
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier: j3f2FYWu7PyJBrfSfTmo/Ln3EObtM803M7NHyhwjf+c=
Subject key identifier: 2A:02:80:38:B2:2F:86:54:9B:E2:5D:A5:61:C8:49:E8:46:44:8B:73
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial: 0300
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number: 02E7
Signing time: Sat 13 Jun 2026 01:20:41 +0000
Manifest this update: Sat 13 Jun 2026 01:20:41 +0000
Manifest next update: Sat 20 Jun 2026 01:20:41 +0000
Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: J+u7ZcEaW7GCi4dCRuzbh7yKhoa/aZ3DVJb4d5w8j+g=)
2: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=)
3: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: N8hOIX9lBnkWNR17KITPRqZldmiFlqdcpwwzsFLdg0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768 (0x300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Validity
Not Before: Jun 13 01:20:41 2026 GMT
Not After : Jun 20 01:20:41 2026 GMT
Subject: CN=6a2cb069-a921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:be:07:ce:f4:4f:95:ed:78:3e:ae:84:fb:
47:28:ba:91:13:16:09:18:40:3e:36:cf:33:d3:5f:
2a:42:68:03:d0:1a:c9:ec:a0:d8:87:ac:74:7f:d3:
e5:10:76:9c:06:a6:6f:67:97:0b:c4:3b:b2:61:88:
f5:7c:f1:5d:c2:ae:81:8b:59:ed:7d:e1:f9:ca:3c:
a1:eb:42:d9:b9:74:48:04:08:1f:79:f2:51:58:c3:
41:6b:e7:e3:58:d9:ad:66:b8:7d:68:73:f1:15:13:
de:64:44:ef:b7:91:ab:ff:3a:38:50:2d:82:54:1c:
15:d6:3e:f9:d5:9e:a6:4b:5b:7a:93:2d:d2:d7:5a:
f0:81:c3:cb:fd:8a:7e:bc:e5:90:3b:18:4b:f6:5c:
41:ac:3f:5a:8c:e5:1b:d8:16:38:df:7e:cd:54:eb:
f5:dd:f0:aa:1e:85:b8:da:41:55:eb:1c:4f:7b:fc:
02:54:e7:71:75:2f:e1:0e:6d:59:7b:15:7a:3f:01:
c3:45:c9:87:72:5c:b8:0f:d0:c1:91:f8:ba:ee:70:
c2:f9:cb:6e:30:85:53:a2:c1:6e:0a:54:bd:de:f0:
ce:fa:f3:37:6a:ce:4b:ba:9c:bc:10:56:65:63:d7:
55:b4:6f:0c:1b:64:7f:08:d0:96:e5:d3:34:e2:d2:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:02:80:38:B2:2F:86:54:9B:E2:5D:A5:61:C8:49:E8:46:44:8B:73
X509v3 Authority Key Identifier:
keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:35:eb:b2:1e:5e:55:45:01:5f:6d:b5:f7:fc:48:d9:a7:d9:
c1:a4:51:fa:35:4c:44:d2:6b:3f:f5:42:a4:c6:3e:6b:04:6f:
3f:05:ba:d6:66:35:cd:a9:0d:d4:66:1c:04:04:af:1d:b1:c6:
d3:2a:5b:76:87:c9:4b:cd:8f:92:4b:61:d6:a3:90:66:38:b2:
44:11:29:3d:e7:1d:ec:9f:c8:5f:3b:0b:eb:27:c3:0b:06:27:
8f:b5:7a:dd:0a:f2:66:79:0a:89:ea:9e:d8:d7:e4:26:a2:6c:
9f:d3:4e:b5:3a:ff:c7:b2:66:28:8b:4f:39:5d:82:5a:de:85:
54:88:51:f8:62:31:e1:93:50:41:42:7a:3c:ad:2d:e0:19:26:
db:cf:bd:60:61:4e:4a:9d:7c:92:ca:dd:8b:d6:79:2d:ee:ff:
7b:99:0d:49:da:58:c1:a6:ad:9e:d4:a5:6c:d5:96:84:df:cc:
34:bd:89:5b:d4:04:ee:fd:5b:aa:01:a8:6e:58:c5:c5:f9:52:
5f:dd:5f:bb:da:5c:74:07:55:89:00:18:47:eb:26:a4:d4:88:
ec:e9:68:64:4a:dc:52:56:0e:f7:00:98:dc:27:f4:f4:67:4d:
62:3d:c7:c0:96:cd:96:44:f9:94:44:ec:38:17:66:8b:33:df:
a6:a7:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:15:10 2026 by rpki-client