
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json)
Hash identifier: X+nDh8uogSnwS7gWpudmGT52vvfyp4B+b/DJ0Q0Xvug=
Subject key identifier: 5E:EE:4F:C6:B7:A1:88:0C:0F:04:3F:E6:71:BF:62:B0:6D:6A:B0:0C
Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17
Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
Certificate serial: 029A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
Manifest number: 0282
Signing time: Mon 27 Jul 2026 03:44:34 +0000
Manifest this update: Mon 27 Jul 2026 03:44:33 +0000
Manifest next update: Mon 03 Aug 2026 03:44:33 +0000
Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: gHjXbo3N25vsaMyn1iQK6eMuKNEWeXr0tUe9MRehF/I=)
2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: TG2ohJNYEaDsDYNDfYYhx+nUq/BWPbtnOzSvkzV8QmA=)
3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: 8KKDSMBlMVX3WIkFvdZMkpRJGKyqonScIIf8lT6mmuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl
rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
Validity
Not Before: Jul 27 03:44:33 2026 GMT
Not After : Aug 3 03:44:33 2026 GMT
Subject: CN=6a66d421-311b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:f0:85:b7:34:e1:3f:ba:1d:4d:30:b9:fa:
ab:ec:60:08:25:c2:65:55:13:7a:52:be:71:96:52:
a6:d2:ff:74:81:f8:09:36:ad:08:a7:96:27:9a:d9:
cd:a2:12:43:1d:35:96:e1:5e:f1:ad:e3:34:79:f7:
7b:b5:2c:6e:f5:8b:4d:02:1a:ba:d9:92:d8:df:23:
7c:d8:8f:aa:81:9a:ec:c7:3d:d7:c9:62:da:f3:32:
b4:24:9b:f5:a5:8f:da:4b:0a:c7:6b:6d:50:6d:2a:
e2:b6:9c:e4:14:f3:56:0b:60:6d:85:a4:04:d2:b5:
4f:d2:e0:66:7e:8a:dc:b6:7c:29:3b:55:d7:e3:c0:
b0:c8:94:29:71:7b:df:b4:7f:92:50:3a:07:ef:14:
43:d6:0f:74:ba:32:f7:18:40:aa:17:f8:20:6a:98:
96:32:33:df:43:f3:71:14:39:2c:1a:5f:ff:6f:89:
4d:57:92:ac:36:6f:94:e2:a9:f8:04:68:ab:18:d1:
54:68:e2:e7:f9:c6:11:7e:fb:6c:4a:df:e5:7b:2b:
bf:22:8a:2a:b3:30:11:f6:61:fe:6d:ab:c6:c4:28:
78:ab:4d:ee:e5:1d:b6:b2:4a:80:cc:cc:f5:46:29:
cc:b0:7c:00:ed:94:13:d6:3f:41:01:1c:38:7b:fb:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EE:4F:C6:B7:A1:88:0C:0F:04:3F:E6:71:BF:62:B0:6D:6A:B0:0C
X509v3 Authority Key Identifier:
keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:75:3d:4e:b7:85:b6:06:a6:a3:13:ac:ae:fe:ff:1a:6e:04:
e0:5c:7f:e4:3f:d8:17:e5:6b:df:92:11:fa:b1:92:66:1d:a4:
f8:8e:7f:a7:1d:a4:da:8d:81:91:87:0c:b6:2d:a3:3e:18:69:
49:53:c2:6a:23:6b:b4:c4:2d:cf:6c:5d:2a:20:c4:e5:ae:47:
90:16:7a:c4:fc:bf:72:18:b7:40:a0:79:e6:be:07:eb:24:19:
ad:81:fd:de:dc:1e:5f:a1:e5:76:38:aa:cf:34:46:ea:b8:f7:
0e:10:c8:1e:50:ae:02:bc:6b:f4:f6:14:8d:97:ca:72:a8:f5:
17:b2:36:80:b6:cf:34:c9:78:8f:d0:9d:ba:59:58:55:4c:90:
76:13:a5:d5:ad:e1:66:f1:1a:6b:4e:5b:b2:17:05:5e:91:9c:
e3:e9:41:47:d4:f3:47:13:88:31:a8:26:20:33:19:a6:f2:2f:
7e:71:5f:8b:fd:f4:f3:86:6e:3e:55:22:f7:4b:c4:ee:14:72:
05:ba:cf:76:14:fa:36:7c:76:cd:25:5c:a8:77:81:70:8b:22:
22:01:48:e5:3a:92:10:9c:13:ff:af:90:7b:4d:ac:fd:f7:55:
5d:83:0f:8e:91:ca:f6:a5:7b:ef:6c:d7:34:9d:e0:a0:e5:f4:
3d:89:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:00 2026 by rpki-client