
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json)
Hash identifier: jlQhgISF/xKoSJgGwNGyyMr1PLVTSX3QrmHIBZK5fgc=
Subject key identifier: EF:0E:73:E3:D0:25:C4:2D:B8:B6:F0:97:71:F4:95:2D:67:8A:8F:75
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
Manifest number: E2
Signing time: Mon 27 Jul 2026 08:37:44 +0000
Manifest this update: Mon 27 Jul 2026 08:37:43 +0000
Manifest next update: Mon 03 Aug 2026 08:37:43 +0000
Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: 5t+Bz4aWNpTaF1oDmY4DFBYM0czjWqKtyWY2T5/MPmw=)
2: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=)
3: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Validity
Not Before: Jul 27 08:37:43 2026 GMT
Not After : Aug 3 08:37:43 2026 GMT
Subject: CN=6a6718d8-7a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:f6:40:29:ca:39:3b:fb:c4:a6:b2:b3:fe:
f6:ac:03:3e:49:71:2f:fa:c9:c9:83:00:8c:cc:1f:
08:9a:08:65:b4:a3:de:9b:d7:24:dc:71:87:dc:e4:
89:45:8c:33:5e:21:be:2f:02:33:e5:13:e1:35:a4:
75:20:63:fb:6f:ba:e0:dd:a6:d2:94:f7:78:62:d5:
04:fb:6f:ad:3a:ee:4a:d3:d4:0d:6b:7f:78:9a:82:
ae:6b:48:ed:62:d4:9b:9b:1c:12:46:71:3a:d6:41:
e0:2b:b2:5e:d6:c1:ae:3a:82:dc:a8:c0:ee:38:1a:
b3:02:67:28:6b:d5:6f:68:70:00:59:b9:da:a0:ac:
21:d7:eb:32:4f:ea:7a:a9:9d:a3:4a:b2:3e:43:8a:
79:9b:22:90:00:40:51:eb:9f:c7:0e:76:dc:d4:c2:
8f:a2:ae:78:87:a9:2f:8e:ea:02:16:74:8f:96:6b:
eb:0b:38:57:31:5c:f6:33:9b:8f:7f:cd:70:51:f1:
d9:f9:2d:17:03:a9:1b:e9:10:e1:4e:05:a8:45:0b:
dc:c5:64:4c:21:c2:82:c2:65:81:0f:b1:86:e8:ec:
f4:c9:e8:ce:03:a0:09:ed:b7:1d:8b:42:44:70:56:
d0:13:9d:27:d5:0b:cb:0f:63:f2:6c:eb:7f:10:50:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0E:73:E3:D0:25:C4:2D:B8:B6:F0:97:71:F4:95:2D:67:8A:8F:75
X509v3 Authority Key Identifier:
keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:be:27:04:a1:ae:d1:26:ed:7a:29:10:c0:fc:c8:80:fa:1e:
f8:d9:bc:e7:70:cb:b9:0e:ee:d1:5c:89:7e:49:41:71:ec:5f:
50:e8:f2:45:8a:a3:8d:ad:82:ba:6a:e5:80:d5:1c:51:d9:27:
69:b2:0c:d7:22:e9:bc:2a:28:56:81:a8:ec:1f:a7:3a:7b:c1:
28:ac:e7:53:72:36:d4:6c:eb:1f:2d:67:3f:62:ea:2e:86:ca:
2e:f0:20:81:0d:b1:15:b3:88:d8:15:df:76:54:7d:4f:1f:36:
c3:4b:4d:e1:37:fa:92:fd:a7:aa:d5:07:d9:cf:e9:54:e1:78:
09:ed:af:fe:1f:75:6f:b0:7b:b4:9c:31:dc:6f:1f:e8:c2:1e:
02:53:42:88:6b:75:2b:13:39:cd:17:32:ff:9d:64:59:b8:11:
ed:77:c0:86:b3:9e:1c:87:e8:9a:cd:9c:38:3d:a8:98:d4:9a:
46:7d:1f:de:5f:21:e1:8a:1e:36:4b:21:08:1f:fc:24:29:0a:
d0:dd:3a:c2:34:50:4e:bb:bf:c1:82:51:28:82:49:f0:6d:44:
58:6e:3b:62:76:1e:ad:7b:b1:71:4c:32:94:b8:8f:b0:65:f4:
6d:b1:5c:80:53:6b:bf:e4:51:f9:94:d2:b3:87:12:b3:4d:75:
2f:b5:ce:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:28:36 2026 by rpki-client