
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
File: 2n7tifhToFCqePhmgZCMmcNRBnA.mft (raw, json)
Hash identifier: 7Nxr3wjwA1YPgVxdoVXpEDx0Zwi3QE6qoll2ALr2c9I=
Subject key identifier: E9:55:03:C0:7F:39:45:83:12:79:2E:D5:14:B3:04:BE:2E:4E:89:44
Authority key identifier: DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70
Certificate issuer: /CN=A91C8A07/serialNumber=DA7EED89F853A050AA78F86681908C99C3510670
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
Manifest number: 09
Signing time: Thu 11 Jun 2026 11:33:27 +0000
Manifest this update: Thu 11 Jun 2026 11:33:26 +0000
Manifest next update: Thu 18 Jun 2026 11:33:26 +0000
Files and hashes: 1: 2n7tifhToFCqePhmgZCMmcNRBnA.crl (hash: XLlcXalpnBZbXOtDY8V+JgB+cNBgnvAeJfPhVAUTGrQ=)
2: F3CE961064A311F1A97DC0998B47A888.roa (hash: pejeTtYSguLZu0BW6m0RkH55kNdbMRCqIXu4V/iuKnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.crl
rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 11:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8A07, serialNumber=DA7EED89F853A050AA78F86681908C99C3510670
Validity
Not Before: Jun 11 11:33:26 2026 GMT
Not After : Jun 18 11:33:26 2026 GMT
Subject: CN=6a2a9d06-3906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:14:a6:0d:88:ff:39:2b:47:d5:0f:bc:c5:
9c:5a:6b:79:af:41:d8:dc:c4:88:5e:18:bb:0f:9f:
9b:45:5a:2b:c4:da:d1:5b:9b:4f:c3:bb:67:19:4b:
9e:b6:63:41:df:75:da:50:1f:22:71:3c:c2:8b:15:
a1:78:95:f7:02:1a:d6:1a:80:16:8c:0b:9b:5c:d5:
85:78:ec:98:be:8d:65:46:e0:bd:2b:54:60:22:ab:
b0:25:16:63:d1:0a:06:33:e8:25:ad:bc:4c:78:cd:
6e:cd:cb:d5:d0:db:0a:f4:5c:be:d9:11:7a:e6:95:
68:26:b0:69:3c:3c:e7:4e:11:f3:ce:b1:79:a5:eb:
ba:1c:73:f9:55:07:d9:5c:bf:a5:84:a6:4d:60:e5:
ac:a5:f2:32:83:26:37:5a:6d:a6:86:de:d5:b1:97:
36:89:d4:24:8c:97:22:aa:62:94:07:86:c0:3e:9e:
33:91:be:42:34:97:75:8e:f9:fc:1f:9b:c6:97:cd:
2c:35:a3:68:47:b0:00:7c:1a:e9:38:f7:6d:be:ca:
65:66:b3:e9:49:da:e5:b4:7b:5e:d3:3a:bb:44:5a:
fa:06:57:71:6c:5d:ac:28:3a:14:09:24:a3:db:58:
b8:f3:be:17:75:62:76:16:a7:cd:7a:69:7d:e8:73:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:55:03:C0:7F:39:45:83:12:79:2E:D5:14:B3:04:BE:2E:4E:89:44
X509v3 Authority Key Identifier:
keyid:DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6c:e7:22:43:b8:02:e7:0f:d9:88:fa:fb:d0:30:09:46:11:
10:8c:0e:5e:b8:6f:c5:6d:e9:7d:b0:5a:c1:8f:c5:c9:87:b3:
26:4c:83:67:53:7c:86:f5:06:53:df:f4:28:16:90:e4:a8:3b:
d4:cf:d4:6f:77:91:b7:47:e6:39:68:93:7e:4b:ff:4e:fa:56:
3f:1c:96:1a:ee:3a:81:a0:ff:de:0c:e2:93:12:48:9d:3e:ec:
e9:3f:67:78:4c:0b:df:e0:2f:09:66:cd:8c:b4:88:ce:a7:f5:
93:95:ce:c5:61:9e:0d:20:5b:39:57:13:29:65:a6:d7:73:f9:
86:40:10:e5:6a:56:71:f3:ea:98:24:5a:a3:05:b7:60:86:5f:
37:c3:25:26:e5:0d:db:ff:32:9f:19:1b:e7:1a:66:bf:48:59:
03:ad:23:7b:91:83:4a:62:e0:7b:42:fa:00:82:35:9b:cb:f0:
c3:69:bd:7b:1e:a5:6e:8b:35:82:b1:da:ac:a1:4c:1d:88:5a:
55:43:64:e9:00:21:44:7c:78:a1:a7:93:5b:7e:03:76:fd:15:
61:69:5c:40:48:09:c1:d1:b0:ac:80:7f:71:9c:10:55:83:90:
27:d4:37:ad:d6:eb:05:37:5d:12:ee:49:66:92:9f:9f:79:e9:
38:de:39:13
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OEEwNzExMC8GA1UEBRMoREE3RUVEODlGODUzQTA1MEFBNzhGODY2ODE5MDhDOTlD
MzUxMDY3MDAeFw0yNjA2MTExMTMzMjZaFw0yNjA2MTgxMTMzMjZaMBgxFjAUBgNV
BAMTDTZhMmE5ZDA2LTM5MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCz/BSmDYj/OStH1Q+8xZxaa3mvQdjcxIheGLsPn5tFWivE2tFbm0/Du2cZS562
Y0HfddpQHyJxPMKLFaF4lfcCGtYagBaMC5tc1YV47Ji+jWVG4L0rVGAiq7AlFmPR
CgYz6CWtvEx4zW7Ny9XQ2wr0XL7ZEXrmlWgmsGk8POdOEfPOsXml67occ/lVB9lc
v6WEpk1g5ayl8jKDJjdabaaG3tWxlzaJ1CSMlyKqYpQHhsA+njORvkI0l3WO+fwf
m8aXzSw1o2hHsAB8Guk4922+ymVms+lJ2uW0e17TOrtEWvoGV3FsXawoOhQJJKPb
WLjzvhd1YnYWp816aX3ocwPvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6VUDwH85
RYMSeS7VFLMEvi5OiUQwHwYDVR0jBBgwFoAU2n7tifhToFCqePhmgZCMmcNRBnAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4QTA3LzA5Q0NDMUM4NjIx
ODExRjE4QkZDN0I0MjZENDdBODg4LzJuN3RpZmhUb0ZDcWVQaG1nWkNNbWNOUkJu
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMm43dGlmaFRvRkNxZVBobWdaQ01tY05SQm5BLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4
QTA3LzA5Q0NDMUM4NjIxODExRjE4QkZDN0I0MjZENDdBODg4LzJuN3RpZmhUb0ZD
cWVQaG1nWkNNbWNOUkJuQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAfbOciQ7gC5w/ZiPr70DAJRhEQjA5euG/Fbel9sFrBj8XJh7MmTINnU3yG9QZT
3/QoFpDkqDvUz9Rvd5G3R+Y5aJN+S/9O+lY/HJYa7jqBoP/eDOKTEkidPuzpP2d4
TAvf4C8JZs2MtIjOp/WTlc7FYZ4NIFs5VxMpZabXc/mGQBDlalZx8+qYJFqjBbdg
hl83wyUm5Q3b/zKfGRvnGma/SFkDrSN7kYNKYuB7QvoAgjWby/DDab17HqVuizWC
sdqsoUwdiFpVQ2TpACFEfHihp5NbfgN2/RVhaVxASAnB0bCsgH9xnBBVg5An1Det
1usFN10S7klmkp+feek43jkT
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:36 2026 by rpki-client