
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json)
Hash identifier: tzRu+/WWmCFUQ6hF3pTd3sOW+MTal/AI+NVEGdVg6UI=
Subject key identifier: 74:FC:62:3F:D5:60:13:BD:3C:BF:77:D9:91:77:9C:EF:F1:7B:C3:20
Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Certificate serial: 0DC7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
Manifest number: 0D9F
Signing time: Fri 12 Jun 2026 17:54:54 +0000
Manifest this update: Fri 12 Jun 2026 17:54:54 +0000
Manifest next update: Fri 19 Jun 2026 17:54:54 +0000
Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: ahm8eBWoLeUhF5ErxLhTOoppgechFByMl1NgTH8WzlM=)
2: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: AsxJJe7AQfPpeTieWhSPJw58k738mrKqvlACAyMZyn0=)
3: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: ZqgPOrVGAVhmIWvwXmsHVZQruBjCO1WrYjc/KjSm8/Q=)
4: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: QT3QM4Ca91XVmmXNZAyaNX0ZIAsny+fn6mttdm0kFjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:54:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3527 (0xdc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Validity
Not Before: Jun 12 17:54:54 2026 GMT
Not After : Jun 19 17:54:54 2026 GMT
Subject: CN=6a2c47ee-1808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:97:e4:f3:29:08:a9:a0:ce:20:ce:82:a6:
a6:26:b5:99:81:5f:19:1d:b7:bd:dd:af:11:94:fe:
bb:6a:9e:75:46:93:09:2b:da:53:ba:37:8e:1b:41:
d6:f6:da:16:6f:36:5b:8c:85:ab:b2:4c:95:c5:f0:
df:14:6b:c6:7c:5a:bc:5b:26:1c:47:90:a0:4c:ab:
2a:98:f3:a5:25:71:8e:f5:83:50:c5:b4:cf:18:1e:
16:3a:5d:09:c9:85:5f:2c:e9:32:7a:8a:79:88:c8:
43:8f:45:20:5b:0a:9c:88:c0:41:04:dc:8f:37:67:
dd:84:4c:18:0d:60:88:c6:cb:f8:45:c0:d7:46:5d:
cd:6f:68:7e:03:71:da:dd:6d:83:ea:ba:57:9f:e4:
e0:5b:a3:aa:c0:aa:46:1d:22:0e:30:a6:0e:4d:c7:
99:07:cd:f3:f5:9a:34:71:41:42:3e:80:9f:e1:ed:
60:bb:9c:68:03:0f:45:7c:c8:73:cf:52:e7:a2:76:
2b:71:c5:87:df:d7:94:4c:3d:a2:cc:57:86:76:84:
3a:1d:4d:9c:89:02:be:67:6b:0e:a9:8f:2b:76:35:
18:e5:33:cc:62:23:b2:61:1f:9b:6b:c0:7a:b7:28:
e0:3c:03:eb:9e:98:a4:7a:6d:e2:48:16:d1:bd:1f:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FC:62:3F:D5:60:13:BD:3C:BF:77:D9:91:77:9C:EF:F1:7B:C3:20
X509v3 Authority Key Identifier:
keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:81:41:ca:1e:1f:36:2d:9f:ae:e6:af:bc:58:1d:66:6e:e5:
b9:87:70:e3:6d:f2:5a:96:b1:7b:52:85:e2:2f:03:f8:22:7c:
2e:cb:3c:3d:0a:ad:44:a9:e6:2d:0e:c1:70:3c:bd:1c:84:ea:
75:61:20:4f:7d:8a:b3:21:57:ad:6b:02:7a:09:63:4c:86:85:
e5:ac:84:16:a5:f0:aa:d2:b7:ac:ca:b1:ce:f6:fd:b1:19:7b:
67:9d:5d:0a:03:9c:7c:63:1c:5e:0d:1a:93:26:3f:d1:ba:fe:
11:5e:77:0f:82:b2:c0:27:2e:cd:f5:32:d9:b5:6d:c2:bf:37:
b6:6c:05:54:9a:9f:c5:4b:1a:d3:9e:f2:2e:34:83:88:33:17:
2e:70:a4:6f:f1:91:d8:46:c3:a2:43:0e:ef:c3:f8:91:8e:aa:
a1:de:3a:e6:49:f2:e6:32:16:8f:fe:1d:6e:f2:88:36:e5:67:
fd:c3:6a:c3:c7:26:a0:d4:7b:00:2d:af:25:d9:c7:43:ba:a9:
68:24:d7:e5:ac:52:64:c4:d2:6e:7a:25:5a:22:50:27:8c:b8:
fe:03:4e:1c:4a:62:29:63:a5:0f:e2:9d:59:8a:2c:b6:58:51:
bb:fe:10:a3:c1:ec:2f:25:f4:76:9a:61:04:b3:0a:ee:22:89:
1a:89:39:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF
NTQ0NUU5Q0MwHhcNMjYwNjEyMTc1NDU0WhcNMjYwNjE5MTc1NDU0WjAYMRYwFAYD
VQQDEw02YTJjNDdlZS0xODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdSX5PMpCKmgziDOgqamJrWZgV8ZHbe93a8RlP67ap51RpMJK9pTujeOG0HW
9toWbzZbjIWrskyVxfDfFGvGfFq8WyYcR5CgTKsqmPOlJXGO9YNQxbTPGB4WOl0J
yYVfLOkyeop5iMhDj0UgWwqciMBBBNyPN2fdhEwYDWCIxsv4RcDXRl3Nb2h+A3Ha
3W2D6rpXn+TgW6OqwKpGHSIOMKYOTceZB83z9Zo0cUFCPoCf4e1gu5xoAw9FfMhz
z1LnonYrccWH39eUTD2izFeGdoQ6HU2ciQK+Z2sOqY8rdjUY5TPMYiOyYR+ba8B6
tyjgPAPrnpikem3iSBbRvR9XJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHT8Yj/V
YBO9PL932ZF3nO/xe8MgMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5
RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR
dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaIFByh4fNi2fruavvFgdZm7luYdw423yWpaxe1KF4i8D+CJ8Lss8PQqtRKnm
LQ7BcDy9HITqdWEgT32KsyFXrWsCegljTIaF5ayEFqXwqtK3rMqxzvb9sRl7Z51d
CgOcfGMcXg0akyY/0br+EV53D4KywCcuzfUy2bVtwr83tmwFVJqfxUsa057yLjSD
iDMXLnCkb/GR2EbDokMO78P4kY6qod465kny5jIWj/4dbvKINuVn/cNqw8cmoNR7
AC2vJdnHQ7qpaCTX5axSZMTSbnolWiJQJ4y4/gNOHEpiKWOlD+KdWYostlhRu/4Q
o8HsLyX0dpphBLMK7iKJGok5WQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:30 2026 by rpki-client