
$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json)
Hash identifier: X6L59z6lYifguWHKkqdS2USgCRzpt/ocZwsfBsEbj4g=
Subject key identifier: 39:9E:0B:FD:77:0F:CC:32:51:B7:E4:67:8E:FF:CF:08:01:33:51:9E
Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
Certificate serial: 0719
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
Manifest number: 070B
Signing time: Wed 20 May 2026 22:05:02 +0000
Manifest this update: Wed 20 May 2026 22:05:02 +0000
Manifest next update: Wed 27 May 2026 22:05:02 +0000
Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: m9tTgiOdcf1Oi+suBQmr2fQvkD5Kg4RPJGJ83+vyxhk=)
2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: /VloqaD2cYppLRVsQe+SclqEcygp/xKvnqbJFHuyZMc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl
rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91293E9, serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
Validity
Not Before: May 20 22:05:02 2026 GMT
Not After : May 27 22:05:02 2026 GMT
Subject: CN=6a0e300e-1f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:ed:cd:f8:f8:1a:41:d5:9f:f4:0c:6a:6d:
53:93:81:66:74:e7:d2:26:a4:79:4d:4e:5e:d1:06:
5a:14:e9:93:7b:1d:63:6a:d0:a2:cf:3f:00:46:9d:
06:62:13:bb:c2:4f:39:aa:45:6f:d6:7f:45:8e:2f:
5e:d9:58:d4:de:a0:bf:c1:97:4c:56:d7:b8:c1:f3:
55:20:4d:10:2f:7f:5e:18:80:a4:50:58:dc:ce:3a:
87:4e:5c:0a:f0:a7:6f:27:77:79:34:a1:86:f8:42:
29:be:19:34:cf:56:7a:38:f7:c2:60:9c:86:20:d8:
e4:8e:4f:3e:c3:24:ae:bb:08:81:a7:d2:b4:fc:03:
bf:db:95:1c:f6:1e:ee:3b:0b:da:f2:7c:3f:4c:6d:
21:6c:74:dd:52:81:69:61:6d:89:c5:65:94:92:75:
23:ab:2b:99:45:03:4d:d7:ad:b8:e3:9c:30:65:68:
a7:1b:0a:ed:e5:08:8d:2b:a3:4d:29:87:7e:0e:cd:
fb:30:01:25:c0:e4:96:2b:3e:64:32:da:12:b4:dd:
30:cb:c6:9c:71:e9:8b:5d:59:d7:25:99:31:9d:f8:
c5:52:c9:42:1f:8d:5e:6e:8b:f0:ac:9a:eb:a5:21:
aa:df:90:08:1c:b9:08:1d:44:01:df:5d:74:e2:95:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9E:0B:FD:77:0F:CC:32:51:B7:E4:67:8E:FF:CF:08:01:33:51:9E
X509v3 Authority Key Identifier:
keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:4d:d0:fc:6e:37:e3:54:10:7f:2e:77:e0:c2:aa:51:ec:cf:
09:55:d7:d0:9d:20:11:b0:e6:5c:df:07:49:0f:fb:db:06:82:
57:0c:20:58:af:51:9b:a0:42:c9:b6:1c:29:6a:03:ee:f3:9d:
2e:39:e4:61:b6:39:95:b2:c3:e1:3a:3f:d7:87:86:62:56:53:
9b:46:2d:7e:39:dd:28:8a:e1:18:2c:90:60:78:14:40:b2:2e:
6b:e1:c0:35:8e:55:20:29:b2:29:6d:32:da:a0:47:c9:54:d2:
ca:56:74:c9:8a:7c:17:b4:ec:66:2f:f1:fe:76:b8:4c:80:41:
fd:fc:62:cc:aa:75:81:47:78:70:68:54:f1:e6:82:95:14:a8:
cd:08:01:9a:62:c8:8c:cc:c7:f3:7a:0f:9b:81:0a:70:45:0f:
78:ce:60:ab:5a:7d:d7:89:a0:dd:dd:f0:77:0e:ab:46:98:7e:
67:7c:ed:01:f3:1c:56:fd:93:df:16:6d:53:74:e0:a6:8b:8d:
9f:e3:88:37:fc:93:d9:96:24:eb:f1:d5:16:b4:24:05:85:43:
07:33:d0:13:8d:ec:86:4d:0b:e7:9b:73:d0:3a:5f:00:a1:87:
00:cb:96:60:e1:18:7d:9f:ff:b3:76:29:a6:30:9e:17:56:62:
b3:3c:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:19 2026 by rpki-client