
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft
File: K2gwqzfLNO8nOiCi8ugmQplgE9o.mft (raw, json)
Hash identifier: dnSdxEf8P+zDlixvPJM6Wl/CR76sCw5fceBLb0N4jfQ=
Subject key identifier: BF:CA:91:95:71:7E:25:F6:B9:E8:0A:4C:36:00:92:75:14:D1:E9:71
Authority key identifier: 2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA
Certificate issuer: /CN=A91E3E80/serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft
Manifest number: 9D
Signing time: Fri 17 Apr 2026 07:03:15 +0000
Manifest this update: Fri 17 Apr 2026 07:03:14 +0000
Manifest next update: Fri 24 Apr 2026 07:03:14 +0000
Files and hashes: 1: K2gwqzfLNO8nOiCi8ugmQplgE9o.crl (hash: PXWJHAWT9JrW1x+41EvXJ60umTOOO+fUCh+sRbbA8IE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl
rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E80, serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA
Validity
Not Before: Apr 17 07:03:14 2026 GMT
Not After : Apr 24 07:03:14 2026 GMT
Subject: CN=69e1db32-54ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:3d:e2:9b:cd:db:0c:5f:21:6e:b1:29:fb:
23:fc:c0:5a:e6:fc:6b:26:d3:bf:2b:14:31:1d:30:
69:a3:b9:ed:96:0d:b5:1c:d9:6f:c0:ff:af:06:a4:
8d:43:14:0d:fc:37:bf:28:15:38:49:32:c6:08:f7:
88:82:41:96:9c:ed:92:5c:20:e6:9c:09:76:a0:a7:
45:ce:02:b9:4d:bf:ef:a7:a9:2b:4b:54:cb:94:3f:
8f:25:93:ea:9c:33:b6:09:ae:96:07:51:6d:91:ff:
24:0e:54:10:a9:64:ef:81:cb:1a:0f:5d:77:5a:12:
64:4c:d8:6c:5c:37:62:4c:b5:8d:64:f7:d7:f4:dc:
1e:b8:c3:b2:d5:81:be:23:58:a3:d9:79:31:cb:5a:
97:da:96:a6:c9:95:c8:5e:c0:cb:ed:9a:94:ca:4a:
46:0a:c8:93:3a:10:ad:d7:2f:ff:49:f4:e5:6e:aa:
4c:56:fd:36:b4:a9:92:9b:f5:55:be:db:50:fe:a6:
e2:80:84:80:02:5a:6a:9c:ff:7e:a8:2b:66:c9:a6:
ed:08:eb:62:bc:b5:d9:ab:bc:7d:98:a8:8d:2f:f6:
57:47:16:2a:4c:9d:94:fa:f2:9c:e9:f8:3c:db:3d:
47:85:63:d6:61:fb:12:ba:74:e6:1c:97:95:b7:65:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CA:91:95:71:7E:25:F6:B9:E8:0A:4C:36:00:92:75:14:D1:E9:71
X509v3 Authority Key Identifier:
keyid:2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:a4:45:99:57:b8:f4:46:52:96:db:87:15:39:d4:56:41:0f:
2e:10:1e:16:4b:19:ef:39:6d:57:f9:af:0b:91:34:ae:c8:34:
6b:8b:c1:f3:e9:b6:cb:3d:64:6e:be:4c:b4:2c:2a:f3:08:3f:
2d:9b:da:9e:84:07:a7:a1:6f:1d:22:e3:b8:d5:60:1c:40:17:
f6:aa:37:c9:65:59:c3:84:3e:9a:59:b7:a5:1d:c7:08:72:70:
3f:7c:9a:41:8d:c5:8f:37:95:9c:92:21:10:d8:a1:da:31:02:
0b:7c:08:3d:d6:b0:59:76:53:33:9f:88:55:b8:43:1a:e1:12:
05:5a:7b:22:0c:60:c6:a3:0b:3c:7d:1e:12:c4:30:3d:f1:c0:
12:ab:54:68:4a:91:9e:90:76:93:db:3b:b2:41:b9:2f:0b:dd:
12:07:64:29:24:3e:f6:0d:7d:e2:44:cd:d2:69:c3:ce:eb:85:
15:34:16:ad:16:0e:ea:12:f3:7a:88:21:f0:8d:8f:d5:6f:33:
60:11:69:3e:52:c9:4d:84:17:c3:4b:9d:ad:aa:41:d4:d0:2c:
d8:c6:dc:96:8d:a3:70:28:7b:8f:99:a9:f2:9b:3b:f1:29:79:
84:c8:5e:a4:a4:84:f9:3d:df:08:40:f9:b8:9b:66:e5:61:3c:
e6:e5:d3:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNFODAxMTAvBgNVBAUTKDJCNjgzMEFCMzdDQjM0RUYyNzNBMjBBMkYyRTgyNjQy
OTk2MDEzREEwHhcNMjYwNDE3MDcwMzE0WhcNMjYwNDI0MDcwMzE0WjAYMRYwFAYD
VQQDEw02OWUxZGIzMi01NGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/894pvN2wxfIW6xKfsj/MBa5vxrJtO/KxQxHTBpo7ntlg21HNlvwP+vBqSN
QxQN/De/KBU4STLGCPeIgkGWnO2SXCDmnAl2oKdFzgK5Tb/vp6krS1TLlD+PJZPq
nDO2Ca6WB1Ftkf8kDlQQqWTvgcsaD113WhJkTNhsXDdiTLWNZPfX9NweuMOy1YG+
I1ij2Xkxy1qX2pamyZXIXsDL7ZqUykpGCsiTOhCt1y//SfTlbqpMVv02tKmSm/VV
vttQ/qbigISAAlpqnP9+qCtmyabtCOtivLXZq7x9mKiNL/ZXRxYqTJ2U+vKc6fg8
2z1HhWPWYfsSunTmHJeVt2VYAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/KkZVx
fiX2uegKTDYAknUU0elxMB8GA1UdIwQYMBaAFCtoMKs3yzTvJzogovLoJkKZYBPa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0U4MC8zRTQwMkFFQTRC
NjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9LMmd3cXpmTE5POG5PaUNpOHVnbVFwbGdF
OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0syZ3dxemZMTk84bk9pQ2k4dWdtUXBsZ0U5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0U4MC8zRTQwMkFFQTRCNjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9LMmd3cXpmTE5P
OG5PaUNpOHVnbVFwbGdFOW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZaRFmVe49EZSltuHFTnUVkEPLhAeFksZ7zltV/mvC5E0rsg0a4vB8+m2yz1k
br5MtCwq8wg/LZvanoQHp6FvHSLjuNVgHEAX9qo3yWVZw4Q+mlm3pR3HCHJwP3ya
QY3FjzeVnJIhENih2jECC3wIPdawWXZTM5+IVbhDGuESBVp7IgxgxqMLPH0eEsQw
PfHAEqtUaEqRnpB2k9s7skG5LwvdEgdkKSQ+9g194kTN0mnDzuuFFTQWrRYO6hLz
eogh8I2P1W8zYBFpPlLJTYQXw0udrapB1NAs2Mbclo2jcCh7j5mp8ps78Sl5hMhe
pKSE+T3fCED5uJtm5WE85uXTYg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:49:30 2026 by rpki-client