
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json)
Hash identifier: ImGwyH95mDUweZ7kHO5KkJxVHy3axGGu8DCtq68N0rY=
Subject key identifier: EA:C4:CD:C3:79:0D:BB:9B:77:E4:80:51:AB:4E:47:19:93:15:DD:8A
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
Manifest number: DF
Signing time: Tue 21 Jul 2026 08:14:35 +0000
Manifest this update: Tue 21 Jul 2026 08:14:35 +0000
Manifest next update: Tue 28 Jul 2026 08:14:35 +0000
Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: czhfaRIbXVkqognCptDvyqqAT8XfLVvwbMqig+4gHiQ=)
2: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=)
3: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Validity
Not Before: Jul 21 08:14:35 2026 GMT
Not After : Jul 28 08:14:35 2026 GMT
Subject: CN=6a5f2a6b-ef64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:29:a4:48:00:9c:29:d6:9e:45:15:59:f1:
af:d6:2c:26:18:35:e9:5c:af:65:f0:fe:45:a5:db:
2c:e6:33:02:ee:42:75:09:31:a0:7b:e1:10:d3:28:
b4:ec:d4:11:f1:00:a1:f6:17:fc:1d:2a:a0:a8:d0:
1d:d1:40:5b:a8:64:8e:94:ac:15:d0:c0:b4:c4:5a:
06:eb:d8:12:32:92:12:1b:dd:6e:3f:79:95:34:1d:
79:6e:1d:67:b4:7d:ac:19:db:1e:75:76:b3:76:d5:
c6:30:c9:0e:d5:9f:f4:c2:6d:4c:35:9d:85:a1:b1:
f9:31:5e:13:43:11:69:5c:9f:37:32:ca:b5:33:05:
a4:f7:cf:03:4a:41:a5:c3:23:3f:ae:08:fb:68:c5:
8e:84:ca:a3:58:87:b7:22:e7:e6:c9:ff:f4:1b:50:
f6:ee:6b:ff:44:0a:0e:72:e0:2c:9e:99:90:72:22:
e1:a4:d5:80:b5:f5:b1:84:9d:57:73:51:b2:62:6d:
82:0a:af:42:bf:9e:ce:bd:3f:17:9c:f2:dd:13:00:
4c:f9:fd:a4:55:d2:e3:fa:db:2c:a0:6c:6e:4d:4b:
83:e2:82:ea:1d:cc:d3:70:6b:e2:29:b7:69:86:d7:
a6:5e:56:5d:f7:fe:ca:ea:d9:27:ab:d1:cf:95:8e:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C4:CD:C3:79:0D:BB:9B:77:E4:80:51:AB:4E:47:19:93:15:DD:8A
X509v3 Authority Key Identifier:
keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3e:3a:66:5b:6f:7e:ef:e1:81:7f:21:a1:33:f3:f3:ac:ff:
87:64:23:a7:38:d1:fc:1f:7d:a5:9d:08:54:16:13:8f:65:79:
29:d1:4b:42:08:82:a7:df:cc:94:cf:98:02:95:6b:08:69:d3:
56:20:1a:a9:32:dd:db:7b:cc:0b:d6:4f:13:83:6c:e9:c9:63:
7f:95:c5:db:e4:de:95:5b:6a:ba:b5:9d:95:47:47:bd:cf:73:
30:d6:1d:af:fd:14:37:e5:01:34:73:3e:c8:c8:aa:4d:12:da:
a1:29:f6:53:84:d1:5d:6e:7d:91:ed:b4:8b:8e:f2:2b:df:7c:
27:f8:20:eb:1d:d1:ed:06:b2:ef:62:ed:fd:41:d5:e4:dd:ec:
fa:f2:52:13:5f:f2:ad:4c:5c:43:f8:2d:d8:ee:40:d0:b8:7d:
2c:b6:68:17:e5:aa:e9:5d:78:30:83:e6:3a:79:bd:d9:f6:df:
2e:0b:6e:ce:ef:68:15:bc:9b:85:cc:5e:8b:99:97:ee:06:59:
13:a5:81:fb:12:58:54:af:f7:1e:f9:4c:e1:99:9d:98:4b:d3:
85:a6:e9:6a:84:c9:e2:79:c9:00:be:31:91:78:9c:2e:58:27:
ab:76:7b:a0:3f:d4:11:39:ed:2a:cc:b3:e9:17:f4:ed:7b:60:
75:51:06:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:51:33 2026 by rpki-client