
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier: j+/S8p7cupVZGcI32rUlzsJzGKHzlhbelrgFYWvE/zY=
Subject key identifier: EC:B7:54:D2:94:3B:EF:D9:C4:C7:6B:E0:35:3A:57:8C:8E:68:02:27
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial: 0316
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number: 02FD
Signing time: Mon 27 Jul 2026 02:24:35 +0000
Manifest this update: Mon 27 Jul 2026 02:24:35 +0000
Manifest next update: Mon 03 Aug 2026 02:24:35 +0000
Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: igu2HulDg8rIX8XXFdz/WSGgcDGUWM7L5VtqelDJNsc=)
2: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=)
3: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: N8hOIX9lBnkWNR17KITPRqZldmiFlqdcpwwzsFLdg0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Validity
Not Before: Jul 27 02:24:35 2026 GMT
Not After : Aug 3 02:24:35 2026 GMT
Subject: CN=6a66c163-3909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:ad:53:75:e9:6c:5a:e3:ce:3a:e7:39:ad:
8e:3c:e2:a5:6e:a3:87:8b:80:7a:2b:49:83:db:7c:
02:5b:82:40:97:81:7c:de:58:a1:b2:c0:a9:21:72:
3f:8f:11:dc:c9:64:ca:03:fb:16:20:f2:b2:a9:b6:
4e:3e:79:13:ff:9b:8f:bc:b5:06:2a:12:aa:bc:07:
cc:9c:b4:13:2e:b9:24:45:b6:04:dd:f9:72:21:28:
7e:c6:3d:64:ac:6c:e6:a0:6c:83:e4:da:d5:8f:4f:
1a:5c:94:84:48:37:47:96:88:37:0e:56:29:8d:d1:
70:39:11:bb:2e:8c:a0:6b:c4:18:9c:20:28:d1:d3:
09:47:18:07:b8:be:95:69:b6:98:48:09:d4:95:dd:
ef:0b:b4:96:7c:bf:18:e1:25:14:6b:09:90:bc:97:
c7:a3:d9:da:7c:e0:c6:32:8c:ea:3f:e7:7c:2f:d6:
d7:fb:ac:70:f5:7e:c5:5d:b9:4b:41:33:23:fb:3a:
8c:75:dc:7c:21:49:69:bf:e8:6c:94:70:79:44:09:
e8:e0:c8:53:f7:5d:9d:6a:8b:8c:e4:d5:88:98:e8:
c5:f0:15:93:85:ed:0e:67:cb:1c:73:b5:30:af:ff:
2e:8c:d3:7b:3a:07:8f:42:db:2d:20:cb:a6:ea:36:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B7:54:D2:94:3B:EF:D9:C4:C7:6B:E0:35:3A:57:8C:8E:68:02:27
X509v3 Authority Key Identifier:
keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8a:17:a6:b9:65:6e:d8:dd:65:f2:1b:b4:46:e1:ab:0b:aa:
12:62:cb:87:49:14:e7:00:5a:54:f1:c1:3f:2c:49:a1:7f:5f:
17:d4:49:1c:8c:75:f2:ba:96:69:50:64:6a:92:62:ca:a9:36:
72:48:03:56:73:c0:85:1a:82:18:7c:54:f3:af:ff:b2:a9:fa:
26:77:04:8a:b1:6e:cf:a9:a4:0a:fa:35:ff:38:d8:98:cb:5e:
05:a3:0a:8a:cf:a9:37:7d:dc:36:40:d7:f6:e7:e0:4d:a8:05:
ce:31:77:49:c3:04:8e:a4:a0:d9:57:99:1e:b6:48:cb:b1:31:
30:59:f6:d9:a9:91:08:f5:d1:53:62:58:64:a8:26:f8:be:16:
50:6f:ef:24:0c:7f:a5:6e:e2:d5:1d:b3:8c:3d:ca:e6:c7:f1:
b6:a4:38:01:c4:d6:6a:82:c5:26:e2:47:31:27:2f:ea:22:2b:
30:b7:a2:7a:00:e7:ca:74:a4:87:95:a7:86:38:3a:08:60:97:
18:7e:8a:c4:8e:d0:eb:ac:93:5e:fd:e5:f2:43:3d:8a:0a:4f:
5f:9a:bf:2e:fd:6c:d1:a3:00:23:15:1d:36:44:b6:d9:0b:a9:
9c:3b:76:2f:26:2b:af:d4:35:78:dd:70:93:bb:87:95:fe:da:
31:fd:ff:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:44 2026 by rpki-client