
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json)
Hash identifier: aJNH81YtxVemjoCXZ3xyioXS4c6r+y7trcv4V3OTAIs=
Subject key identifier: B1:10:66:D2:28:24:2B:DA:15:F3:98:54:21:18:81:F8:1C:52:09:50
Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Certificate serial: 2381
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
Manifest number: 2370
Signing time: Tue 28 Jul 2026 15:17:22 +0000
Manifest this update: Tue 28 Jul 2026 15:17:21 +0000
Manifest next update: Tue 04 Aug 2026 15:17:21 +0000
Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: BpSwIO+Tao53CLEOCaj8vOHLlEL1YfA+Jp+XyUd3qvY=)
2: FD36E81421D811F1A613849C243D8C67.roa (hash: wEpkpQJNhYALl+BEDaeh7e7GWX8HeJXcrUpZYzNYAIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9089 (0x2381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Validity
Not Before: Jul 28 15:17:21 2026 GMT
Not After : Aug 4 15:17:21 2026 GMT
Subject: CN=6a68c802-3194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:ea:79:ea:59:a8:04:d0:ea:29:e5:e9:e9:
fb:27:00:8c:fb:29:fe:58:c4:ec:06:9c:71:79:79:
97:57:8d:e1:9a:d3:64:45:15:7c:ac:bf:7a:cb:48:
60:33:ce:57:14:25:d7:f3:ab:2a:e8:6c:ae:e8:b5:
f5:f7:34:85:19:f1:96:d5:f8:09:40:d1:16:f8:35:
6d:f1:fb:18:b3:ee:3b:84:ef:e0:69:ef:7c:c9:4d:
72:c1:33:66:c6:c1:35:8f:27:fb:c2:d7:84:d4:81:
2f:3a:f7:ba:e4:e1:e5:d2:c2:c3:54:ec:cd:9b:f1:
a4:c9:c0:20:2f:3a:bf:6a:dc:cc:99:88:68:03:b5:
cb:bc:93:47:2f:55:94:ed:40:53:17:f0:c9:e5:55:
13:f8:15:b2:48:25:63:04:68:e0:bf:1a:48:a0:f0:
d1:89:9f:d8:f4:ae:9d:9c:3c:20:cd:e9:80:1e:77:
1f:d0:e8:0e:e0:24:dc:fb:5a:9b:e0:0a:6e:8b:f7:
3e:9e:64:6a:aa:d8:c7:90:64:b8:20:4a:f9:64:ee:
9b:16:6c:f9:30:7a:eb:01:a8:c3:0a:7b:20:df:75:
84:7d:24:e4:e8:32:6f:70:4b:7f:37:43:2e:c6:9e:
cf:42:ab:ce:34:db:8d:c4:68:c9:56:35:a7:6a:8a:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:66:D2:28:24:2B:DA:15:F3:98:54:21:18:81:F8:1C:52:09:50
X509v3 Authority Key Identifier:
keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:fe:92:47:6a:51:86:20:bf:b1:b9:12:16:80:1f:3d:ee:97:
76:86:5f:31:1c:1e:d5:35:fe:5f:bf:a7:d1:6c:28:78:9e:02:
85:20:d2:ca:e2:c5:1d:9a:4e:8a:d9:c6:6e:ec:ab:60:06:ea:
4a:3e:af:cd:34:27:6a:d8:d4:94:d1:1e:aa:f4:23:25:e4:8b:
8d:50:40:0a:b0:6d:e0:c5:c8:45:6d:0e:30:a9:45:2c:e2:5c:
05:e4:6b:01:df:6c:88:e6:5c:cb:a7:78:09:df:39:68:c1:3f:
f1:9f:0c:d6:69:e1:9f:8e:63:9f:c5:88:96:a8:94:fb:1a:68:
51:f8:b7:aa:e7:f9:fa:3a:2a:e1:15:75:66:12:f3:c1:d6:04:
19:63:e4:c5:7b:11:b0:74:92:f9:c6:2c:2e:58:c3:88:dc:33:
45:de:d5:b5:0e:65:85:a1:b1:b2:d9:20:35:91:57:f3:df:cc:
db:3c:e0:2e:ef:86:9b:70:f6:5e:96:36:45:08:ee:6d:48:c0:
57:fb:7b:e1:d7:a2:e7:6e:d3:f6:2e:64:89:a8:84:64:f6:f1:
02:4a:09:aa:f6:74:de:cc:c1:78:4a:40:75:98:47:fb:97:2e:
ff:1c:51:43:18:e0:2d:3d:2a:89:60:9b:9c:73:e7:89:83:56:
32:a6:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:30:18 2026 by rpki-client