
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
File: n2T-UJklN_sLQOUvnPrDEMonGRg.mft (raw, json)
Hash identifier: 2eEdBYmofZICiJ+NZndWFJi0mri8OYyiFpE55dLEra0=
Subject key identifier: 6A:C7:85:80:88:98:01:84:40:62:6F:94:C1:E4:12:B6:F5:FD:44:2D
Authority key identifier: 9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18
Certificate issuer: /CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918
Certificate serial: 02CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
Manifest number: 02B7
Signing time: Mon 27 Jul 2026 03:16:41 +0000
Manifest this update: Mon 27 Jul 2026 03:16:41 +0000
Manifest next update: Mon 03 Aug 2026 03:16:41 +0000
Files and hashes: 1: n2T-UJklN_sLQOUvnPrDEMonGRg.crl (hash: NedIeTUZU2clAuDBgroLvlmaoS/F3erW/ZuoZWQ725s=)
2: A508D320BBC711ED8DF23C40C4F9AE02.roa (hash: XiGYQotdStfaaRLDXTyJEgN5O2tsmcN7Z7VvHBR9Ytg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl
rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714 (0x2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A57F8, serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918
Validity
Not Before: Jul 27 03:16:41 2026 GMT
Not After : Aug 3 03:16:41 2026 GMT
Subject: CN=6a66cd99-77e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:eb:d8:23:3d:73:f7:b2:1a:b1:9a:29:64:
f2:38:36:60:ac:6e:6a:79:0e:79:e4:a5:d9:14:bf:
9c:0f:fe:db:dd:fb:3f:24:52:8a:eb:af:11:7b:91:
5f:7a:21:52:67:81:74:41:23:69:3e:8b:61:20:4b:
48:c3:97:aa:de:62:de:eb:87:70:3a:01:3c:93:c5:
50:28:81:1e:ee:c8:7f:cc:34:f3:28:b1:a1:9f:88:
b2:b2:4f:ea:ff:5f:d4:34:45:e2:5f:fb:e0:1d:d9:
79:f7:6d:f6:f4:9e:65:82:d1:56:1d:4a:4b:91:c9:
d3:73:0d:89:ea:25:d2:fe:7f:0d:fe:44:e9:8e:65:
e9:33:b7:de:ce:91:96:f7:2c:ca:cc:a6:ef:43:8c:
8c:bb:0c:0a:06:33:fa:ea:dd:c3:8d:1a:a3:2f:aa:
ae:2e:68:26:8e:78:ae:f4:36:97:88:fb:40:09:7f:
3d:6f:d7:79:a5:36:70:d6:29:0f:c5:9c:07:65:16:
1a:90:a8:4a:3e:b7:54:21:5b:63:0c:67:40:1a:48:
b2:76:33:34:57:30:94:a4:5a:2b:08:92:60:76:a5:
71:a4:f9:77:27:b2:e0:da:94:28:02:f6:f9:73:83:
06:8c:9c:cf:c9:02:4f:fe:40:0c:9a:ef:b7:43:97:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C7:85:80:88:98:01:84:40:62:6F:94:C1:E4:12:B6:F5:FD:44:2D
X509v3 Authority Key Identifier:
keyid:9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:71:77:85:40:0f:2d:88:d7:dc:01:f5:63:92:55:62:1f:81:
35:64:99:06:84:7c:13:3c:48:53:d4:a6:24:6d:cb:26:70:29:
48:14:71:82:47:87:0b:f9:ca:e8:a4:19:eb:da:2a:ce:2b:11:
fd:2e:c3:1b:e8:9a:1f:07:86:fd:e7:8e:6b:a5:7f:02:ab:7a:
db:1e:20:b8:56:0a:f7:a9:21:4c:d1:17:84:66:7f:5f:3c:0b:
43:10:fc:b8:ec:b1:9b:5e:0f:74:55:8b:2f:24:f2:96:23:94:
fd:f4:64:38:36:7e:11:5b:f9:89:6f:00:28:7a:71:d6:47:62:
6b:25:d4:bd:e1:01:bb:92:00:b7:c3:70:24:d4:00:24:94:73:
61:f4:4c:3c:da:fa:d9:3b:16:d4:e9:e0:d1:55:4f:0d:15:67:
92:9f:9a:ca:55:6c:eb:97:ff:b8:f1:d4:66:04:48:23:e3:8a:
b4:49:00:a1:2a:8e:8d:f1:27:ce:79:6c:09:82:7e:97:81:84:
77:e0:0c:81:a8:a1:f8:36:78:d2:7e:a7:ec:08:3e:f2:54:0b:
5e:a7:fc:e3:37:e8:8f:2d:02:fd:0e:dd:64:2b:1c:34:8d:84:
f5:4f:79:95:4d:4f:5c:cd:eb:34:ec:b1:de:f6:45:6b:df:8d:
39:e4:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:06:27 2026 by rpki-client