
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
File: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft (raw, json)
Hash identifier: TYCc/1T8IFsGSjJWEQsin+laIRjvitOSKabXkpRKbdk=
Subject key identifier: 44:50:45:8D:4D:6A:71:38:22:19:CF:68:5E:DD:81:26:DD:90:19:23
Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE
Certificate issuer: /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
Manifest number: DC
Signing time: Mon 01 Jun 2026 07:25:18 +0000
Manifest this update: Mon 01 Jun 2026 07:25:17 +0000
Manifest next update: Mon 08 Jun 2026 07:25:17 +0000
Files and hashes: 1: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl (hash: rM9Pwc5veRSlQiswjwQ5fzBv/zu6N3F2EmQnMytiEPY=)
2: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (hash: tWtaLRbtDVtWiOlLn3BiRHdz2Yx30phG2bPvS2Dv5GU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl
rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
Validity
Not Before: Jun 1 07:25:17 2026 GMT
Not After : Jun 8 07:25:17 2026 GMT
Subject: CN=6a1d33dd-f9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:5e:c9:53:4d:88:3a:19:fa:1d:ae:21:b3:
d6:50:22:17:c4:56:f2:db:4a:fe:d5:9a:13:22:26:
a9:08:86:ee:52:93:f7:ae:20:91:1b:d1:90:0e:36:
c0:a7:5b:56:66:a0:0f:b6:4b:1b:aa:6f:c7:37:55:
3f:12:56:bc:dd:72:8e:74:1f:48:65:e3:49:11:9a:
7e:e1:39:76:fc:d3:4c:39:ec:c2:26:a2:4c:1d:5f:
a2:7d:47:cd:0c:ab:e9:d1:31:91:66:6c:a0:9c:ce:
3f:c3:53:e8:9d:e1:0b:d3:b1:97:5c:45:7b:46:92:
c0:23:41:7d:85:52:95:24:79:4c:0a:83:44:27:5e:
58:16:6f:8f:0c:d8:40:3a:3a:fd:2e:1c:f7:c1:83:
19:da:51:1d:fd:07:9d:35:84:3b:5e:6c:3a:c0:fa:
b2:9a:ab:74:52:fe:ee:23:91:cc:07:09:fa:0d:64:
1b:97:3b:05:79:79:6d:d0:99:29:0f:7a:16:a9:57:
5d:8e:8f:e7:4d:af:2f:7f:31:77:cb:1d:c2:2c:89:
30:82:ce:f1:e0:e0:04:75:41:ec:3c:f3:91:dd:19:
62:bc:9c:2d:bb:3f:d1:9f:74:3b:5b:ca:db:ec:ae:
f9:15:37:71:12:1f:c3:c5:e1:6e:50:35:b0:4c:a7:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:50:45:8D:4D:6A:71:38:22:19:CF:68:5E:DD:81:26:DD:90:19:23
X509v3 Authority Key Identifier:
keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:6f:27:0c:a7:b7:52:e9:db:3b:30:41:84:c7:d2:30:fe:08:
b6:84:a7:52:0d:03:05:fb:2a:05:48:6c:24:b5:0d:75:0a:ce:
51:04:a6:41:b0:25:3f:65:0f:f0:db:f5:c9:d6:74:8f:7c:7d:
21:b7:e5:a0:2f:02:35:04:a1:d1:79:34:f8:49:5b:8d:cf:20:
e2:dd:f6:34:82:dc:97:a0:bc:b7:8a:e0:98:be:dd:04:12:18:
79:45:df:c3:6c:8c:62:a0:57:b7:8b:55:f0:93:dd:b5:7a:c3:
52:32:96:cf:7f:27:38:e3:0a:86:9c:f8:6c:d7:2c:4d:1c:78:
7a:cd:69:70:0b:be:eb:20:4c:e4:13:58:1c:67:a3:a2:0b:c3:
9e:24:c5:e7:ca:62:d9:ba:fb:a1:40:2c:80:ed:42:59:7d:0e:
23:5a:d9:e6:9f:68:e8:7e:1d:b7:43:7b:ed:a0:61:6f:c0:8a:
0a:4b:82:28:1b:92:37:be:f8:2e:96:3b:d3:08:7f:ff:87:92:
15:07:cf:a4:3c:90:20:3e:97:93:3b:22:e8:94:cd:ca:a0:2f:
cf:35:2c:ce:c5:d2:54:7b:fa:44:e6:99:15:8d:51:f9:2f:7a:
e2:47:b9:42:7d:16:50:0e:e2:ad:d7:14:6d:f1:bc:d1:19:68:
08:3c:de:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:12 2026 by rpki-client