
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json)
Hash identifier: 4XX1gGdK7vTCT/VVdyd//+eqoz4sdXmYSlOqFTpmE84=
Subject key identifier: 79:40:CA:6C:DE:0F:CA:B9:8A:C7:0F:64:01:96:C1:00:46:6A:B6:05
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial: 053E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
Manifest number: 0532
Signing time: Fri 18 Sep 2026 23:26:36 +0000
Manifest this update: Fri 18 Sep 2026 23:26:36 +0000
Manifest next update: Fri 25 Sep 2026 23:26:36 +0000
Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: ZLAGsLPdpgejc+dgz3IR1Cru8zfKfywZYt8wtSfoO2E=)
2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: CP9FAdKBke/NciieBtLRTUYPVa+mGRMYkC3JaQUvBRc=)
3: E03427482D2411F192A7D59AB8833773.roa (hash: jK7mks1MMjJvVIyRYKwMkRBkaa32MR5Py6W7RYY9KqA=)
4: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: bPO66cPU1SPGOc5KH5eGrolnSN1m6sptmbmqTiJIuEU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Validity
Not Before: Sep 18 23:26:36 2026 GMT
Not After : Sep 25 23:26:36 2026 GMT
Subject: CN=6aadc8ac-1af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:50:b6:e5:63:e8:47:d0:11:5f:ee:40:e2:
e6:5a:d3:d8:f6:d3:6f:1b:1d:5b:72:23:80:2f:99:
14:0c:36:c5:35:d2:66:3a:40:2e:d3:79:2e:de:f8:
36:07:b8:49:d3:1b:b2:31:8b:04:fd:f3:a1:c2:82:
53:a4:13:11:64:99:82:98:fb:0e:df:1a:ff:4d:1f:
5d:6c:a9:97:d7:0b:7d:d5:b4:c1:c2:87:5f:e8:72:
a0:46:ff:a2:51:55:46:f8:95:cf:c9:cc:c4:dd:3a:
28:13:94:de:be:e7:77:95:e6:a4:98:d7:04:e4:f2:
6c:07:d2:f1:c1:0c:cf:e4:02:78:42:e5:21:2b:91:
3f:2a:35:43:53:e0:d8:ac:12:6b:91:81:32:76:98:
8d:31:a7:5f:09:72:0b:e0:f3:35:52:fc:4c:01:a3:
13:c4:f0:96:60:f2:22:2c:a1:4d:cb:fc:10:8b:e1:
19:c9:95:22:91:c8:b4:47:d9:e2:a2:48:64:22:ff:
dc:c9:35:5b:14:c1:34:e3:15:40:10:27:c4:cd:c0:
86:e6:40:c9:d4:c0:30:05:df:e1:6f:91:ba:ae:a4:
24:4b:a3:fc:de:c7:56:08:5f:16:7d:94:79:6c:85:
ff:96:6c:79:09:38:80:1d:ac:fd:f2:ad:42:5e:e3:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:40:CA:6C:DE:0F:CA:B9:8A:C7:0F:64:01:96:C1:00:46:6A:B6:05
X509v3 Authority Key Identifier:
keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:fa:72:78:17:95:8e:49:7e:7d:d7:43:2b:a9:7b:be:c7:48:
17:27:29:09:9c:f7:6d:b5:a0:88:0c:99:32:da:14:d5:e3:79:
89:d4:7c:1c:af:c9:4b:74:aa:2b:01:04:46:9f:29:79:e5:0e:
01:8d:91:f9:ed:35:0a:3d:74:e4:27:a3:d4:8f:6c:23:e3:e4:
24:b9:07:59:77:5c:d1:93:90:b9:aa:86:71:28:cc:e3:2f:40:
9b:24:aa:db:8d:64:98:ec:a5:b5:1e:f5:68:d7:25:85:d9:46:
15:3d:a1:3f:ce:e2:b2:ef:1e:a7:9c:72:e9:da:c0:40:9f:45:
92:8f:ba:3f:91:8b:39:76:85:99:71:4c:70:89:03:a9:a8:28:
79:e0:76:ad:85:ef:95:08:81:cd:1b:25:de:1a:e2:05:84:14:
4b:f1:c0:47:98:f1:ec:ef:96:ee:79:c8:dd:bb:35:3e:0f:0a:
d1:82:35:64:38:d6:e0:13:57:f7:58:8c:c4:1d:05:7a:32:55:
73:9d:3a:8f:a8:16:26:6c:37:b5:7f:62:e1:96:c4:bd:36:9d:
2e:5f:05:bd:3e:cd:63:7a:09:eb:00:d2:d3:cb:83:d6:e0:58:
5e:f3:57:48:d3:6c:ae:4f:f9:b6:a3:eb:48:b2:7a:1e:c2:18:
81:ec:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:42:15 2026 by rpki-client