
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json)
Hash identifier: ToIY5TT/gxVrC1VPCqBe0/ZQnJemmwH3fv74d0skfvE=
Subject key identifier: 93:1E:47:6C:C8:47:D7:69:5A:90:A8:CD:59:4F:87:F0:F6:67:CA:58
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial: 02A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
Manifest number: 029B
Signing time: Sat 05 Sep 2026 01:28:57 +0000
Manifest this update: Sat 05 Sep 2026 01:28:56 +0000
Manifest next update: Sat 12 Sep 2026 01:28:56 +0000
Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: RqtEfZWwq9CFqHu9106PHiIYuikoKoo7OgtRhrOiCVA=)
2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 4E7B7eClCEG5d3gzWwa9hz6tdWf+XUY9sPo6EaTao1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674 (0x2a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Validity
Not Before: Sep 5 01:28:56 2026 GMT
Not After : Sep 12 01:28:56 2026 GMT
Subject: CN=6a9b7059-ba4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dc:a3:35:9c:a4:d3:6c:6f:e3:b3:9e:ed:bb:
03:e6:7b:83:67:67:7b:ac:f4:02:44:2d:32:3c:50:
9a:1d:c7:24:16:65:01:bd:97:92:e6:a8:c6:70:43:
ed:76:ce:d6:53:58:be:05:da:b8:72:de:88:e0:f3:
8a:14:ad:ce:a7:b0:6a:aa:8a:10:3d:4b:63:73:09:
ef:0c:d3:98:f3:24:34:b7:85:ac:4e:ae:03:82:c5:
9a:fe:68:b2:d3:c2:1d:4e:15:dd:ca:2d:7d:36:94:
97:20:f5:bf:9e:b1:86:46:9c:1b:24:8a:37:7d:9f:
e5:54:84:09:63:aa:9d:9f:4a:60:97:85:d4:03:3a:
06:bb:3e:a8:40:b9:31:c0:c2:4c:c7:04:66:4f:3a:
18:14:39:c1:27:ac:78:5a:88:16:93:0a:45:03:84:
43:2c:2d:9f:89:f3:f3:6c:ee:7c:1f:7e:b6:89:2a:
03:90:92:60:28:b2:77:de:71:ef:66:bf:bc:5d:43:
9b:17:3c:c7:bc:a5:40:33:c2:91:4d:18:3c:eb:8b:
95:7d:b7:27:da:a0:f9:27:5c:b8:7f:99:ec:fb:64:
11:5c:7e:e0:3b:95:72:97:48:f2:3d:fe:8f:06:21:
a7:3b:c7:07:f0:14:e6:76:c1:92:48:83:50:8a:ff:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1E:47:6C:C8:47:D7:69:5A:90:A8:CD:59:4F:87:F0:F6:67:CA:58
X509v3 Authority Key Identifier:
keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:bf:7a:6a:eb:ae:17:f3:f6:3a:8f:63:e7:2a:4b:03:bb:14:
80:e9:8f:18:44:a8:14:21:be:16:41:d1:eb:86:7d:86:b7:bf:
3e:a6:64:a7:17:c8:f8:c6:f5:fe:f0:89:bc:1d:35:d0:a2:96:
e2:bf:11:6a:53:7c:ba:ba:cf:b6:15:d4:33:f8:71:ca:da:4f:
73:c3:61:da:c1:52:ef:df:f8:c7:35:2e:de:85:a8:c0:3f:5e:
81:07:5f:39:d6:13:af:f4:d5:bf:36:53:69:0c:ea:04:3f:77:
6e:2d:ae:b2:eb:a2:33:7e:b8:b1:e9:d1:33:79:c9:90:26:47:
60:ba:cb:f0:69:76:84:36:5a:1a:d0:79:82:59:7a:87:66:7c:
9b:52:56:c9:b4:5e:9a:f9:50:95:b0:63:65:ab:7e:5c:7f:76:
3a:2e:ff:84:ca:44:6c:34:43:07:f5:b5:be:e2:55:b9:63:a6:
06:5f:a2:df:2c:92:b8:b4:5d:29:37:e7:5f:4d:f8:99:cd:a1:
31:d9:43:50:ae:52:8b:76:3d:b2:75:39:7f:ea:35:97:42:33:
f8:6e:cd:f8:59:06:6f:5a:96:a3:6f:57:ca:d3:62:e7:c3:2b:
5b:71:6b:57:e4:69:b9:1f:17:87:2e:2c:76:f2:9c:fc:02:0e:
82:0d:bd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:35:30 2026 by rpki-client