
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json)
Hash identifier: Ed92/wJag/+VXHiURbIMDhGgJ/Gf8vqWeCfsiw/8JgA=
Subject key identifier: 42:77:28:7E:9F:0C:1D:0A:67:42:B6:0A:DF:D7:DF:BD:9A:F7:96:FC
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial: 054D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
Manifest number: 0541
Signing time: Sun 18 Oct 2026 23:37:43 +0000
Manifest this update: Sun 18 Oct 2026 23:37:43 +0000
Manifest next update: Sun 25 Oct 2026 23:37:43 +0000
Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: 8tlhHdrklp/CCYSH4URv20EixVNtAUej9gbtB2YzpIQ=)
2: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: bPO66cPU1SPGOc5KH5eGrolnSN1m6sptmbmqTiJIuEU=)
3: E03427482D2411F192A7D59AB8833773.roa (hash: jK7mks1MMjJvVIyRYKwMkRBkaa32MR5Py6W7RYY9KqA=)
4: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: CP9FAdKBke/NciieBtLRTUYPVa+mGRMYkC3JaQUvBRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 23:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357 (0x54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Validity
Not Before: Oct 18 23:37:43 2026 GMT
Not After : Oct 25 23:37:43 2026 GMT
Subject: CN=6ad55847-1545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:26:d2:3e:02:be:f8:dd:26:98:aa:ec:10:
e6:b1:1f:f3:87:2d:d8:ef:41:a7:d1:2e:32:13:80:
f4:3c:b9:51:68:9c:2b:e6:43:06:30:11:61:06:8d:
27:21:45:2c:c0:23:14:b0:4d:f8:ca:74:7d:43:6a:
cd:fd:e4:88:ae:cc:c5:f4:76:c3:e9:bd:f0:ac:8d:
54:68:88:33:94:b5:8d:85:35:1a:cf:27:b0:07:60:
77:d5:de:20:5e:79:cd:37:5a:5a:11:c2:e7:77:1d:
1f:6a:d1:a2:06:ae:30:7c:5d:68:09:2c:16:bd:26:
55:cf:28:ba:a5:3e:b0:36:80:97:9a:05:e0:87:bb:
03:5e:77:8c:be:7c:1c:2c:28:89:60:66:64:5a:71:
e6:ef:0a:a1:fd:24:d9:f5:38:8a:01:35:f2:90:6b:
db:a1:e8:34:a5:4c:cd:3f:3a:3e:3b:8c:ca:a2:5b:
bd:b3:18:7f:33:a4:1c:a5:49:1a:1c:c3:ae:85:21:
c4:09:f6:8e:38:a1:e2:f0:1b:86:9e:a7:e8:cf:4f:
97:e4:87:45:e2:9f:96:c4:8f:e6:7b:21:35:d4:a5:
2c:b4:e7:5e:e7:ca:8a:29:c4:2a:af:2c:69:15:5d:
e3:5e:7c:cb:6e:9b:e1:43:41:da:85:1a:b5:d7:81:
60:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:77:28:7E:9F:0C:1D:0A:67:42:B6:0A:DF:D7:DF:BD:9A:F7:96:FC
X509v3 Authority Key Identifier:
keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d5:7c:69:cb:76:04:7d:82:85:71:29:9d:a2:ee:46:2c:68:
a1:be:e9:67:c6:25:9e:2a:53:97:a8:ef:18:ec:1c:8b:8a:52:
4f:ac:81:d9:5c:6b:49:77:72:55:19:34:3f:39:d6:df:f4:92:
c9:79:a6:1c:32:20:c5:d3:16:ba:39:52:61:2b:5c:21:de:91:
c9:50:96:3f:c6:9d:75:54:b0:b3:9c:13:77:c3:10:cd:41:de:
78:0b:15:97:d1:8d:23:a8:07:e4:4a:e7:f8:4c:50:78:b6:21:
da:0a:b3:5b:e8:da:c2:42:2f:bc:93:b2:90:58:b4:6b:ab:ff:
f9:59:ab:f5:fc:fd:8f:18:82:0a:d4:f6:19:f9:3d:65:f5:fc:
df:bb:b2:f6:1a:0d:33:c4:b8:aa:4e:6c:e5:05:28:cb:e0:97:
dd:6d:69:3a:7f:2a:97:74:4c:db:4c:30:7f:cd:cd:4e:cb:11:
6d:f0:01:23:2e:59:60:ec:9c:bc:08:81:54:c5:d2:48:98:c2:
f4:81:5c:8a:f6:9c:ec:0e:26:f3:e1:fc:a0:20:23:ac:49:bc:
0e:9a:7c:ce:41:57:65:3c:b2:d6:5e:ac:c5:f6:94:6c:20:41:
ba:d1:b4:e3:a5:72:05:fd:a3:f5:e1:51:4b:6d:1f:c3:70:03:
d9:62:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:18:59 2026 by rpki-client