
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft
File: 2nWrD7Oqh1r631o4-FK9zB3YJvc.mft (raw, json)
Hash identifier: I4oQh5we7LzmGQpyuVLOh+jGhg9NosDKrUMvPycZYQQ=
Subject key identifier: 46:68:CF:44:FC:02:AA:58:3B:E6:A0:98:8E:53:D9:DD:B6:99:8F:44
Authority key identifier: DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7
Certificate issuer: /CN=A91FEFBB/serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft
Manifest number: 024C
Signing time: Sat 13 Jun 2026 02:24:41 +0000
Manifest this update: Sat 13 Jun 2026 02:24:41 +0000
Manifest next update: Sat 20 Jun 2026 02:24:41 +0000
Files and hashes: 1: 2nWrD7Oqh1r631o4-FK9zB3YJvc.crl (hash: l6cp9Ymhw43tYRlXkwvgxykllz+QVIegZS+GwpTA5ug=)
2: 261D3B8AEE4611ED9BEFED31C4F9AE02.roa (hash: 2kSM4B/k8NdFJAL4ebPd/o/E0Fw58aj47tXGXUAxnss=)
3: 881C3F9CABD311EFBFED7130C4F9AE02.roa (hash: JS1ZBhltkdXyrySkpU8SpuqRR1QN77GhpUZ60d1ygSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl
rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEFBB, serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7
Validity
Not Before: Jun 13 02:24:41 2026 GMT
Not After : Jun 20 02:24:41 2026 GMT
Subject: CN=6a2cbf69-9f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:dd:8b:73:71:68:39:48:c9:04:b0:a5:61:
ab:50:2c:a3:49:99:91:b9:7a:33:6f:7c:36:4e:ce:
5f:41:a8:70:c8:ca:1b:6a:0d:e4:a8:20:58:5e:a8:
6f:f5:c8:9d:5f:c0:6f:cd:58:00:e2:5c:43:31:08:
a4:ed:f2:66:da:e0:c2:97:c2:72:58:0d:6f:a6:4b:
eb:a3:25:e3:c8:7d:b8:80:71:20:66:0f:9e:65:17:
b9:56:74:4b:39:af:f4:83:d9:a2:a0:d6:c2:36:4a:
d4:c6:10:fe:40:f2:cf:7c:2f:83:f7:f2:e8:eb:50:
f6:dd:b5:4e:69:40:2f:70:f0:bf:6c:c5:08:43:1f:
c3:3b:91:74:4e:4a:5f:c0:87:c6:02:93:82:dc:0e:
9f:38:b6:0d:61:13:a5:00:db:1c:93:6d:a9:5b:f7:
c9:a3:a2:1d:a4:94:22:05:b7:fb:45:01:2d:0e:70:
97:02:42:7c:36:c6:c8:f9:63:7c:d7:02:39:e0:81:
03:cb:64:5a:4a:41:98:72:db:b7:73:a0:cd:49:77:
df:9b:d4:17:35:53:08:51:96:c8:9c:12:8c:f0:ad:
29:87:db:fb:08:ac:72:9f:14:3f:7f:fd:cf:86:b5:
ec:99:82:59:f2:cb:40:5f:b4:5b:6c:05:ee:ed:32:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:CF:44:FC:02:AA:58:3B:E6:A0:98:8E:53:D9:DD:B6:99:8F:44
X509v3 Authority Key Identifier:
keyid:DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:94:2d:ed:b1:7b:6b:82:eb:25:de:1f:35:0b:11:30:ce:f4:
7b:9b:f4:a1:eb:34:f3:7f:75:43:6c:27:20:ee:34:41:1f:f0:
78:18:f3:4d:34:af:69:54:71:5e:32:81:98:3a:70:74:ca:a9:
bd:d4:dd:4f:f4:63:ec:3b:cf:9e:16:e8:bf:ba:64:b8:87:58:
0a:04:9d:94:d6:1e:f5:fa:3f:dc:07:46:3f:38:d2:01:34:2d:
b2:79:67:bc:99:eb:0a:5b:e5:95:98:3d:68:e1:bf:88:a9:30:
a9:f1:77:37:66:dc:01:64:ca:31:b9:8b:f3:7a:0d:06:40:bc:
1f:a7:87:70:5b:ee:35:cd:eb:0d:12:93:2e:10:4a:c3:48:1d:
17:72:5c:e8:66:a5:fa:56:50:a9:e7:8d:7e:c6:0e:f5:23:99:
b3:cf:0a:a2:a7:87:1b:2e:b5:ab:ae:52:5f:77:fe:82:33:1b:
9a:92:a3:b2:19:3b:72:f5:96:e8:2e:64:17:ee:5f:78:7a:bc:
b4:c8:9d:eb:1e:eb:9d:fe:ec:a5:2e:2a:9e:73:1a:ea:e1:38:
e5:bd:70:b9:2c:23:69:a2:ff:ce:ef:f7:7f:0c:e1:09:a9:ab:
01:aa:62:4e:51:8e:9f:f1:cc:ac:84:61:ed:b8:8f:3e:07:de:
23:d3:50:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVGQkIxMTAvBgNVBAUTKERBNzVBQjBGQjNBQTg3NUFGQURGNUEzOEY4NTJCREND
MUREODI2RjcwHhcNMjYwNjEzMDIyNDQxWhcNMjYwNjIwMDIyNDQxWjAYMRYwFAYD
VQQDEw02YTJjYmY2OS05ZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqhXdi3NxaDlIyQSwpWGrUCyjSZmRuXozb3w2Ts5fQahwyMobag3kqCBYXqhv
9cidX8BvzVgA4lxDMQik7fJm2uDCl8JyWA1vpkvroyXjyH24gHEgZg+eZRe5VnRL
Oa/0g9mioNbCNkrUxhD+QPLPfC+D9/Lo61D23bVOaUAvcPC/bMUIQx/DO5F0Tkpf
wIfGApOC3A6fOLYNYROlANsck22pW/fJo6IdpJQiBbf7RQEtDnCXAkJ8NsbI+WN8
1wI54IEDy2RaSkGYctu3c6DNSXffm9QXNVMIUZbInBKM8K0ph9v7CKxynxQ/f/3P
hrXsmYJZ8stAX7RbbAXu7TLF9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZoz0T8
AqpYO+agmI5T2d22mY9EMB8GA1UdIwQYMBaAFNp1qw+zqoda+t9aOPhSvcwd2Cb3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUZCQi9EODk2QjVDOEVB
NkExMUVEQjVCNkI1NUVDNEY5QUUwMi8ybldyRDdPcWgxcjYzMW80LUZLOXpCM1lK
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJuV3JEN09xaDFyNjMxbzQtRks5ekIzWUp2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUZCQi9EODk2QjVDOEVBNkExMUVEQjVCNkI1NUVDNEY5QUUwMi8ybldyRDdPcWgx
cjYzMW80LUZLOXpCM1lKdmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf5Qt7bF7a4LrJd4fNQsRMM70e5v0oes08391Q2wnIO40QR/weBjzTTSvaVRx
XjKBmDpwdMqpvdTdT/Rj7DvPnhbov7pkuIdYCgSdlNYe9fo/3AdGPzjSATQtsnln
vJnrClvllZg9aOG/iKkwqfF3N2bcAWTKMbmL83oNBkC8H6eHcFvuNc3rDRKTLhBK
w0gdF3Jc6Gal+lZQqeeNfsYO9SOZs88KoqeHGy61q65SX3f+gjMbmpKjshk7cvWW
6C5kF+5feHq8tMid6x7rnf7spS4qnnMa6uE45b1wuSwjaaL/zu/3fwzhCamrAapi
TlGOn/HMrIRh7biPPgfeI9NQJw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:31 2026 by rpki-client