
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json)
Hash identifier: SUWdehY5weDzH3l+Ri/5MXI9RnIHxzaeVJ4o2DymukU=
Subject key identifier: 82:A7:14:7E:0D:BB:8F:A3:F1:BB:99:BE:E8:5C:69:35:BF:BD:40:BF
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial: 050C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
Manifest number: 0500
Signing time: Fri 12 Jun 2026 23:44:48 +0000
Manifest this update: Fri 12 Jun 2026 23:44:47 +0000
Manifest next update: Fri 19 Jun 2026 23:44:47 +0000
Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: MGE4XtVTPPIR0R3FlOUN2nqaRbxHtZ9e/AXtfe7yWPo=)
2: E03427482D2411F192A7D59AB8833773.roa (hash: jK7mks1MMjJvVIyRYKwMkRBkaa32MR5Py6W7RYY9KqA=)
3: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: CP9FAdKBke/NciieBtLRTUYPVa+mGRMYkC3JaQUvBRc=)
4: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: bPO66cPU1SPGOc5KH5eGrolnSN1m6sptmbmqTiJIuEU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Validity
Not Before: Jun 12 23:44:47 2026 GMT
Not After : Jun 19 23:44:47 2026 GMT
Subject: CN=6a2c99ef-6f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:97:c3:0f:0a:2b:af:b7:d5:88:51:4e:78:
13:7c:1c:25:4d:53:c1:f6:6c:10:fd:c7:a4:cc:52:
d2:40:54:9b:2a:df:90:92:92:9e:65:ba:9f:f4:18:
65:d8:24:fe:4a:be:39:f5:7a:67:fb:52:01:a6:64:
af:a1:9b:89:6e:a3:fa:5c:17:47:99:0a:c8:70:6a:
44:d7:6e:58:71:2e:cb:13:ed:fe:d7:7b:81:fb:2b:
b8:93:af:93:63:41:d8:01:ac:68:a4:86:e8:2c:7b:
1d:b1:d5:06:96:06:a7:9d:1c:2b:b9:9c:00:02:16:
fb:ae:b9:ac:55:fe:08:b5:0b:5f:69:b1:ce:b3:70:
9b:77:f7:11:94:d2:8a:bc:e0:be:01:ae:d7:65:4d:
c2:de:9a:0a:5e:4c:21:cf:b0:4a:95:e3:20:30:aa:
0d:37:81:be:a8:27:2f:b4:8e:4e:24:9a:be:36:6c:
9c:57:78:d5:b9:03:6a:68:2d:b5:dc:19:4b:2f:3f:
99:3d:a9:ac:b1:2e:5b:46:da:77:4c:8d:7a:d4:a9:
89:db:a5:77:53:0d:ac:5e:24:0a:fa:18:da:5c:d0:
89:e3:78:6a:49:d3:fb:f8:64:b3:64:8f:91:45:fb:
dc:65:ce:88:18:f9:dd:a8:1b:d3:ce:82:34:4b:fc:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A7:14:7E:0D:BB:8F:A3:F1:BB:99:BE:E8:5C:69:35:BF:BD:40:BF
X509v3 Authority Key Identifier:
keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:4e:ec:ea:da:fc:d1:8f:b9:b6:8e:61:28:df:b9:43:e4:05:
f6:f2:ae:16:0d:8c:18:92:0b:2b:bb:d9:14:41:da:0a:ab:34:
96:73:84:3e:96:65:c7:99:19:46:7b:03:be:5c:65:4c:13:42:
c7:14:8f:d8:36:4c:0f:0c:a9:64:d4:46:b7:a2:08:d0:4d:fb:
be:8d:9b:a6:99:27:98:61:a9:a9:a8:e6:ae:f7:fb:d9:f9:18:
06:5c:50:89:ce:bc:4c:4e:42:a3:b0:ac:8d:b6:2c:da:15:7c:
9e:99:dc:77:91:e3:d1:ff:50:fb:c4:23:83:8d:a9:72:9d:c6:
ab:49:f6:35:6a:90:03:8f:2b:3a:d1:61:83:78:2c:34:1e:82:
6d:13:e5:41:47:7c:96:24:6d:81:6e:b6:82:43:35:64:a6:e7:
80:2e:bb:c3:d4:a9:2a:25:9d:f7:b3:6e:d6:13:07:99:af:be:
73:04:2b:76:0e:b9:dc:b3:81:00:06:c1:47:dd:22:50:2e:27:
24:aa:67:db:66:30:2b:fa:a3:82:43:74:d8:29:09:95:57:db:
53:da:ec:f3:eb:97:01:3c:74:67:4a:d0:aa:5a:52:f6:78:f2:
0f:22:b4:4b:0a:af:37:f0:2e:9a:88:89:4f:1f:76:e3:4d:85:
9c:34:39:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:48 2026 by rpki-client