
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
File: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft (raw, json)
Hash identifier: myOIZDWyvjhvsTk6lKHdi3BG49fykQ6sgb9ZPNCv3+8=
Subject key identifier: 59:0B:35:19:CB:14:24:CA:CA:5F:CE:F0:C4:ED:7E:8D:E5:C4:79:B3
Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
Certificate issuer: /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
Manifest number: 97
Signing time: Sat 25 Jul 2026 09:11:28 +0000
Manifest this update: Sat 25 Jul 2026 09:11:28 +0000
Manifest next update: Sat 01 Aug 2026 09:11:28 +0000
Files and hashes: 1: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl (hash: p9954WKataFX/kF739NyLdNqRcEbVZG6DDhq3YRyBbg=)
2: AE11F062738111F18BB794EF6BA30FBC.roa (hash: s9d5gC7hYaCvUgvmb9o9rutS4rMSCmVuPTuxjMy4QDw=)
3: 39FF8508738211F1B422FE586CA30FBC.roa (hash: RPhN7NCY5097529W89+5q3UwkqjueIe7ky2HFF/vGtQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 09:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Validity
Not Before: Jul 25 09:11:28 2026 GMT
Not After : Aug 1 09:11:28 2026 GMT
Subject: CN=6a647dc0-8f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:81:5e:ce:c3:79:ff:c1:c8:b7:6d:2e:f0:
03:41:5e:26:6a:40:dc:a9:e2:68:0b:35:ed:b8:3a:
6f:8e:30:0e:40:16:aa:7c:71:ad:15:8a:9f:fc:94:
9b:ac:18:a9:1a:e7:4d:31:e8:fa:aa:29:7e:af:35:
41:5c:dd:3a:1a:20:c0:dc:34:13:db:0f:7d:05:71:
74:03:a8:38:89:e8:e4:c3:b9:9c:7b:1d:86:55:0d:
b1:68:1b:48:e3:9b:7d:f4:7b:85:8c:c8:78:ea:49:
2b:ea:d7:8f:a3:a8:bf:d8:3b:fd:04:72:bb:14:3f:
a3:14:f1:aa:5d:8c:2c:74:70:ed:97:56:44:48:4e:
04:0e:79:b8:09:1f:d7:b4:91:10:0a:35:70:b0:21:
64:00:88:86:f1:e5:1c:28:64:56:de:1c:fa:07:36:
87:48:07:78:a3:58:20:7f:d5:04:77:f2:f0:e6:06:
20:db:19:57:84:4d:ea:c4:ad:8d:ed:40:04:a4:13:
c8:22:19:6c:09:4b:2d:66:c0:f8:c7:ca:9a:eb:2b:
36:ab:05:08:37:5f:2e:29:37:eb:ec:85:10:ab:20:
b9:46:f4:8b:66:42:43:d3:25:1a:5b:69:4d:90:49:
e8:f4:6c:20:05:44:fd:58:be:19:52:d7:82:fb:2a:
7e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0B:35:19:CB:14:24:CA:CA:5F:CE:F0:C4:ED:7E:8D:E5:C4:79:B3
X509v3 Authority Key Identifier:
keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:29:28:3e:bd:74:f9:84:6c:87:ad:f7:3f:03:b1:72:8c:69:
0c:7d:8b:4c:14:52:83:00:91:ad:c3:fd:d2:77:5a:06:1e:5d:
55:cb:61:95:34:a1:7a:37:8d:59:60:b7:7e:9d:23:31:6b:5e:
e2:0b:15:6c:8e:82:37:a5:5c:94:7b:aa:e6:d6:c7:fd:90:95:
57:14:0e:a3:c4:36:3f:4c:e0:4e:02:a3:5f:bc:c4:fa:de:42:
2e:13:1a:ce:2a:e9:b6:6b:a6:ac:39:4b:14:38:f9:17:cd:bc:
ee:31:98:7a:68:c4:8f:c6:cc:6a:ab:6a:60:14:1a:2c:1e:f3:
fc:f5:80:32:ec:44:33:2c:54:d1:e2:0a:bb:b6:71:be:44:f8:
87:d5:dd:32:fa:f6:58:b0:d5:7b:5d:2d:0f:66:5a:d0:04:4e:
a6:0c:13:b9:06:62:0c:cd:aa:89:50:dd:ea:d2:17:0c:b1:74:
ee:49:2f:3d:65:7e:c5:bf:0a:85:98:53:d3:b4:56:c7:cd:c5:
28:96:59:85:cb:a3:d4:1d:bb:14:d5:a0:7c:93:c0:f9:9a:8f:
54:7e:4f:ba:71:e3:93:2c:8e:a9:30:7b:6b:eb:62:38:3f:fc:
e6:cf:b7:62:21:47:21:4a:3e:96:22:89:b2:a0:9b:04:f5:12:
5b:bb:3d:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgwMkMxMTAvBgNVBAUTKERBMEE1MUJBMjYzMTU3NzlCRjZGODNFRkYwMzRGMjYw
MTA1QzUxMTkwHhcNMjYwNzI1MDkxMTI4WhcNMjYwODAxMDkxMTI4WjAYMRYwFAYD
VQQDEw02YTY0N2RjMC04ZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo3KBXs7Def/ByLdtLvADQV4makDcqeJoCzXtuDpvjjAOQBaqfHGtFYqf/JSb
rBipGudNMej6qil+rzVBXN06GiDA3DQT2w99BXF0A6g4iejkw7mcex2GVQ2xaBtI
45t99HuFjMh46kkr6tePo6i/2Dv9BHK7FD+jFPGqXYwsdHDtl1ZESE4EDnm4CR/X
tJEQCjVwsCFkAIiG8eUcKGRW3hz6BzaHSAd4o1ggf9UEd/Lw5gYg2xlXhE3qxK2N
7UAEpBPIIhlsCUstZsD4x8qa6ys2qwUIN18uKTfr7IUQqyC5RvSLZkJD0yUaW2lN
kEno9GwgBUT9WL4ZUteC+yp+ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkLNRnL
FCTKyl/O8MTtfo3lxHmzMB8GA1UdIwQYMBaAFNoKUbomMVd5v2+D7/A08mAQXFEZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODAyQy8wMjM0NUY5NEE5
QkMxMUYwOTc1NjREMUJDNEY5QUUwMi8yZ3BSdWlZeFYzbV9iNFB2OERUeVlCQmNV
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJncFJ1aVl4VjNtX2I0UHY4RFR5WUJCY1VSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODAyQy8wMjM0NUY5NEE5QkMxMUYwOTc1NjREMUJDNEY5QUUwMi8yZ3BSdWlZeFYz
bV9iNFB2OERUeVlCQmNVUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuCkoPr10+YRsh633PwOxcoxpDH2LTBRSgwCRrcP90ndaBh5dVcthlTShejeN
WWC3fp0jMWte4gsVbI6CN6VclHuq5tbH/ZCVVxQOo8Q2P0zgTgKjX7zE+t5CLhMa
zirptmumrDlLFDj5F8287jGYemjEj8bMaqtqYBQaLB7z/PWAMuxEMyxU0eIKu7Zx
vkT4h9XdMvr2WLDVe10tD2Za0AROpgwTuQZiDM2qiVDd6tIXDLF07kkvPWV+xb8K
hZhT07RWx83FKJZZhcuj1B27FNWgfJPA+ZqPVH5PunHjkyyOqTB7a+tiOD/85s+3
YiFHIUo+liKJsqCbBPUSW7s9YQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 02:03:44 2026 by rpki-client