
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json)
Hash identifier: rsK9A4tSJqasA7W9PAGpOuHe/UXV8rBBbeOwGK0WRrw=
Subject key identifier: 8E:21:16:A1:82:17:8E:D6:D0:82:A4:9D:72:E1:2C:E1:ED:77:B5:3F
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial: 028D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
Manifest number: 0286
Signing time: Mon 27 Jul 2026 03:10:45 +0000
Manifest this update: Mon 27 Jul 2026 03:10:44 +0000
Manifest next update: Mon 03 Aug 2026 03:10:44 +0000
Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: zD18SrudpKG9svoS3wM3aM79TZzyrwP/niI5yDRY1UA=)
2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 4E7B7eClCEG5d3gzWwa9hz6tdWf+XUY9sPo6EaTao1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Validity
Not Before: Jul 27 03:10:44 2026 GMT
Not After : Aug 3 03:10:44 2026 GMT
Subject: CN=6a66cc35-c766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:dd:11:54:35:dc:67:20:a2:96:34:a1:7e:
d1:43:fc:e9:64:43:45:e0:83:c5:cc:8f:1a:ff:dc:
9f:29:f6:57:fd:6e:24:48:b2:ee:74:e0:66:39:b7:
9a:12:6c:7c:5b:1c:9c:ee:8e:b1:52:67:0d:c8:f7:
e9:01:6e:57:5a:12:2e:94:1d:6d:d6:b2:10:75:01:
36:ed:39:a4:be:b3:47:f9:da:4c:4d:bb:83:1a:34:
c0:e0:c3:18:49:32:5b:b4:d0:8d:7b:2a:da:ca:e8:
ef:d4:b3:a9:0b:28:f9:0a:5a:a9:23:28:eb:b9:03:
8e:94:5c:23:70:98:49:69:fa:b8:05:93:31:a4:eb:
ba:5e:bb:1b:3f:fe:ae:42:52:6f:1d:6e:60:77:5b:
3f:56:03:9a:2c:08:42:19:3c:55:63:bb:a4:6f:d5:
4d:54:13:67:09:76:cd:e7:fb:35:0b:29:24:b5:d3:
4b:40:d0:a4:4e:06:ff:d2:33:d1:ab:03:45:79:d0:
77:24:ca:71:fa:eb:87:dd:df:87:f0:85:4d:ce:92:
fb:a8:24:f2:ee:93:53:98:9d:6f:5f:e3:c2:bd:cd:
27:4d:fc:39:33:8a:2c:91:40:7c:30:d6:1a:4b:d6:
08:17:ae:3f:4d:d5:e1:6c:f0:6c:5d:b9:23:a8:7a:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:21:16:A1:82:17:8E:D6:D0:82:A4:9D:72:E1:2C:E1:ED:77:B5:3F
X509v3 Authority Key Identifier:
keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f0:0d:c6:6d:46:af:1e:87:88:fd:75:44:48:79:d0:aa:a7:
81:63:d6:aa:21:59:73:28:13:e7:5c:73:18:fc:39:f8:08:7e:
2e:33:e4:30:c7:6b:dd:41:1f:77:d0:94:7e:54:1f:34:b6:ab:
c5:25:3b:e7:bb:d8:03:b1:0d:b1:f9:09:f3:94:b1:c3:ed:6e:
2b:2c:74:73:c5:8e:eb:c5:6e:1d:5d:8b:d1:d3:2f:cd:76:1a:
85:14:04:d5:b1:f1:f1:5d:d6:0b:ae:2f:40:c2:24:36:ac:32:
a5:52:94:e4:b6:00:5c:ae:06:6a:55:5f:ff:6d:bb:9e:90:34:
1c:9e:27:81:cb:c1:de:aa:a8:90:e1:dc:74:6e:61:22:a6:e5:
cf:f6:dd:61:8f:b0:53:d7:0b:f9:f6:6f:d3:0a:21:1d:31:13:
61:8e:a4:f4:7e:e7:19:e1:e4:89:ae:4f:e5:1c:44:83:18:6b:
0d:b0:d1:48:bf:21:f2:82:99:de:d9:63:48:d8:e9:67:11:7f:
dd:26:7d:48:f9:cd:bb:9b:1e:01:11:12:08:bf:9b:5f:96:08:
48:bf:9f:5c:0a:44:cc:fd:0a:c9:d5:88:ce:3f:a4:0b:71:3f:
69:4a:35:cc:39:70:8b:96:16:cf:6a:d5:b6:e2:a5:37:80:a4:
60:34:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:09 2026 by rpki-client