
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json)
Hash identifier: B19zVDmRgOzoSLCkpqHc81drhvyBXfaOfboCSxzetuU=
Subject key identifier: C1:17:5B:7F:59:43:BC:19:B4:7C:79:08:9D:14:0F:CA:C5:DF:B7:37
Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Certificate serial: 0565
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
Manifest number: 052C
Signing time: Fri 12 Jun 2026 23:35:21 +0000
Manifest this update: Fri 12 Jun 2026 23:35:21 +0000
Manifest next update: Fri 19 Jun 2026 23:35:21 +0000
Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: YLjE1EaLFLFTA7G+r3jRx1z0/iV0r5QTNVJOH0HYM2E=)
2: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: 7xZPQJy4FlDqQRK4ZNxBOqn11xvYRCTnG5Hl+SBa0kA=)
3: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: EOMIe0WcNYmNc20xtvF1NWvgi2RMO6+OBmsDK/hEYoY=)
4: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: dY+BZEOINurtJjOA3yhjmWQ4kx2Zua1d5uXKZrya/Kk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Validity
Not Before: Jun 12 23:35:21 2026 GMT
Not After : Jun 19 23:35:21 2026 GMT
Subject: CN=6a2c97b9-f6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:2c:38:ad:fa:1d:57:8a:58:9d:44:b1:61:
d6:6b:d1:80:b8:2b:8b:77:32:83:63:4f:58:c8:48:
72:30:dc:44:e2:ca:27:a8:26:ad:cf:61:b4:47:e7:
2d:2f:53:c9:c1:e0:fb:c8:55:bb:16:bc:6b:74:59:
a7:95:a3:51:d4:e2:cb:51:b5:07:08:87:c7:6b:18:
4f:53:01:e0:db:4c:28:60:a3:c4:9d:83:71:14:a5:
94:a1:96:ae:6b:f9:94:f8:7c:0a:fb:a4:df:63:fd:
8e:5e:ff:87:fe:a0:f2:0c:f0:a6:23:23:ef:a1:65:
66:96:90:3c:46:ac:de:13:00:41:a7:c4:7d:16:f1:
39:cc:81:02:7a:4a:ab:5e:8c:f3:57:1a:94:b5:55:
80:28:8d:5b:a9:84:68:26:d0:9f:41:a1:d3:e8:e8:
a6:a6:7f:93:f9:64:4b:dd:81:a8:84:96:0b:4f:6d:
7e:18:90:e8:37:7a:ef:4f:6d:7b:2e:35:a4:b7:a2:
1c:3a:b7:1b:6c:75:9a:18:a9:82:1c:58:33:55:a6:
8a:0b:06:ce:1c:cf:b0:ab:f6:16:4b:50:6b:c7:dd:
f5:2a:88:12:ac:0c:28:9f:c6:43:0b:50:74:2c:fc:
43:ec:76:d1:53:44:db:eb:46:2f:74:a8:0c:43:cc:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:17:5B:7F:59:43:BC:19:B4:7C:79:08:9D:14:0F:CA:C5:DF:B7:37
X509v3 Authority Key Identifier:
keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:00:73:fa:d7:91:cb:76:62:12:af:ab:88:c3:90:42:de:28:
d8:7b:68:1c:99:76:46:72:81:22:0c:cd:8e:7f:c7:31:32:bb:
4f:e2:f6:11:28:2b:12:c5:96:00:fb:de:fd:b4:6d:40:d4:cf:
d9:69:ba:12:c7:c8:40:2a:fe:a1:10:92:a5:ee:c9:1e:90:97:
22:7d:e3:f1:28:b7:a4:ba:1a:9b:87:bc:12:82:8a:69:8a:5f:
66:74:2d:ad:9c:4b:84:b4:e8:58:4d:e7:a8:5d:2c:26:58:d4:
ff:a6:33:17:21:fd:1e:89:78:91:49:67:60:98:60:78:b7:b6:
e4:62:21:55:e4:c5:2e:7f:85:01:b4:1f:92:5c:6d:eb:7a:41:
a3:a6:26:86:8f:ac:ab:ab:fc:f1:63:f0:4d:af:7d:1d:40:aa:
c7:36:7d:8d:d8:c4:6d:0b:6b:b6:e0:05:45:3b:7f:23:8e:4b:
88:a6:70:ee:4c:3e:6d:9c:3a:c5:34:d1:28:09:f7:72:39:c1:
ff:4a:af:ec:c3:9c:40:e4:16:83:50:4a:86:90:62:be:5f:20:
6a:78:57:31:3b:f9:42:4e:37:11:46:67:2e:dc:cc:aa:f0:5d:
86:62:55:29:a2:ee:00:d0:cc:5a:b3:7c:76:bd:24:c7:75:b8:
ba:8c:ae:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:57:29 2026 by rpki-client