
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json)
Hash identifier: Niuu/eNM2592fZA8+9Z7oAVqgSXEQ0nqS+5lyIPfLYM=
Subject key identifier: 76:FD:F7:7C:F4:26:7B:BD:4F:B3:1F:79:06:64:12:F6:DF:14:F1:09
Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1
Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
Certificate serial: 04B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
Manifest number: 04A4
Signing time: Wed 19 Aug 2026 00:17:33 +0000
Manifest this update: Wed 19 Aug 2026 00:17:33 +0000
Manifest next update: Wed 26 Aug 2026 00:17:33 +0000
Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: AG00nswovphDzr0Bgfq/7X7ktDt6dwrJipaqr3eViiw=)
2: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: SzKheHkyXGhCU9L9E9bj5O9UK/QqaZCVghpUUMIvziw=)
3: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: lRK5hM0+Ajz1Iu+TnpLxwj4NeRvEETgFEYDFPhqxkGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl
rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
Validity
Not Before: Aug 19 00:17:33 2026 GMT
Not After : Aug 26 00:17:33 2026 GMT
Subject: CN=6a84f61d-3e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:d6:06:f6:d3:a7:68:0f:8a:02:c8:a3:b5:
95:e3:55:2a:c9:14:28:50:46:20:2e:34:79:92:db:
24:af:e4:78:3e:3c:37:f1:94:4f:1f:39:71:fd:d5:
79:d7:d2:dd:9c:93:38:3b:9d:41:cc:a9:f4:11:2a:
98:fb:63:78:81:2a:fa:66:22:d2:63:96:bf:54:a5:
54:f2:cf:84:cb:a5:06:04:7b:71:1c:f9:89:2e:21:
05:3d:19:86:ee:59:34:20:6b:7a:43:16:00:02:b9:
54:60:d3:27:39:20:bc:75:8f:e1:35:2a:39:2e:cb:
07:a7:38:2c:2d:ff:9b:53:d4:17:95:54:2a:0d:5d:
b7:c0:1d:af:8e:a9:91:6b:f0:cc:26:cf:b5:9d:27:
13:16:7e:92:c8:a0:14:83:96:78:05:c7:7a:2e:4d:
76:2f:d9:67:88:dd:75:ad:a5:2d:57:7d:9d:96:3d:
6b:a8:4e:79:01:89:a7:1b:3e:83:88:15:06:b7:64:
aa:55:cd:14:32:71:32:94:01:c3:38:2e:a8:ab:46:
9d:a7:2d:8a:db:49:f5:32:e9:2f:15:d6:4e:87:19:
d8:6c:51:34:5f:aa:56:94:8d:00:6d:34:59:a5:37:
44:77:5d:34:9f:24:e3:1f:ea:82:eb:94:a9:15:ab:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FD:F7:7C:F4:26:7B:BD:4F:B3:1F:79:06:64:12:F6:DF:14:F1:09
X509v3 Authority Key Identifier:
keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:7d:42:a6:c1:c3:7f:c4:67:db:bc:aa:91:7b:ea:33:00:a6:
82:ae:82:20:40:55:fc:22:e4:01:39:6d:d6:b8:81:cd:62:39:
a1:a0:a5:9b:6e:7d:54:87:2e:43:14:20:59:91:01:88:0d:be:
89:6a:80:0d:7c:52:a3:b3:ab:3e:31:95:78:5c:16:df:31:96:
74:5f:e7:ef:65:30:57:48:4d:c2:0e:78:a8:0f:6e:a2:9f:0d:
ec:4a:57:11:e4:51:91:6b:79:93:81:be:dc:98:e3:21:7d:20:
26:08:ee:5f:5a:1d:cb:fe:e4:a6:e3:64:6f:e6:d1:09:6a:e4:
0e:df:3d:1e:6c:17:55:53:d1:0e:fd:ec:a2:8d:46:72:b0:f1:
fd:ce:af:e8:1a:d5:43:56:1a:71:15:21:3a:0a:31:66:03:fd:
90:94:bb:a3:1b:7b:00:18:51:65:e4:97:7a:bd:e7:eb:fa:06:
55:5b:6d:b3:7a:2c:0f:59:97:d4:89:dc:27:30:3e:15:47:5e:
b4:5f:d0:17:88:f8:9d:13:1e:65:17:fc:a5:fd:b6:ac:6d:24:
1e:eb:8c:13:1a:29:3a:5f:de:d2:86:64:12:3f:89:ae:0b:1d:
d2:b8:c9:a7:86:ad:d3:05:34:51:13:a5:a5:0d:50:81:23:98:
87:0a:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:15 2026 by rpki-client