
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
File: r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json)
Hash identifier: nMrcoTXX8lPwYCyesq75RKQNhBEz5yOYFY9nET+HCyA=
Subject key identifier: 97:41:93:1E:2A:5E:5E:FE:66:7B:18:8B:BA:64:A4:2A:64:FE:E2:8D
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Certificate issuer: /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
Manifest number: 0120
Signing time: Sun 31 May 2026 23:08:06 +0000
Manifest this update: Sun 31 May 2026 23:08:05 +0000
Manifest next update: Sun 07 Jun 2026 23:08:05 +0000
Files and hashes: 1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: fvu9AbH5l50/DttsrM2teixbkrwSqYB7LdTTlg0kxYE=)
2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: ASL8/2HCWAJCmthowgFWIUdkitcmGIEB/XyIsZpt42w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 23:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Validity
Not Before: May 31 23:08:05 2026 GMT
Not After : Jun 7 23:08:05 2026 GMT
Subject: CN=6a1cbf56-2c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:a5:96:fa:d9:79:c4:7d:f4:b0:59:da:88:
b3:19:1d:b2:9d:82:ec:5d:c1:e3:41:1a:df:03:e4:
3a:2f:9e:9b:2d:18:bd:26:6b:05:8f:71:fd:15:a1:
64:da:54:2f:34:17:e1:c3:c3:ff:96:8b:3f:3d:b4:
7c:a2:2d:ae:d6:b6:7f:7c:b8:df:a0:c3:9c:7c:6d:
ce:de:b4:16:93:76:3b:22:c2:34:17:21:0a:4f:0d:
fb:44:6f:4d:0d:71:a6:f1:79:e6:2b:d9:19:3d:44:
7e:b7:55:b9:5d:ee:d1:af:61:7c:07:b2:5b:4f:98:
f1:7e:63:ac:10:d6:3f:52:56:83:e0:9f:f5:94:fc:
4d:27:e6:0c:14:19:53:f2:6f:1f:32:2a:72:6d:d4:
69:ee:64:5d:9e:58:73:9e:4c:47:d8:d4:19:0e:eb:
65:b5:67:ce:19:fc:d2:8a:2c:ec:ee:c6:65:0f:70:
ce:59:c0:31:a3:21:f3:14:ff:0c:45:db:23:55:03:
c8:83:d2:9a:7b:4a:d0:f9:3e:de:04:15:71:2a:c8:
93:3f:e9:c7:83:9b:af:09:f4:5e:c0:26:53:9e:93:
af:3c:9a:ce:79:f0:3e:3a:a8:d9:3c:01:aa:90:14:
b2:55:78:2d:24:51:61:03:a7:40:81:01:d3:13:0b:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:41:93:1E:2A:5E:5E:FE:66:7B:18:8B:BA:64:A4:2A:64:FE:E2:8D
X509v3 Authority Key Identifier:
keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ba:ea:26:c2:42:31:f3:54:5a:57:df:6d:e5:1b:52:45:0b:
a1:7d:50:86:d3:52:ae:f0:64:30:59:62:f1:5e:7b:40:9c:38:
bc:09:a1:57:f4:1a:d0:dd:59:5b:6e:c0:82:ab:df:a5:90:34:
b1:46:90:64:52:49:bb:d1:24:f0:f8:7f:90:ad:45:e2:c8:f2:
f7:31:50:37:4b:e9:28:fd:24:04:c9:49:6e:01:b3:60:04:de:
ca:f4:6d:c0:e9:04:1e:fe:8a:b6:d9:55:2a:47:78:d5:63:c7:
50:66:6d:23:2b:c9:e7:95:7f:53:38:9a:ba:63:8d:81:97:ce:
f9:01:2a:a6:dd:e4:dd:95:66:e0:c0:c7:dd:75:0c:13:53:5c:
1e:e6:c9:e4:a0:7d:01:7a:af:e1:2b:5d:d2:c7:b9:a5:50:a7:
75:c8:a0:3e:c6:8f:00:c9:dc:08:b9:19:db:61:5c:43:df:3b:
49:1d:0a:45:f0:06:b1:44:a8:83:64:c2:4e:4c:46:5d:a5:7f:
3a:24:9e:74:9d:17:91:e6:9a:e0:e1:a6:c5:f7:f9:f5:f6:b1:
23:98:0d:d1:a2:d0:d5:e7:aa:21:f4:9b:f4:39:9d:7d:b7:ae:
54:d8:de:ce:22:72:d1:a4:34:20:7b:23:a0:af:85:23:56:00:
1e:61:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:29 2026 by rpki-client