=69a414b7-ea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:f9:dd:06:14:88:30:b4:ea:1e:3a:a1:d3:
1a:64:4a:d7:93:f8:c8:a5:2d:dd:ca:a6:bf:26:73:
01:5d:e8:49:0e:5d:bd:3c:2a:75:dc:1d:83:04:de:
4c:ec:eb:a0:93:44:08:f9:50:71:8e:6d:b0:4f:bc:
4b:e9:6f:c8:87:12:70:4d:15:34:40:83:be:b2:a8:
eb:b4:a0:44:0a:c2:a7:83:eb:26:9a:da:10:3c:28:
d4:c1:0d:52:7f:79:ab:de:28:25:2b:89:e2:04:c9:
95:d9:4b:7d:16:8b:28:37:c5:26:92:11:94:af:ae:
a2:5c:ac:9f:69:80:4b:fa:57:ad:fe:33:bb:f6:8f:
0f:89:56:f8:2f:1b:a6:aa:ca:c3:68:60:82:0f:de:
86:5c:14:64:7c:6a:56:0c:b1:1c:1d:e5:56:a6:67:
3d:a6:78:8f:79:d8:bf:c8:ab:9a:7f:c4:be:92:d8:
31:45:db:f2:e3:5a:77:10:aa:5e:36:95:ee:fa:93:
7c:7d:55:d6:fb:4e:23:d0:ed:c4:04:20:47:79:eb:
38:60:56:94:fd:c3:d6:f8:64:b5:c5:28:ef:0d:22:
ed:fd:3b:d4:fe:12:b7:8e:56:97:6e:64:30:4e:0b:
5f:ff:90:25:7b:b6:87:5a:57:fe:09:08:d4:84:da:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:65:3B:00:A1:CB:DA:7A:AA:E4:C2:99:BB:D1:5D:02:EE:F9:35:7D
X509v3 Authority Key Identifier:
keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f0:43:70:99:be:b8:ad:0a:32:30:c8:51:97:56:51:17:d5:
4b:70:b7:fe:cd:6c:2e:e5:14:5e:73:64:e0:59:9a:48:27:ad:
e2:0a:57:43:e1:c1:1a:3c:f5:4e:17:1e:85:e0:81:6d:2b:33:
8f:65:2a:ac:c5:11:3b:81:11:7d:b8:76:3b:b4:92:65:bc:de:
69:e5:5d:5b:dd:1b:d3:d3:1d:35:6d:54:09:dc:37:2a:87:19:
14:32:c0:15:b0:c3:d5:ae:ba:08:d8:d2:d6:ff:2e:c8:bf:3a:
ce:ce:10:69:59:54:6e:d8:9f:a3:ad:d2:09:54:49:eb:08:14:
23:4a:26:95:ac:18:82:19:af:31:b8:df:bb:f2:bb:1a:84:13:
57:10:25:aa:57:ff:a2:33:67:28:80:24:d0:71:b4:82:88:45:
d0:7f:9d:a8:98:a1:31:ad:f0:13:c7:17:bf:3f:16:8a:20:8f:
ce:8b:c2:1a:5c:79:3a:78:e6:8c:ce:7f:b6:64:03:ea:b8:d7:
3f:3d:13:7a:68:4a:7d:33:63:37:9f:d7:23:dd:08:62:d3:c5:
d2:b1:d4:e4:43:b0:99:1a:ff:cb:85:06:8a:23:3e:d8:9a:f2:
16:12:5b:01:7c:55:ee:8d:0d:d3:b8:8a:04:1e:e4:3f:63:18:
d6:d5:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:51 2026 by rpki-client