
$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft
File: 2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft (raw, json)
Hash identifier: sjaJLLSWt5kGF3KbIu2OJKkx7DJpsEJMZM3dZdcie2g=
Subject key identifier: 6F:36:A1:1A:EE:7A:84:FE:08:11:93:D7:53:22:0A:92:3E:CA:B8:22
Authority key identifier: D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE
Certificate issuer: /CN=A91689B9/serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft
Manifest number: 0D
Signing time: Mon 27 Jul 2026 11:31:11 +0000
Manifest this update: Mon 27 Jul 2026 11:31:10 +0000
Manifest next update: Mon 03 Aug 2026 11:31:10 +0000
Files and hashes: 1: 2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl (hash: rdtTpoOPJPA49sXIaGJ5vDN17j//8Kjyts6T/QGCLPI=)
2: 9D1E103C79BD11F1A56111AD5AA30FBC.roa (hash: v5LCMSJ7unsotsj1CUAFikFHoJMXhj0hIvgSsrnsLqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl
rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91689B9, serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE
Validity
Not Before: Jul 27 11:31:10 2026 GMT
Not After : Aug 3 11:31:10 2026 GMT
Subject: CN=6a67417f-2e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:a2:91:7b:52:af:ab:75:84:a1:9a:9f:01:
32:b1:a5:5c:4f:b1:7a:57:91:80:64:23:62:64:1b:
14:fd:76:3c:51:78:62:2c:a9:cb:f5:b9:5a:53:6c:
72:87:d9:4c:d9:e2:17:e8:f9:3e:70:50:f0:a5:16:
13:be:6d:90:07:67:ae:e6:60:23:bd:21:4d:5d:06:
54:b2:e0:d3:c6:ac:24:52:c6:8b:03:63:82:b6:bc:
b9:a1:0b:fa:5b:89:cc:8a:97:b3:e0:c7:61:99:cc:
3e:02:57:57:52:37:12:59:4b:db:e0:c0:82:ef:ff:
48:4b:31:43:74:57:23:8b:a3:64:cc:4d:31:36:4b:
c5:f7:24:d1:73:a9:04:2c:98:86:1c:ca:01:0f:88:
d7:5b:5e:62:82:3f:e0:29:fc:fe:3d:a8:49:dd:0e:
15:37:e6:68:74:25:35:46:60:a8:5b:fc:a2:c3:ee:
53:f5:e8:75:f7:41:b7:3d:09:f7:69:c9:61:0c:82:
e9:30:42:47:40:2f:f4:7a:27:fc:0f:de:de:51:a1:
32:2e:4c:e9:79:22:1f:29:d1:cb:fb:4b:79:20:f0:
68:9f:45:c7:65:ed:eb:24:3c:20:62:c6:45:5f:40:
3a:e4:ea:43:fa:ac:68:62:e0:0a:19:37:75:e1:42:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:36:A1:1A:EE:7A:84:FE:08:11:93:D7:53:22:0A:92:3E:CA:B8:22
X509v3 Authority Key Identifier:
keyid:D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:35:1d:a6:4b:0b:30:3d:8d:93:18:f2:90:b2:45:32:30:5c:
cd:e3:5e:d0:fa:39:7e:75:11:aa:8f:36:b0:49:78:c1:45:9f:
3c:7e:87:04:e4:45:a3:75:a3:10:84:dd:20:35:6f:68:98:60:
f3:9c:0f:6f:6e:20:a1:a1:41:7e:32:6e:ae:be:5d:30:06:45:
58:11:68:70:e9:02:3c:20:eb:78:78:f9:85:ab:9b:e6:6b:c9:
d9:d8:88:9a:2e:71:13:3a:8a:3a:22:68:82:48:5c:d8:41:3b:
24:78:39:7e:2a:d0:83:fb:c9:f0:8b:2c:43:1e:6f:b0:ba:69:
15:29:26:d9:59:cf:30:cd:7d:14:66:72:6c:61:93:dd:e6:f7:
9d:d7:16:dc:50:f3:1e:09:f4:23:50:d0:9f:3d:78:b2:88:98:
4b:04:e8:40:4d:93:ef:7d:52:af:df:6f:0d:de:f7:79:cd:30:
48:04:3c:65:69:ac:22:30:16:55:54:8e:ea:5a:54:0a:4a:4d:
df:21:39:41:94:28:91:fe:30:b8:ee:eb:21:af:77:69:70:54:
4b:58:76:4e:a4:1a:67:75:7c:10:2b:81:a9:bb:77:5c:a4:9e:
55:83:4a:13:dc:e6:b1:9c:b3:b7:fd:09:ca:4c:6f:5d:10:62:
6f:d5:a0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:52 2026 by rpki-client