
$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json)
Hash identifier: bAu8YyqHZTWSAelQktj1zRKCJFFomjKVENjOht1tS2M=
Subject key identifier: B9:88:5D:73:89:39:51:6E:A0:AC:56:79:0A:E6:D0:00:0C:2A:6D:C5
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial: 0329
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
Manifest number: 0320
Signing time: Mon 27 Jul 2026 02:16:07 +0000
Manifest this update: Mon 27 Jul 2026 02:16:07 +0000
Manifest next update: Mon 03 Aug 2026 02:16:07 +0000
Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: gRAR9uCwx7QmU5TLbyK3wCMaj6QesX3B1StSijsL1Fg=)
2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: h9XZber2EyFddUowRYB4R36YQps0wInKux9nbzLj6gU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 809 (0x329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Validity
Not Before: Jul 27 02:16:07 2026 GMT
Not After : Aug 3 02:16:07 2026 GMT
Subject: CN=6a66bf67-ab1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:31:62:f7:08:f9:d6:1d:55:3c:be:f3:b3:
43:43:e3:bb:82:d7:0f:82:63:f7:fd:8d:ba:80:dc:
d9:7a:0f:d8:c9:5e:bf:9d:df:fc:37:76:93:9d:be:
80:ea:26:27:1f:5f:12:aa:83:bb:b8:8d:88:ed:79:
07:14:c0:fd:7d:72:39:92:cb:0b:d1:0c:d1:ae:4d:
37:d1:ce:43:ca:99:a2:0b:10:b3:39:f8:86:15:e6:
01:4a:62:fd:f7:7f:f5:20:e6:d7:4b:05:b8:82:dc:
f4:68:f9:df:64:ca:82:f6:d0:de:c4:43:b5:52:6f:
9a:cd:31:19:32:1d:65:01:2a:ef:bd:ec:29:00:ba:
01:c4:8b:ec:ce:d6:d8:f0:c1:df:c7:f6:97:73:01:
96:3c:58:ef:c7:fc:de:d5:64:32:84:1d:09:f7:f3:
02:e4:9f:0d:bf:f5:49:3d:86:dc:ef:2c:73:cd:13:
a8:56:28:c9:f8:60:2c:92:ed:9b:44:78:d1:e0:0f:
5a:a3:aa:56:bc:bb:6c:34:30:4d:22:0e:da:97:87:
e6:e3:b0:d6:29:1a:a3:80:86:43:be:75:a9:68:91:
bc:80:9d:0f:0c:a5:b0:82:f5:8e:5b:fe:53:3c:9a:
85:23:44:98:6d:3f:56:b4:9c:a3:eb:52:07:b3:7f:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:88:5D:73:89:39:51:6E:A0:AC:56:79:0A:E6:D0:00:0C:2A:6D:C5
X509v3 Authority Key Identifier:
keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:46:1e:e7:2c:1b:0e:fb:d8:95:f6:7f:64:a5:81:f2:4a:6b:
aa:11:87:8c:b4:f3:11:a3:b9:03:ca:d9:50:f8:d6:22:9d:18:
2f:ed:03:9f:3c:73:aa:d2:5d:2c:47:24:95:e8:9a:2e:26:3a:
fb:7b:09:0d:ff:8a:92:83:86:f4:11:0b:3b:ba:20:60:81:ab:
de:90:5a:d5:5b:8e:e4:9d:e1:cc:96:00:62:31:e6:61:3f:5f:
11:f8:ce:ca:4d:ca:d1:e4:b9:d1:3a:a4:81:fa:77:81:f2:b7:
38:e1:58:cf:4b:6c:25:4d:ad:83:76:73:21:21:55:f5:c0:ab:
0e:9f:fa:76:8b:9d:bb:7a:cf:36:53:e0:5f:e3:51:6b:50:ff:
0e:0f:4f:a7:8d:80:f9:9b:9e:2d:94:4a:fc:d1:98:8d:7f:09:
e7:12:ad:c8:1c:70:3a:cf:3f:92:dd:f3:de:6e:9c:a2:89:9a:
73:c0:09:4a:51:fc:8e:ba:34:6c:08:25:c9:15:40:34:d9:da:
1e:2a:fe:16:e8:f6:c4:5b:f8:5f:6a:62:99:4f:b6:7f:9d:8f:
8a:b0:5e:1a:63:36:16:25:df:17:04:b0:c0:21:5f:05:2c:e9:
38:12:19:b7:86:b0:97:a6:b8:35:f1:ec:11:c7:63:99:54:bb:
3f:76:0f:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE5RjExMTAvBgNVBAUTKEQ5MDg0Q0FEQzNCRUM4QzIwMEM1QTk2QjcyRURBRkQ0
QTAwRUFFRTgwHhcNMjYwNzI3MDIxNjA3WhcNMjYwODAzMDIxNjA3WjAYMRYwFAYD
VQQDEw02YTY2YmY2Ny1hYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo/UxYvcI+dYdVTy+87NDQ+O7gtcPgmP3/Y26gNzZeg/YyV6/nd/8N3aTnb6A
6iYnH18SqoO7uI2I7XkHFMD9fXI5kssL0QzRrk030c5DypmiCxCzOfiGFeYBSmL9
93/1IObXSwW4gtz0aPnfZMqC9tDexEO1Um+azTEZMh1lASrvvewpALoBxIvsztbY
8MHfx/aXcwGWPFjvx/ze1WQyhB0J9/MC5J8Nv/VJPYbc7yxzzROoVijJ+GAsku2b
RHjR4A9ao6pWvLtsNDBNIg7al4fm47DWKRqjgIZDvnWpaJG8gJ0PDKWwgvWOW/5T
PJqFI0SYbT9WtJyj61IHs3/YvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmIXXOJ
OVFuoKxWeQrm0AAMKm3FMB8GA1UdIwQYMBaAFNkITK3DvsjCAMWpa3Ltr9SgDq7o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTlGMS82OTVGOTNGRTIx
RUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlNSUF4YWxyY3UydjFLQU9y
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJRaE1yY08teU1JQXhhbHJjdTJ2MUtBT3J1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTlGMS82OTVGOTNGRTIxRUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlN
SUF4YWxyY3UydjFLQU9ydWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFkYe5ywbDvvYlfZ/ZKWB8kprqhGHjLTzEaO5A8rZUPjWIp0YL+0DnzxzqtJd
LEckleiaLiY6+3sJDf+KkoOG9BELO7ogYIGr3pBa1VuO5J3hzJYAYjHmYT9fEfjO
yk3K0eS50Tqkgfp3gfK3OOFYz0tsJU2tg3ZzISFV9cCrDp/6doudu3rPNlPgX+NR
a1D/Dg9Pp42A+ZueLZRK/NGYjX8J5xKtyBxwOs8/kt3z3m6coomac8AJSlH8jro0
bAglyRVANNnaHir+Fuj2xFv4X2pimU+2f52PirBeGmM2FiXfFwSwwCFfBSzpOBIZ
t4awl6a4NfHsEcdjmVS7P3YPsA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:14:12 2026 by rpki-client