
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
File: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json)
Hash identifier: 6uuVYLqgultQQ2ja5l+tRcDsspZ5A6hkVnP+qvLEe9s=
Subject key identifier: 3C:DF:6E:A7:4A:92:57:2B:BC:5F:E8:64:00:37:A3:26:70:60:E8:8F
Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Certificate issuer: /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Certificate serial: 0732
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
Manifest number: 070A
Signing time: Fri 12 Jun 2026 22:07:36 +0000
Manifest this update: Fri 12 Jun 2026 22:07:36 +0000
Manifest next update: Fri 19 Jun 2026 22:07:36 +0000
Files and hashes: 1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: a4E+xxdH/VSJe6XVEJUvCOJHK3fYkOOdPmQVOQ7/7Ao=)
2: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: mIm/bbZcQkFrDlz9RJ874pUYBEB1ADCrlxMEBQ9UkoE=)
3: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: EIzNMKDFWXT+xpDDB3WLdazu32oeLTAqnJXbS3MPXsE=)
4: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: kK1XQ5Qi/71Yzi7I23BLNly3sjDmgPxSxXxrn5KrS+k=)
5: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: Axv4ofsSe90yP+Tj74eBTq7TDNPSfa7eV4MAl8BctRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Validity
Not Before: Jun 12 22:07:36 2026 GMT
Not After : Jun 19 22:07:36 2026 GMT
Subject: CN=6a2c8328-4de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:05:46:bf:6e:2b:b3:e1:5a:74:83:7a:a3:c5:
47:16:7f:6f:70:b7:c5:c4:82:e4:3c:fe:b3:51:e9:
72:7a:fc:b9:0e:ea:1d:29:59:cf:ea:4b:03:96:e6:
a4:bf:01:85:57:1f:68:66:80:2d:d0:a8:e4:72:51:
f5:5f:43:39:ed:c2:24:cd:be:15:b8:c2:8a:08:a5:
97:a0:ec:e1:6a:53:f5:07:c7:5b:15:20:74:3d:80:
d1:d4:6d:11:92:6c:f2:d6:91:23:98:8a:45:e5:f1:
ed:8e:31:8c:e1:0b:3d:bc:a2:02:49:dd:70:8c:9c:
73:fe:65:1b:14:0b:2c:d8:76:18:2d:8c:04:ee:d1:
be:d5:95:02:b4:a0:d1:e4:5b:13:fd:d2:34:02:86:
c1:86:82:ea:5a:3e:7a:5a:b6:8f:d9:cf:81:24:f3:
72:2a:ce:b5:59:6f:33:32:7c:5c:ff:78:ac:7a:92:
03:8c:74:a9:7a:c1:90:19:b2:fd:b2:9f:ed:6e:21:
74:84:6b:05:7b:c5:c2:49:17:b6:48:4a:4f:3f:c4:
40:d2:a7:35:9d:2c:7c:4b:c5:92:46:b7:8e:43:eb:
04:52:8f:45:1e:cc:9d:35:72:d2:de:62:76:4e:e2:
3f:85:89:8f:eb:eb:01:cf:1b:af:29:69:00:a4:4b:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:6E:A7:4A:92:57:2B:BC:5F:E8:64:00:37:A3:26:70:60:E8:8F
X509v3 Authority Key Identifier:
keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4d:03:ee:3c:8e:6a:cf:32:3d:9f:1c:7f:7d:06:c4:78:aa:
2e:f9:0c:5d:03:5c:93:55:46:97:35:b2:5b:6d:d9:b9:79:da:
cf:9c:6b:43:a9:9b:54:19:90:d9:76:a2:da:c1:88:78:6d:b5:
26:42:14:55:d9:9a:30:bd:8e:ef:a5:e4:e0:03:a5:23:7b:f8:
23:21:c9:63:21:53:02:e6:7c:38:54:f8:e3:b1:92:78:52:a1:
0d:b1:bc:e1:b6:52:e5:d1:2c:8a:92:36:fe:32:e7:1d:7d:7b:
33:cb:cf:79:f8:5f:b2:95:00:f2:35:a6:37:fe:bc:ab:98:a4:
59:c3:32:30:d9:7d:92:54:79:24:72:ef:9d:b3:b0:4e:e0:15:
49:85:95:02:76:53:8d:fc:cb:30:74:35:3f:d9:5c:20:a2:77:
2f:78:44:e0:51:de:a3:ce:41:c9:c8:fd:f5:47:b6:90:9c:f7:
cb:a6:9d:da:4a:da:e6:8c:97:a5:0c:1e:c6:ce:8e:c6:7f:45:
d4:aa:61:22:aa:a0:3d:d3:40:85:3b:7f:89:82:1b:6c:3e:e2:
3c:d2:fe:94:1e:ff:2f:f9:e9:a4:ce:fa:b8:9a:0b:8e:af:a0:
b0:a8:24:07:13:6d:48:e6:60:60:2d:44:78:b8:8d:6e:98:69:
ce:9a:c0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:05:05 2026 by rpki-client