
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json)
Hash identifier: yJXsQbqm2XVExpDJdSBXE45+UHCwlKAgAdAhK4081u4=
Subject key identifier: 0B:69:BC:A2:01:7E:38:16:66:5C:E3:E1:78:BC:17:50:E7:CF:4D:78
Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
Manifest number: 0193
Signing time: Mon 15 Jun 2026 04:25:14 +0000
Manifest this update: Mon 15 Jun 2026 04:25:14 +0000
Manifest next update: Mon 22 Jun 2026 04:25:14 +0000
Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: Xwpx7H7avCbhOMC45XpPNMVdWYH6CYDuebuWhqTLW1U=)
2: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: i2+AU5JC1CnIuV2WebgbR1MhXzhp17jyG1HTb2dIKP0=)
3: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: EFBskJYMHfJRXujHupPsFrdh1ToDlvL0xJdWDE7eAo8=)
4: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: EOqSQLbOPrsjZ56mAXCzCp42zP2pW/1hVyLkMumCHLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Validity
Not Before: Jun 15 04:25:14 2026 GMT
Not After : Jun 22 04:25:14 2026 GMT
Subject: CN=6a2f7eaa-8bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:c0:81:a9:b8:78:dd:be:24:f6:c4:9b:1e:
2a:70:db:a8:e2:d5:a2:04:c9:43:ec:a2:ad:01:36:
af:5e:83:a0:e4:8a:6c:3a:ee:48:9e:d6:c4:75:db:
f0:8c:cb:56:ef:99:42:05:d1:d7:33:11:6a:f8:5e:
fe:61:63:41:cd:9c:c3:82:3c:67:ad:fd:6a:bb:c8:
aa:0d:c3:22:41:fb:b7:09:69:a4:57:a0:09:9e:50:
a4:ed:38:a9:ad:84:65:d7:3f:42:ab:e7:4b:f5:63:
10:26:60:a8:53:06:7d:00:c8:5b:7f:bb:8d:aa:7e:
4d:e4:5d:19:f0:dc:cf:e1:a8:11:65:da:8b:2f:3e:
2c:96:1a:47:cf:9a:21:c2:d7:07:ad:9b:20:21:4a:
97:5e:fb:f7:f6:7a:43:8d:47:0c:6c:3b:fb:56:36:
e7:d8:7f:87:e8:69:ae:a4:91:f6:4c:fa:80:13:2a:
34:a4:0f:8e:67:8d:20:40:9d:27:42:e2:92:66:e6:
50:89:b8:4b:1d:05:c0:dc:9a:85:5a:85:72:64:25:
92:96:6d:e6:46:50:e8:88:58:83:d1:99:22:27:85:
a5:1b:f0:7f:00:a1:64:4f:da:d2:d4:52:1c:7a:97:
da:c3:58:94:62:80:88:f8:52:2d:ff:26:dd:5e:95:
7c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:69:BC:A2:01:7E:38:16:66:5C:E3:E1:78:BC:17:50:E7:CF:4D:78
X509v3 Authority Key Identifier:
keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b4:9e:19:01:31:16:cf:03:94:7a:c5:bb:7c:40:05:31:8d:
dc:c7:b2:e8:b8:b0:8e:05:02:09:db:75:fc:48:06:d7:9b:c5:
e7:be:bb:81:16:71:d7:78:2b:ed:a6:57:37:c9:e9:50:b8:2b:
75:f1:03:66:31:99:60:05:a8:6d:45:dc:4f:41:7d:9b:ed:6e:
e5:e1:fa:39:b9:48:0e:88:a0:4b:da:20:6b:57:01:d1:f1:79:
46:b2:c1:86:d8:1e:c2:22:0e:02:4d:2f:5c:af:f7:af:77:30:
7a:d6:e6:5b:5c:b0:e0:7a:90:68:6f:c5:6c:1b:33:e1:f8:f3:
b2:b8:4c:99:74:33:d4:ad:35:e8:22:51:09:cf:1c:43:86:29:
ee:24:57:af:ce:56:8d:04:1e:52:27:65:74:d9:46:86:5e:c4:
32:cf:ea:e8:21:ea:01:7b:e4:11:14:23:66:9b:f2:d9:19:b7:
bd:0b:20:bb:39:09:ce:22:a8:bb:3b:c7:1e:54:07:fa:b9:10:
47:45:9a:a3:ad:75:70:0b:83:8c:a9:f4:f7:ec:bd:58:9e:b4:
2a:7b:bf:16:2a:8d:04:e1:b8:46:56:41:87:76:e0:18:c9:ea:
44:c7:14:11:83:33:f2:fc:87:b3:79:57:35:9a:d8:ce:89:09:
a9:60:6c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 17:56:49 2026 by rpki-client