
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json)
Hash identifier: STPttg8FaRACNb/nW9VwmIdUxuJfgozz4b0eUCltO9Q=
Subject key identifier: A9:E8:56:F5:7B:41:21:86:CC:C4:7D:7E:3F:45:90:D0:25:6C:19:90
Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14
Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514
Certificate serial: 03FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
Manifest number: 03F3
Signing time: Sat 13 Jun 2026 00:30:08 +0000
Manifest this update: Sat 13 Jun 2026 00:30:08 +0000
Manifest next update: Sat 20 Jun 2026 00:30:08 +0000
Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: hEoIJgIgqHGa78DB0rAxml1DjXdpmWY2yRtzbCy5iZU=)
2: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: 6ChvL5bIW0nd/LEwk1GkYjUq9x3wU+NsnqxaoPxGr+c=)
3: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: SAmq2qut5svZXJTr/IN8K0rrvVU2RQUex9B9Y/hGwvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl
rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1023 (0x3ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514
Validity
Not Before: Jun 13 00:30:08 2026 GMT
Not After : Jun 20 00:30:08 2026 GMT
Subject: CN=6a2ca490-27c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:31:f6:8f:e0:11:7b:b8:24:fb:29:37:ee:
a5:99:82:6b:b5:72:a8:de:46:b9:91:8f:b8:7a:b8:
dd:f4:cc:77:2a:04:88:00:8b:47:29:55:dc:53:f1:
17:8b:ed:64:92:2b:d3:93:d9:08:35:0c:67:64:c1:
b4:9b:89:34:47:68:0f:f8:91:10:b5:1b:e0:5d:20:
de:b0:51:fd:cb:ff:a8:1f:68:e2:b0:06:ff:74:ef:
a1:b3:f5:7a:7d:1f:ba:d9:dc:b8:9b:93:5f:bb:fa:
5a:9c:4c:6a:98:ea:bd:69:fb:08:c4:ab:59:86:30:
70:ae:3c:4c:a5:bb:53:84:e3:3c:84:e2:07:13:b7:
0c:c3:a2:5c:de:7c:39:8f:ac:bd:e9:27:27:f4:8d:
7a:53:99:09:ef:c0:87:f7:56:ef:20:74:3e:ab:7a:
cc:5f:f9:90:52:b7:c1:c9:62:41:12:34:e5:d7:3e:
5c:e9:c4:58:7d:e9:52:ae:a1:98:2b:aa:6f:7c:33:
5a:ca:5e:8b:8a:b0:60:0d:ce:d6:dc:32:83:61:9c:
1e:40:55:78:84:7b:e5:aa:5a:67:94:59:2c:04:94:
15:42:88:5d:0c:03:ed:23:fd:fc:f4:c2:79:92:43:
aa:0c:6a:62:80:6d:7d:cf:e0:0f:36:d8:8b:34:b4:
be:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E8:56:F5:7B:41:21:86:CC:C4:7D:7E:3F:45:90:D0:25:6C:19:90
X509v3 Authority Key Identifier:
keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:64:c2:99:63:15:f4:18:99:7c:be:e8:48:09:8c:d3:12:88:
54:1c:06:52:a9:b4:ab:bd:49:a9:13:e2:95:0a:76:a7:89:bb:
0b:c9:71:a1:06:a5:94:b4:c1:30:67:28:c1:39:02:fc:29:3d:
b7:cd:f7:82:fb:67:cc:9e:ce:8a:65:45:c3:7d:58:3e:6f:4b:
71:72:46:20:a4:0c:df:1d:46:c7:8f:dd:dc:d4:dd:e8:50:98:
4d:ae:46:d2:8e:5d:8b:13:18:9f:b1:25:6f:3d:cc:df:cd:02:
03:4f:74:b6:16:a8:2f:32:20:1d:12:25:aa:e2:7c:1d:f6:f3:
32:17:e4:8c:19:9f:b6:ab:a1:83:68:b6:4e:3e:c9:2a:0b:4e:
dc:68:76:5a:56:c7:4a:70:35:e2:24:0d:a0:58:1c:54:fe:d4:
d7:68:2c:31:23:f0:73:ac:18:1c:99:49:5d:6f:dd:e0:8d:78:
ba:79:35:7d:76:08:ed:57:fc:84:cc:0d:5b:c7:7e:27:16:38:
8c:0b:83:37:83:bf:d0:f2:fa:2a:30:93:a3:24:2b:e4:aa:5d:
7d:6b:51:29:79:0f:62:ca:85:1f:a9:63:4e:1c:59:89:0c:be:
4d:35:9f:45:02:a7:c2:8a:e3:86:13:18:61:2c:1a:0a:a0:d1:
dc:39:d8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:21 2026 by rpki-client