
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft
File: B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft (raw, json)
Hash identifier: LB1q1qHKkJJPxrx9evoBFliRwMxSqh0FTUi8q50hlZg=
Subject key identifier: 2B:30:9F:E0:95:03:F5:E5:95:7E:2F:39:30:59:87:6B:6C:DF:57:62
Authority key identifier: 07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7
Certificate issuer: /CN=A91DA5FD/serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft
Manifest number: 023F
Signing time: Wed 23 Sep 2026 02:25:33 +0000
Manifest this update: Wed 23 Sep 2026 02:25:32 +0000
Manifest next update: Wed 30 Sep 2026 02:25:32 +0000
Files and hashes: 1: B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl (hash: V4iywQFDA7lZjiZBMwJxVdf03B4pqAR2i+02LWFAxko=)
2: 76817340537011EEB43BD523C4F9AE02.roa (hash: rT2VOh31/L9CMPYQlzj69NmtrU1Ug2QyXDxEK4WR7fM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl
rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA5FD, serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7
Validity
Not Before: Sep 23 02:25:32 2026 GMT
Not After : Sep 30 02:25:32 2026 GMT
Subject: CN=6ab3389d-0c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:78:1a:f0:f5:c1:25:b2:2e:43:72:2f:26:
98:b8:3d:b7:fc:8e:9c:06:76:fc:dd:e4:f0:2f:df:
4c:fa:38:de:ca:0a:d0:f5:7a:51:df:ed:1b:2e:e4:
f7:c7:2c:e8:a2:8c:6d:3e:48:6d:d9:d4:ad:a2:ae:
3e:73:3b:67:a0:9b:94:22:c4:fe:5c:8f:cf:94:8b:
22:64:b1:92:68:d9:0d:05:8c:c0:39:ef:8f:ff:1e:
ed:28:22:f7:3a:7e:b6:e9:43:a4:e4:a9:68:03:a0:
3c:58:2a:f4:23:bf:75:51:9c:cb:05:e7:d2:52:50:
d2:d5:08:35:a1:74:ca:23:65:7c:60:29:68:6e:c7:
a4:2e:0a:d5:dd:99:68:bd:c0:85:be:d0:c5:18:57:
8b:24:bc:07:94:53:0f:0a:48:af:10:e8:fc:ee:f2:
2c:67:f0:0e:68:d7:fd:9a:f1:ea:27:36:39:e9:a2:
5e:53:34:7d:de:8a:cf:ad:bb:34:f1:f7:15:88:e7:
e7:7f:58:60:0c:b4:8c:d2:75:20:60:9a:d9:8c:72:
36:d6:ab:c5:54:bd:2b:6f:4b:22:42:d1:56:2d:ff:
2e:b2:27:43:31:e3:10:cb:77:19:5e:14:fe:18:cc:
34:cf:f5:ad:9d:de:35:bd:87:a2:9d:cc:83:f0:cd:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:30:9F:E0:95:03:F5:E5:95:7E:2F:39:30:59:87:6B:6C:DF:57:62
X509v3 Authority Key Identifier:
keyid:07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9c:df:42:fa:c6:3d:a5:8c:82:6a:70:86:f0:bb:ca:56:ca:
8e:13:f0:b5:b5:ef:6d:ae:d1:75:55:f8:6b:22:10:a5:c6:ad:
c7:a1:c7:8b:a3:76:b8:db:ef:5f:e7:e5:96:28:70:bc:63:f9:
53:33:97:e4:f6:3f:af:6b:d4:62:5a:b5:65:9d:e3:03:11:50:
68:2c:0f:9d:8f:d3:03:e7:f3:96:2f:49:77:05:5e:ad:88:17:
d8:18:eb:ff:b5:66:cc:7a:15:d0:1b:ca:0d:53:cd:13:8b:ec:
fe:0f:72:a4:45:61:71:fc:12:b8:e0:9f:7b:ee:c4:b7:ba:17:
fa:ab:45:75:88:e2:25:c7:87:d0:4f:16:05:c5:e0:ff:c6:6d:
99:81:71:33:f4:3e:30:58:c3:65:91:a8:e0:15:45:ca:0f:db:
8a:78:01:c6:d8:23:3e:ae:3e:04:b0:7c:2f:b9:59:60:f4:98:
b8:1c:21:b4:8d:69:c7:21:fd:21:22:dd:d4:f5:aa:13:98:ac:
71:f6:1c:66:e4:64:9b:0f:b6:3e:0e:f0:16:53:77:dc:0c:ec:
1d:9e:63:0d:f4:c0:9b:23:58:cd:cd:01:44:bd:ab:c8:ae:c1:
35:d5:4b:4b:6b:00:3c:d1:d3:07:12:36:39:e6:c5:f5:b4:30:
e1:72:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:39 2026 by rpki-client