
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
File: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft (raw, json)
Hash identifier: iQWF+dGVYdBYmzgCNohytC8lIMD77rn8xNLxf9omzxQ=
Subject key identifier: 28:F1:19:DF:CA:B2:A2:E6:35:51:3F:95:0F:96:96:F3:C3:B0:78:BD
Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B
Certificate issuer: /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
Certificate serial: 0452
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
Manifest number: 0442
Signing time: Mon 27 Jul 2026 01:17:54 +0000
Manifest this update: Mon 27 Jul 2026 01:17:53 +0000
Manifest next update: Mon 03 Aug 2026 01:17:53 +0000
Files and hashes: 1: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl (hash: btGNXxOrGC03ddJZ4Ecs0qwxDKls/d+pHF9AkkcBzJs=)
2: E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (hash: 8/zGP160nh2DZMDYJOe8sBKWHlHcrlutomFPHyVw0oU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl
rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106 (0x452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C7F, serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
Validity
Not Before: Jul 27 01:17:53 2026 GMT
Not After : Aug 3 01:17:53 2026 GMT
Subject: CN=6a66b1c2-557d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a3:02:a4:ae:f4:6f:7a:60:26:6f:51:bb:4a:
cf:40:b1:52:4b:93:b7:d2:91:f5:64:43:8c:25:b2:
88:ff:d0:fa:c0:f8:20:69:b9:f3:dd:c2:7e:f4:ad:
c7:bb:0b:ea:09:87:5b:b6:da:d9:9b:db:08:12:c3:
fb:f1:30:0a:84:b1:0c:94:8a:ad:f5:3a:05:b6:e1:
8f:06:c7:ea:3f:42:d8:6c:65:92:cc:ca:cb:66:c1:
a4:3c:26:a0:f8:9d:2b:9e:dc:0a:36:43:56:e3:68:
11:d2:d2:46:95:c5:04:c2:07:78:a3:f4:6d:24:7f:
27:d2:2f:b7:05:52:cf:43:07:e4:f4:5c:6e:7e:a8:
99:61:43:45:58:68:d9:8d:aa:90:c0:d7:0a:e1:b7:
3d:88:cf:83:9a:e4:56:a1:7c:a5:fc:b3:b5:6d:96:
f8:b1:08:a1:a3:c5:13:ad:a9:86:31:44:7c:21:34:
e3:ca:f4:36:b7:87:5f:43:cc:8a:86:a5:17:d9:52:
42:00:8b:18:80:37:51:c7:74:18:69:72:81:f7:85:
de:0d:df:3c:b4:e7:28:6e:d0:58:cb:b0:27:6c:1c:
fd:84:c7:0a:b4:fb:7a:ab:72:8b:21:ec:29:db:6b:
fa:da:d4:d5:2d:1f:8d:d9:a8:dc:ab:8c:d3:b9:8b:
33:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F1:19:DF:CA:B2:A2:E6:35:51:3F:95:0F:96:96:F3:C3:B0:78:BD
X509v3 Authority Key Identifier:
keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:27:6c:49:d6:d5:86:58:52:7e:fd:03:33:05:ec:cb:61:dd:
72:27:f9:83:62:e5:b6:58:e7:4a:dc:49:e1:5c:27:f0:68:f9:
29:c0:6a:a8:37:01:9e:33:fc:18:8f:7c:2d:0e:6f:a1:90:9c:
a3:35:06:7c:47:6b:1f:b2:dc:f5:ab:54:9e:34:03:2b:50:3c:
9f:10:26:84:1a:db:0c:24:e0:8f:35:14:0f:10:40:da:28:6a:
4e:d3:cc:bb:de:b7:a5:a8:35:7a:d2:7b:79:44:85:30:8f:02:
ff:a5:fb:48:9a:67:e4:ad:4f:1f:a9:23:b0:ce:8b:7d:53:9d:
8f:a5:97:7a:5c:77:ac:f9:de:6a:a8:b9:79:69:e3:3d:91:5c:
41:cc:d1:94:f1:af:b7:7b:08:2e:42:c5:be:79:fb:c1:bf:ff:
84:0e:30:7a:41:58:29:f3:5e:aa:7d:da:5a:a3:63:2a:55:79:
23:5d:e9:ab:da:0a:9a:6f:1c:3b:bc:ab:63:d6:b2:da:5e:b5:
27:00:ee:76:66:38:e0:2e:e3:e9:aa:9d:b7:f8:0e:e6:6c:d5:
33:6a:e8:85:6c:0b:83:c2:6a:84:4c:d7:78:ea:5d:a2:73:38:
47:be:e1:e0:27:79:98:26:38:45:2a:bf:c9:59:fa:3b:1d:f6:
12:6e:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:12 2026 by rpki-client