
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json)
Hash identifier: V4a3LbZj0eWn9HoWZrqTFH6BnngMCzVA12b//PTjGU8=
Subject key identifier: 8F:56:8F:4C:9D:FF:05:47:AD:3F:27:FE:7D:1A:FB:C9:08:DD:F7:2B
Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70
Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
Manifest number: 0263
Signing time: Tue 23 Jun 2026 02:17:34 +0000
Manifest this update: Tue 23 Jun 2026 02:17:33 +0000
Manifest next update: Tue 30 Jun 2026 02:17:33 +0000
Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: b285sJie3vUc7SGOa1LgMCYnzAYJhLaW3VxRrW9rJMg=)
2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: M7rxsuOrH2kuk/pXICO7DXTzFRaUh4fgHJe4Gm7Q1vM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl
rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 02:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
Validity
Not Before: Jun 23 02:17:33 2026 GMT
Not After : Jun 30 02:17:33 2026 GMT
Subject: CN=6a39ecbe-fb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:6a:1b:28:d9:60:4b:67:03:db:3b:1f:b9:
1f:1a:89:d5:38:c4:44:0a:ec:71:5a:a6:bc:03:21:
c5:79:72:c4:9e:f8:9f:07:5d:b0:30:da:74:23:26:
69:12:8b:9d:43:d4:d1:d5:84:30:6a:90:d9:0b:d5:
ac:37:a1:ed:25:ac:7a:44:00:7a:de:4c:70:11:91:
e8:c5:f0:a8:c4:50:e7:83:ec:3d:7d:1b:ac:1f:9c:
73:a7:87:88:76:a1:f7:ff:fe:5e:34:66:2d:f9:80:
db:21:9f:09:9e:1e:e6:26:71:e3:31:2d:3a:d5:7e:
3d:af:cb:2b:51:14:89:4a:22:ce:af:b3:cd:35:79:
2b:42:18:2f:3c:0e:80:db:21:9b:89:c6:1d:1b:74:
93:82:cb:62:f5:33:13:39:88:7b:71:57:0f:d6:bb:
bf:52:d7:e5:5a:a7:cc:f5:fc:a9:41:78:17:07:a1:
3a:8e:04:88:29:77:0f:ef:13:69:75:4a:57:a4:79:
8c:32:fb:75:3f:f6:f2:2b:b5:4f:4a:8c:a4:d2:15:
2b:b4:9d:4a:28:4f:0f:b2:3c:9e:e9:d1:91:5b:06:
18:2c:46:9d:8b:ae:d5:b7:87:02:a1:fa:e0:2c:a9:
35:c8:43:eb:97:f7:dd:65:de:0d:6b:94:23:37:0c:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:56:8F:4C:9D:FF:05:47:AD:3F:27:FE:7D:1A:FB:C9:08:DD:F7:2B
X509v3 Authority Key Identifier:
keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:3d:d7:ff:48:1a:f4:46:10:77:3a:f6:7f:1f:e1:ba:2a:bf:
f0:f3:fc:09:a2:7f:6e:52:95:01:fb:ad:e2:5f:2f:82:ee:44:
70:37:30:4f:e6:4c:4d:2e:85:05:c8:ef:2d:8c:2e:0d:15:24:
f6:2c:cb:a0:96:af:58:95:db:26:b9:3b:11:f1:45:15:9d:72:
aa:2d:e5:c5:60:17:40:f2:ff:0f:02:48:0e:ba:29:b8:3e:56:
92:70:26:99:3b:a8:82:cd:04:bd:11:70:5f:59:07:83:35:9b:
22:3c:32:8b:63:a3:df:1c:a6:a9:40:3e:84:a6:a6:93:9a:84:
59:1b:1c:92:11:fa:6b:a3:cd:74:b1:a8:7f:e3:71:f5:41:cf:
25:ad:f0:77:bb:24:7a:39:ae:84:cd:22:3f:f1:5b:83:08:53:
c4:35:c0:7b:ad:db:cc:d5:20:f9:39:c4:05:fa:4b:c7:a1:28:
04:12:23:88:26:88:71:2e:80:29:74:7c:ce:13:de:e4:34:d6:
e8:0f:ea:71:8f:4b:70:22:7b:e2:17:12:e9:ad:23:09:79:5d:
5f:84:cf:7b:66:aa:45:2e:c0:c5:23:9c:fe:9e:f0:a6:fa:bc:
48:bf:d1:c5:d8:95:d5:06:87:85:6d:5b:f2:bd:70:05:47:c6:
8e:5e:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:17 2026 by rpki-client