
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
File: r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json)
Hash identifier: LiBQ8xztuRYVfznrH/WWdIez67bMVUTI5KW/GnQdUsw=
Subject key identifier: B0:1F:E2:E8:3A:D8:E1:7C:73:4B:B7:47:8A:6C:E6:7C:2D:44:D7:D2
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Certificate issuer: /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
Manifest number: 013F
Signing time: Tue 28 Jul 2026 22:59:08 +0000
Manifest this update: Tue 28 Jul 2026 22:59:07 +0000
Manifest next update: Tue 04 Aug 2026 22:59:07 +0000
Files and hashes: 1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: hjc62KgwBQWusBbzsSPweJYFWNR09CCnjr6OX9A2Pdg=)
2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: +IqdnY0bu/tedBPSD8j29fV45Yb1kBQrsRNgm4wsYso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Validity
Not Before: Jul 28 22:59:07 2026 GMT
Not After : Aug 4 22:59:07 2026 GMT
Subject: CN=6a69343c-c7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a3:45:41:01:2b:82:c7:fc:00:04:cb:33:f7:
92:86:36:b3:fc:85:04:54:63:14:0e:25:8d:d7:40:
6d:80:f3:de:05:02:3c:08:df:15:fe:d2:d9:e5:98:
3d:8e:8c:f6:31:03:ea:62:dc:aa:a0:0e:49:cb:04:
eb:9f:78:65:4a:d2:79:76:fd:f4:71:67:66:2f:08:
da:fd:3d:a0:4e:bd:66:e5:55:f3:0c:e4:2f:d0:06:
93:92:b2:ff:42:95:63:9b:da:d3:08:fa:40:38:3b:
cf:54:bd:25:19:35:de:8c:75:08:01:74:b0:32:8a:
ba:7f:d5:a2:50:43:ac:a5:45:83:a6:3b:8d:c2:8f:
51:08:3c:d9:06:8f:8a:52:ac:6f:61:97:34:10:68:
a5:04:19:a5:a2:ad:c2:2a:17:b3:40:14:9a:c1:1b:
f1:80:6d:07:16:15:14:f2:42:4a:aa:78:88:e6:25:
65:0e:36:5c:bb:44:8b:51:fd:0e:ec:ef:aa:58:2a:
a7:5b:58:ad:f9:9d:c3:5e:f0:17:d0:fa:16:3b:79:
71:59:2a:54:6a:60:3a:ed:82:24:fe:c1:99:88:f3:
d6:54:1a:74:82:72:16:f6:ad:f5:bf:dd:e6:4c:69:
9e:f2:75:0e:c2:90:6b:9e:fa:39:22:d9:e9:92:a6:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1F:E2:E8:3A:D8:E1:7C:73:4B:B7:47:8A:6C:E6:7C:2D:44:D7:D2
X509v3 Authority Key Identifier:
keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f1:2e:00:ed:cb:6a:f4:73:74:8f:25:a4:a4:e3:af:a7:c7:
7a:4b:ae:ac:d1:80:dd:03:86:4e:c3:b6:a6:5c:55:af:5f:2d:
67:02:5c:f7:c9:2b:b1:17:48:b9:b2:f1:b4:2c:0f:59:03:72:
aa:6c:08:0d:1e:25:81:1e:f8:4c:5e:15:df:ae:d8:27:ae:1f:
0d:be:93:63:e8:13:af:40:b0:1e:39:df:e1:9b:21:0d:1e:e4:
0f:9a:cf:28:a5:54:5a:f6:c8:00:22:91:59:dc:72:dc:44:c2:
b9:8a:eb:6c:e8:a4:2c:4a:5b:37:fb:dc:0b:b9:2a:e3:3d:a7:
82:1c:61:f0:46:a4:84:b4:ea:a6:a9:97:a4:60:31:75:51:08:
68:78:31:9a:45:f4:3c:75:8b:eb:d0:bf:ab:4e:2a:89:b8:48:
cd:5c:27:84:13:68:0f:a0:82:67:88:c0:59:98:ce:85:33:5c:
dc:01:c5:c2:50:79:ed:04:0c:bf:17:99:a3:f7:6e:df:24:87:
d0:e2:cc:0a:0d:fb:77:7b:46:02:57:d6:a7:d9:9a:9f:f2:d6:
5c:e0:e8:6e:0c:50:d7:aa:5e:a5:d5:15:ba:3e:9e:05:53:1d:
f4:c3:f2:3e:ad:00:c3:6a:9e:be:c9:e4:4a:e6:d0:6d:4c:49:
e8:7a:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:22 2026 by rpki-client