
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier: evWZsS4tqavU6EzR2kAaULCMf1qXehelpc9G2SwWlEQ=
Subject key identifier: C3:AF:B9:DB:43:F6:0D:B2:3A:BF:1E:97:C7:29:7C:08:AB:58:08:F3
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial: 0313
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number: 02FA
Signing time: Tue 21 Jul 2026 02:13:14 +0000
Manifest this update: Tue 21 Jul 2026 02:13:14 +0000
Manifest next update: Tue 28 Jul 2026 02:13:14 +0000
Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: wqXoLs90T3gJ5f0N1gRHakoEUio4zMH5PCheQ97dI6c=)
2: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=)
3: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: N8hOIX9lBnkWNR17KITPRqZldmiFlqdcpwwzsFLdg0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 787 (0x313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Validity
Not Before: Jul 21 02:13:14 2026 GMT
Not After : Jul 28 02:13:14 2026 GMT
Subject: CN=6a5ed5ba-36e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:a8:33:51:10:30:d9:8b:86:93:85:a2:28:
7b:9b:91:a6:2c:28:46:41:0a:5e:6d:7d:a5:c8:00:
6d:7d:d9:44:3c:46:a7:05:d3:6d:aa:77:fb:68:b8:
a4:e9:90:a8:b9:76:d1:0f:ad:bd:65:97:0f:1c:72:
f4:1a:2f:b0:b1:90:85:0b:f1:29:da:16:22:c8:a4:
c2:98:c2:95:c5:af:64:13:23:9d:d4:d9:75:4e:39:
d2:60:12:dd:f0:f4:25:94:eb:33:b4:a6:1d:63:6d:
e5:1b:f0:84:48:73:b0:d0:27:a0:c2:72:95:b8:88:
e7:eb:25:96:6a:af:19:3e:20:f4:65:1e:a0:ad:b3:
09:5e:95:0b:3a:08:36:e9:b4:a7:d8:3c:c7:7a:09:
ad:53:6a:bd:a0:28:f5:32:82:a5:4c:26:98:be:7e:
e3:d0:b2:b3:36:2c:df:11:bf:8e:04:65:89:65:52:
5b:a5:1f:eb:f7:8e:d1:78:85:41:11:3d:66:31:c8:
1f:02:76:58:fa:e9:21:9c:9a:3a:56:d9:e3:43:6a:
e3:62:0e:f9:32:c4:ae:4f:37:cc:55:5a:aa:01:6f:
6e:82:3f:42:92:ce:e8:65:87:58:bf:77:b3:d6:07:
83:a2:1f:b7:01:b1:28:61:2a:fc:a3:1c:2a:57:ca:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AF:B9:DB:43:F6:0D:B2:3A:BF:1E:97:C7:29:7C:08:AB:58:08:F3
X509v3 Authority Key Identifier:
keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:a6:2c:75:2a:8c:7c:5c:29:b2:9a:e3:35:12:6f:4e:8e:b2:
bc:e7:5d:bd:8c:e8:87:df:58:e8:ba:9d:e1:fc:37:97:08:78:
df:ab:55:50:1a:1d:cc:81:85:97:b6:34:34:06:0e:11:26:49:
55:87:45:a3:9b:b1:1f:1a:e7:4c:6d:f9:e1:9e:c4:b6:96:c2:
48:d1:9e:c1:3b:bd:fa:02:76:74:60:1b:bf:aa:bf:f6:d5:ca:
7c:78:c8:00:cc:3b:37:0f:4c:53:c5:a5:3b:18:8f:9e:b0:a7:
71:43:ce:a0:b5:6f:cf:26:2f:54:6f:65:70:70:aa:9c:f6:1d:
a9:aa:3f:85:1a:ae:c1:fc:cc:0b:9b:83:13:c3:16:3b:65:88:
02:88:9e:5a:45:92:23:c9:16:0d:18:f6:23:e9:61:8e:ca:68:
0a:b5:b0:66:27:e8:11:05:75:23:92:d8:6d:ff:b1:ab:cf:e7:
2e:d1:d8:07:7e:6b:e7:31:96:77:9f:72:52:c2:59:7f:f3:70:
56:00:58:18:b2:7a:fb:96:de:24:91:07:82:10:76:48:34:87:
df:e9:fd:c7:95:9d:a0:c3:e8:15:9c:34:93:5b:86:90:de:7d:
60:88:73:9a:b9:53:12:d0:c7:bd:6f:34:15:68:9b:73:13:97:
17:6a:e6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:39 2026 by rpki-client