
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json)
Hash identifier: ND47PRHUTNWsGZV0wUQOSA7nJi2ReNU5F/OZrta+yg4=
Subject key identifier: 96:E4:20:29:03:50:CA:6C:C0:2B:E9:BD:86:C8:3B:EB:2E:51:BF:90
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial: 051D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
Manifest number: 0511
Signing time: Fri 17 Jul 2026 00:13:44 +0000
Manifest this update: Fri 17 Jul 2026 00:13:43 +0000
Manifest next update: Fri 24 Jul 2026 00:13:43 +0000
Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: lB1uwRuHlkonZA2Ybek48/qxUQLs0ECL5KKg8eqxAPQ=)
2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: CP9FAdKBke/NciieBtLRTUYPVa+mGRMYkC3JaQUvBRc=)
3: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: bPO66cPU1SPGOc5KH5eGrolnSN1m6sptmbmqTiJIuEU=)
4: E03427482D2411F192A7D59AB8833773.roa (hash: jK7mks1MMjJvVIyRYKwMkRBkaa32MR5Py6W7RYY9KqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 00:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Validity
Not Before: Jul 17 00:13:43 2026 GMT
Not After : Jul 24 00:13:43 2026 GMT
Subject: CN=6a5973b8-00f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:00:bd:bc:fb:c7:ce:e2:ef:8d:0c:e6:8c:00:
d6:22:d6:42:9c:f4:a1:b8:96:48:42:6e:69:cf:11:
9f:f2:00:f2:f5:2f:de:fe:80:0c:f6:ea:8e:00:96:
ed:e2:5b:a9:85:cf:b7:d0:5d:6e:e7:10:61:34:6c:
bd:39:45:ac:ba:c3:50:c4:80:73:89:1d:2e:ec:7b:
c6:fc:27:1a:df:ff:71:5a:52:63:ed:1d:77:97:c5:
f6:61:71:7c:e9:dc:e3:2e:ae:d3:2e:57:20:98:6b:
0a:72:fc:c8:c1:24:ae:65:06:fb:1f:b5:8b:0f:a3:
a7:d7:b7:19:e4:0b:34:3d:01:b9:b1:bf:59:06:ee:
70:07:b1:e9:cc:4e:f8:3e:e5:13:39:24:82:64:26:
a2:86:d3:6d:93:ed:5c:de:37:33:c8:8d:75:59:f4:
b6:59:22:d6:7d:5c:1c:43:dd:0d:34:dc:2e:8c:24:
df:9c:b5:b7:c1:0a:81:7a:7a:be:d8:36:ed:ea:0d:
24:9e:01:4a:20:45:90:6e:9c:a3:72:60:eb:01:aa:
da:e8:02:6f:dd:45:2b:18:a3:50:2d:d9:ce:52:19:
47:de:2e:e7:d1:99:fc:79:f9:71:b0:a1:27:b9:aa:
7f:16:1d:a6:65:2c:24:f5:78:34:6c:83:2b:2b:f3:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E4:20:29:03:50:CA:6C:C0:2B:E9:BD:86:C8:3B:EB:2E:51:BF:90
X509v3 Authority Key Identifier:
keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:22:80:7e:1f:26:35:46:1d:14:99:3a:bb:d7:e1:7b:0c:bf:
26:82:4c:93:d3:01:8b:8d:7e:88:ab:19:0d:19:8a:83:c2:c8:
a5:10:0d:67:73:aa:7c:bd:8d:dc:ab:52:47:32:67:10:a7:5d:
cd:5b:d1:64:40:4d:22:06:c1:f7:68:c2:c8:86:d5:e8:52:07:
d5:c9:0f:ce:28:c6:17:ad:c4:d4:78:86:65:4e:04:11:8c:bb:
fe:f0:bf:6e:31:c4:3c:db:de:b4:bc:3a:5e:35:01:49:31:70:
58:92:d4:92:bc:9f:9e:a4:fa:b2:19:a8:b1:18:47:0f:85:bf:
be:01:21:5f:00:b1:02:db:e7:31:b4:9c:ad:9d:be:64:44:09:
9a:dd:07:73:a2:3e:ca:d9:25:c2:19:6e:39:e9:5c:27:e3:85:
c1:db:a9:4c:16:10:c0:aa:3f:1a:e4:75:19:ff:55:98:1f:7e:
34:76:cd:3c:2f:2e:eb:e4:29:0b:b0:61:21:bf:6d:cd:95:04:
ca:92:d2:ac:6d:05:64:b4:70:e1:c8:30:cc:a2:20:5f:55:e6:
ad:e6:bd:69:4d:aa:b9:68:89:23:88:6f:3c:78:56:2b:0c:e5:
28:08:f3:87:40:a8:df:de:bb:57:08:d7:cb:e2:f9:c6:82:4a:
6f:dd:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:05 2026 by rpki-client