
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json)
Hash identifier: /aOoCF4UBy6RCN3yM8doD+X6bcry25oUllW6+84uyRU=
Subject key identifier: 0B:E6:5A:26:EF:A4:C1:66:31:91:D8:96:31:6E:F5:B9:EA:E8:8F:EB
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial: 028A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
Manifest number: 0283
Signing time: Tue 21 Jul 2026 02:58:22 +0000
Manifest this update: Tue 21 Jul 2026 02:58:21 +0000
Manifest next update: Tue 28 Jul 2026 02:58:21 +0000
Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: fdRjw+bTAjry0WoAmLRhipVyzV+zlOs+93FjX6KZZ3o=)
2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 4E7B7eClCEG5d3gzWwa9hz6tdWf+XUY9sPo6EaTao1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Validity
Not Before: Jul 21 02:58:21 2026 GMT
Not After : Jul 28 02:58:21 2026 GMT
Subject: CN=6a5ee04d-4e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:f0:32:54:bd:a3:5d:09:86:b5:86:b9:3b:
a4:62:c1:25:47:ae:a7:1d:5c:a4:e7:5d:88:7a:c5:
25:a9:a2:9c:d8:21:62:92:0a:3d:a2:4a:b2:f5:e5:
12:ba:3f:6a:49:3f:3a:d9:3a:f4:a0:f1:66:36:a8:
ba:87:00:45:fe:1b:f4:96:4c:1d:a0:74:40:36:c0:
d5:30:f8:1a:ce:98:59:99:99:5c:95:c6:2c:10:a7:
98:58:74:65:c0:6c:36:58:12:a5:63:81:32:65:1f:
f4:49:92:fc:a7:56:22:3f:03:32:c5:96:56:9d:a3:
95:b7:80:af:21:57:fa:c9:70:cf:44:8d:76:8d:07:
fd:be:6b:c9:40:bf:27:d6:2c:c2:a7:82:1d:5c:eb:
1d:fa:89:dc:a3:ec:79:36:68:b4:7a:41:56:61:25:
34:3f:92:e8:18:4b:b4:9a:74:4d:65:01:48:2a:82:
cc:74:81:2d:47:7a:a7:0f:67:57:91:24:20:09:37:
6e:d0:f6:5e:34:fc:40:37:96:eb:4f:bb:47:83:37:
8e:f0:0b:10:33:7f:06:6a:6f:2b:33:ce:27:d4:a1:
ab:7f:99:ae:ab:d6:10:32:e9:1b:04:f8:9b:11:5c:
c1:18:7f:02:97:6b:5f:82:1e:1a:cb:b9:2f:4d:6b:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E6:5A:26:EF:A4:C1:66:31:91:D8:96:31:6E:F5:B9:EA:E8:8F:EB
X509v3 Authority Key Identifier:
keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:25:cb:f0:14:fe:29:9a:ef:62:0d:1e:86:a9:b9:6f:c1:fb:
13:7f:4c:c3:cc:f7:a9:1d:68:a3:21:61:6c:78:19:ac:d2:00:
dc:40:1a:6a:41:e7:cf:d6:7d:40:79:ca:4b:78:79:ce:97:08:
55:a0:47:06:0c:48:72:b9:d0:26:c7:5b:a7:ae:ce:44:dc:e8:
3c:37:30:c1:73:e9:06:b9:af:19:84:12:4f:08:97:41:ac:15:
5e:7d:89:a9:8f:a0:a8:ce:a4:a3:70:46:57:86:57:6c:68:9e:
9c:80:d3:99:79:50:6e:1e:f7:e4:eb:46:e6:d4:c2:43:87:5a:
fe:a2:3d:89:fd:f1:62:81:96:23:b9:69:e5:23:38:9d:62:a3:
05:78:8c:59:6c:73:8d:60:84:d0:16:9e:4e:44:bd:85:12:20:
18:a2:06:a7:3d:0e:e7:a5:bc:e7:d2:78:4e:1d:bc:63:ff:ab:
f8:70:16:41:8b:32:d0:d3:ba:26:d7:42:c8:82:b1:0a:02:66:
47:cb:75:df:15:91:14:45:0a:29:cf:12:3f:e5:9b:d3:5f:a8:
b1:fc:6a:92:2e:91:68:a7:72:3e:58:36:8c:3f:37:fc:7d:64:
05:fe:82:aa:fa:b8:d2:72:c8:de:2a:55:b0:f1:05:c6:a7:32:
dc:80:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:06:47 2026 by rpki-client