
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json)
Hash identifier: gLTnkNf5cV980Z5xtezMOF/0Npv2HhnP8TopLa5Fn2E=
Subject key identifier: 07:2D:66:98:7D:19:A6:43:2F:38:77:E7:9B:44:18:4F:8D:D8:9D:FB
Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Certificate serial: 0E07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
Manifest number: 0DDC
Signing time: Tue 06 Oct 2026 17:58:34 +0000
Manifest this update: Tue 06 Oct 2026 17:58:34 +0000
Manifest next update: Tue 13 Oct 2026 17:58:34 +0000
Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: itPe5U/tshVsynubiHUGQHTtJKaUxps1oblTZ4aKHSQ=)
2: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: v/cYedkAqRKh3ztstNufD8S6zF7j1cUxZPyvJUeefHY=)
3: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: BGhkN0LDIdO9R5rWchzdTcKrPQRLiD8mPb9ml74T/wM=)
4: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: 1LoYhNhbrJS2K/AOCU0/gnT+ZLyx3HtIk+zT/REHe2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:58:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3591 (0xe07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Validity
Not Before: Oct 6 17:58:34 2026 GMT
Not After : Oct 13 17:58:34 2026 GMT
Subject: CN=6ac536ca-65e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e2:2f:1c:0b:02:97:5a:51:2d:40:c5:f7:85:
52:65:96:31:8a:08:1c:33:f8:e3:25:41:fb:af:30:
73:f0:c6:34:13:3c:77:2e:cb:f1:9a:ed:7d:37:3c:
f9:ad:99:f5:5d:65:02:af:0e:bb:67:c6:c4:71:8e:
d1:dc:41:2a:7c:bb:82:57:a3:12:8b:47:54:48:37:
34:24:8e:4c:ce:d0:d8:2b:42:5f:25:9b:d6:3a:8a:
04:e8:aa:89:fa:10:0a:9f:ea:1e:4c:4a:e2:38:bb:
da:89:71:ce:80:fa:7e:9c:91:e8:25:f2:15:59:ce:
79:ee:42:15:60:1a:d1:b4:6a:ca:a4:6b:64:5c:5b:
59:3f:1d:33:53:03:ed:aa:7f:89:83:56:b4:31:80:
f2:cb:d5:ba:bf:3f:8e:f6:4f:e2:ae:1d:f4:e9:ed:
12:b2:3f:c3:5d:ea:af:c3:b3:14:17:03:9d:83:03:
0c:76:e8:31:47:b0:db:c6:df:de:aa:e7:8d:43:b3:
46:76:a9:36:89:e8:fa:f8:a3:c3:87:84:b0:e4:01:
ee:e9:0f:da:f6:b8:3e:57:c1:cb:c1:9b:c3:94:90:
58:b2:07:bb:07:a6:67:59:0b:5e:ec:f6:04:a8:11:
b1:5b:77:9e:c7:09:19:9e:63:32:b6:e9:91:d0:80:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2D:66:98:7D:19:A6:43:2F:38:77:E7:9B:44:18:4F:8D:D8:9D:FB
X509v3 Authority Key Identifier:
keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:a0:44:f5:48:4e:8b:e9:8b:31:bd:c5:59:8b:05:d5:de:af:
60:7b:ae:3f:67:c7:af:25:34:89:2a:11:35:48:64:3c:1b:8b:
ba:79:26:0f:52:d1:b7:37:2d:3f:55:ca:f0:47:19:11:b4:20:
c4:cd:29:d4:d4:12:ed:04:36:74:f2:5b:40:d0:51:4a:a7:f2:
e4:92:ed:54:66:0d:20:9c:1e:42:1a:b4:6b:fb:7a:29:62:0c:
0c:b1:10:ba:a4:78:0c:22:c7:e7:fb:9b:cc:5a:56:18:5b:45:
de:c1:06:5d:c7:9d:68:1d:cd:7b:c4:3a:26:5f:d4:69:02:05:
4a:35:8f:43:1e:c8:33:35:f4:dd:62:30:bb:42:2b:fc:00:35:
24:a7:75:f6:2c:a3:b4:9c:f7:61:ab:2f:20:d3:60:3a:a7:b3:
d9:2e:cc:3c:5b:b4:f5:70:9b:aa:99:8b:26:07:a8:b4:dc:4d:
09:14:c5:96:94:a1:a7:46:fc:26:9a:ce:07:46:7d:51:a1:a9:
29:07:50:cb:97:c6:73:40:a8:0a:02:e9:35:aa:a2:93:54:45:
f1:27:ae:ff:9e:88:8d:b0:24:75:ac:a9:b7:20:4f:45:04:82:
5d:53:63:83:f3:10:b0:e7:cf:5a:d6:0a:f6:95:31:5b:83:89:
f5:57:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:09:05 2026 by rpki-client