
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
File: 2wVNT_SDuJTYCF4P43hs4um1MGI.mft (raw, json)
Hash identifier: Odp3lRLIsuRAOYXyeGbbR4C0GdicZqRg6ATnM7r5Hvo=
Subject key identifier: E9:83:37:B0:B0:9D:B4:6B:C1:69:85:71:36:B3:CD:C0:6B:F1:13:2C
Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
Certificate issuer: /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
Manifest number: 3D
Signing time: Tue 28 Jul 2026 20:43:43 +0000
Manifest this update: Tue 28 Jul 2026 20:43:42 +0000
Manifest next update: Tue 04 Aug 2026 20:43:42 +0000
Files and hashes: 1: 2wVNT_SDuJTYCF4P43hs4um1MGI.crl (hash: 7NkFp0ogQ7SMa9JkV8vxtr8fza4JhY7js8uy2VQzekg=)
2: 031A6E544E9311F19004C0C7A2EE528E.roa (hash: w/4wlpVVsUwM2QVkvZtJ7suuuKCdp4EEZYeS6K8GgLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Validity
Not Before: Jul 28 20:43:42 2026 GMT
Not After : Aug 4 20:43:42 2026 GMT
Subject: CN=6a69147f-e00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:d4:ea:e4:5a:f6:40:72:61:0b:31:4c:92:
62:96:b4:9f:b5:a2:cf:a9:51:b0:c6:83:18:1a:09:
d2:88:fa:48:69:8f:a9:14:78:a2:7e:e6:f4:cd:f1:
b3:03:ee:c0:3f:3d:6c:e6:03:13:09:36:23:ee:8d:
f7:f2:75:61:fa:8b:3a:c4:53:f7:14:4a:c4:6c:e9:
c7:76:dd:56:2c:04:47:ad:33:ee:74:ff:cc:9e:ef:
2e:e4:ae:e2:11:09:ff:f8:35:4a:c0:9a:68:d6:2d:
39:34:4c:9a:37:44:fc:9e:7c:bb:29:46:43:6c:d1:
d9:bb:fc:e6:22:3d:07:c4:b2:2c:5e:9a:b6:b2:e5:
ba:34:35:15:15:0d:c6:a3:92:f4:57:a0:74:d1:b1:
81:0f:e4:c7:ed:bf:69:6b:31:5f:66:52:14:76:1f:
68:b6:d3:a0:0b:d8:15:71:1c:07:e4:c0:41:0d:9b:
d6:5e:05:c5:46:1d:55:e8:ac:6f:73:50:6d:d4:86:
6f:e7:b3:5b:dd:10:1e:fa:cd:2b:84:4f:5b:e8:b8:
d4:d0:d3:04:cf:1c:7c:bc:51:8c:eb:ca:25:38:73:
18:21:1d:e4:63:e2:a1:52:4d:19:d4:79:96:b9:53:
6f:05:58:b0:31:77:92:a9:c6:cb:82:26:72:a4:d2:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:83:37:B0:B0:9D:B4:6B:C1:69:85:71:36:B3:CD:C0:6B:F1:13:2C
X509v3 Authority Key Identifier:
keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:06:0e:c2:12:66:17:71:da:6d:2d:ca:b7:1a:da:ea:3a:8d:
cc:8f:b1:5f:3f:f4:31:ea:6d:fc:b6:ea:26:12:2d:02:af:15:
9d:2d:20:5d:a7:01:60:6d:70:48:7e:6c:3d:6f:44:3c:76:38:
f8:0c:1d:c3:5c:ce:ba:a3:b4:58:7d:22:fd:cd:22:96:d8:49:
b7:4e:aa:ac:a7:15:cc:2f:6f:b7:fb:3c:3d:c7:b1:2b:7c:c9:
7d:0c:6a:eb:68:c8:6d:24:3b:ff:57:a4:24:f8:00:be:d1:a9:
da:71:28:4c:c5:b0:9f:79:69:43:0d:18:54:f7:36:3a:a9:7b:
5b:8f:d1:b4:b6:07:98:39:ba:5a:7c:a5:5d:5a:2a:0c:bd:7e:
ff:e2:74:b7:5b:fe:a8:e0:53:a1:54:33:e6:12:0d:78:67:17:
f4:f9:85:a7:68:bf:c7:6c:9e:7c:d1:6d:e9:c4:a4:08:21:f0:
d2:26:40:eb:f9:ba:2f:ce:7c:62:bf:a3:78:3a:ce:ba:5c:ef:
3f:9a:32:f3:c6:1c:36:5c:18:f1:fe:56:cb:25:c7:eb:ac:5e:
83:70:89:e4:cf:06:be:24:86:31:12:1d:99:70:6d:f9:d2:55:
b2:9f:c7:ea:23:c5:87:0c:ee:a6:36:14:d4:2e:bb:8e:89:53:
dc:96:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:08:23 2026 by rpki-client