
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
File: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft (raw, json)
Hash identifier: bmsybqZIdg99WOBuwo6Ccv8faA0Yi7iezUz5MBwsEJE=
Subject key identifier: AF:02:2E:5D:A6:89:F7:49:59:07:A1:4E:76:0D:0B:F2:A5:2B:85:9A
Authority key identifier: D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
Certificate issuer: /CN=A91758EC/serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
Manifest number: DE
Signing time: Thu 03 Sep 2026 06:54:39 +0000
Manifest this update: Thu 03 Sep 2026 06:54:38 +0000
Manifest next update: Thu 10 Sep 2026 06:54:38 +0000
Files and hashes: 1: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl (hash: kCFjGdyxdH2P2T3yKVarN/yRQTapm0P9w1JDIrHIMxw=)
2: 1AC14F60FC1C11F0AA0D3BE4396F56BC.roa (hash: aYDnHlZZ14KegbsrCL1Glj9EDgxGx2Y0U5BoskwOni4=)
3: 1B34EF06FC1C11F0AA0D3BE4396F56BC.roa (hash: iqYV9/xnKXVfiZZcxAVxMjO3LAkmh0lLnZhQciHJSJg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl
rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758EC, serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
Validity
Not Before: Sep 3 06:54:38 2026 GMT
Not After : Sep 10 06:54:38 2026 GMT
Subject: CN=6a9919af-f47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:f6:02:5a:0c:ec:5e:9b:d0:4f:7f:b2:ab:
4f:ac:53:8c:26:c9:4e:85:cd:5f:f7:e6:41:26:ca:
e5:07:3e:8b:19:38:eb:7f:c8:eb:91:8f:bd:69:4e:
82:a6:92:8b:f6:ba:51:c6:84:ee:5f:d4:42:75:b1:
cd:64:8a:7e:3c:94:ba:bb:e4:33:08:c6:13:99:03:
e3:7a:08:a4:9a:a9:cb:30:16:a2:2a:cd:58:a5:13:
dd:eb:b4:a0:0e:93:03:65:e7:68:82:23:c1:7f:e7:
73:d5:c7:a7:39:1a:16:8f:b0:11:53:23:aa:f1:3c:
47:38:18:eb:2a:6e:27:70:df:bb:f3:9a:6c:ca:ad:
01:8f:04:de:1d:92:df:d6:ad:81:02:14:53:7d:f5:
2f:51:4f:cf:70:c0:61:20:12:58:67:96:bf:18:2b:
65:77:21:e8:bb:a6:05:e2:f4:44:8b:66:02:f0:29:
5f:51:3d:c0:ac:a4:85:a5:40:da:9b:0b:bb:df:95:
4a:71:4e:fd:37:39:c9:f6:24:1a:44:67:9c:1e:87:
25:b2:3b:0d:b4:38:75:22:84:7f:11:a9:48:a3:ec:
ef:17:ea:4b:7a:00:1c:46:4d:24:7c:56:8b:25:b5:
e8:09:a9:41:5d:92:12:5a:f6:1c:19:70:e2:cf:65:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:2E:5D:A6:89:F7:49:59:07:A1:4E:76:0D:0B:F2:A5:2B:85:9A
X509v3 Authority Key Identifier:
keyid:D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c2:74:ab:0a:18:94:f5:d5:b7:36:e1:83:df:a5:0b:2e:f0:
b6:29:41:14:12:7c:69:a8:69:e5:97:61:af:34:d9:53:5f:c6:
8b:24:27:e5:d9:72:e4:4e:0d:c7:8d:45:a9:40:8f:be:2f:35:
a6:1e:9e:f5:4c:d1:12:07:c2:a6:ef:9c:90:f2:81:5a:6d:16:
79:28:83:52:1d:8b:54:95:c1:89:4e:fd:74:99:54:35:42:77:
17:4d:21:1d:23:e5:f7:29:f9:53:22:5e:1d:f9:2d:41:3b:9a:
e0:5e:48:54:db:4e:9e:8b:85:75:44:da:4a:5e:0d:b3:7f:a1:
0e:81:88:0b:82:bc:b6:ed:4c:8f:e2:8a:54:35:6a:cc:6e:40:
19:9a:b0:a2:22:af:38:2f:5e:03:2b:37:b5:e9:2e:34:85:b1:
d2:b5:49:33:d5:22:6c:c8:6d:2b:ab:a6:9a:5c:f8:1a:64:82:
95:f7:27:6e:97:dc:11:6c:4c:35:8b:35:c6:14:34:f1:93:6c:
8b:be:34:88:2f:88:9a:f5:d4:84:5f:c3:45:41:66:5a:b9:5b:
17:b8:a4:0d:f1:14:9d:fc:5a:5a:90:80:bb:2d:1c:a4:95:dd:
3f:2b:2d:3a:18:ca:32:8c:9c:da:51:d1:bc:51:d9:89:8d:f0:
29:84:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:12:31 2026 by rpki-client