
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
File: t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json)
Hash identifier: Vcnpyn/6sFKUe4rPCutaySmdwwzfzNSlcEefHtgkTNg=
Subject key identifier: 5A:ED:30:7C:6F:83:C1:58:C7:85:7A:52:A9:96:AD:9C:BF:A4:9F:A7
Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35
Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235
Certificate serial: 080E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
Manifest number: 2E73
Signing time: Wed 20 May 2026 16:23:16 +0000
Manifest this update: Wed 20 May 2026 16:23:16 +0000
Manifest next update: Wed 27 May 2026 16:23:16 +0000
Files and hashes: 1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: 6TFNCA3gROjVhkcekIICVB/YgYsk7XBVEahYtmSxDlg=)
2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: 5xZOfUroHpeE/D4uGz1bEl15IcZj3gdTHW1LZL25guE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl
rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235
Validity
Not Before: May 20 16:23:16 2026 GMT
Not After : May 27 16:23:16 2026 GMT
Subject: CN=6a0ddff4-e096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:70:43:a8:96:76:83:25:ad:36:2c:5a:fc:
15:cf:a8:be:4f:ab:c1:b7:7b:69:19:19:73:64:e7:
50:d5:8b:44:35:16:e2:6e:0c:e7:17:39:7c:1f:af:
43:f0:7c:70:18:fb:cf:84:ce:1d:c1:9c:55:19:a0:
72:fd:f9:72:80:a6:9b:8e:36:8a:25:4b:ad:fd:08:
50:8d:20:cc:91:bf:3f:d1:ec:cb:be:df:53:79:68:
8d:4f:14:bf:64:56:b8:10:d6:f6:8e:a7:e9:37:49:
8e:e7:64:c7:18:32:5b:aa:de:ec:d1:2f:cb:3e:6e:
3f:5a:b8:bb:d2:64:d6:1c:ee:41:a4:56:90:e7:e1:
fb:08:50:dd:f8:56:0f:a7:71:c3:c9:ce:5e:e4:3f:
2d:56:db:72:2b:a6:aa:b1:27:01:10:61:c8:77:bb:
e3:3b:8b:32:82:f4:b9:0b:11:a8:17:d9:06:8f:0f:
b3:e5:30:66:6b:18:2e:9d:5a:5c:4a:57:70:9a:d7:
61:67:f9:d3:eb:47:ed:1d:92:dd:96:ac:42:ae:9c:
cb:b4:52:d5:61:4d:02:85:46:d3:65:77:e0:53:a4:
64:75:c8:6c:80:12:11:51:4a:38:6f:b1:3d:d8:60:
6b:24:e4:13:c9:98:1d:28:57:a0:7d:87:04:80:57:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:ED:30:7C:6F:83:C1:58:C7:85:7A:52:A9:96:AD:9C:BF:A4:9F:A7
X509v3 Authority Key Identifier:
keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:3e:51:a0:c7:4a:cb:01:ae:44:bf:54:7e:13:ed:aa:72:d4:
c6:b0:73:66:3a:41:9f:44:a6:6c:97:77:19:8f:e8:5c:03:f6:
f3:0c:91:c9:90:9e:76:8c:4f:da:e1:17:9c:e4:3e:a1:5a:42:
c2:53:72:49:29:12:e5:36:a5:82:73:f5:7b:5d:e3:e2:97:9a:
72:69:d7:a4:af:5f:2f:95:3d:c8:31:e5:fb:6c:2c:e1:a4:61:
86:c1:32:be:0d:48:f7:41:2a:95:29:15:ff:f2:26:59:63:3f:
c1:64:7f:42:67:b0:92:19:1e:c0:85:f1:4e:5c:ff:65:f5:98:
12:f8:fa:e6:26:7d:90:4e:f1:ea:f9:9b:de:75:72:a5:da:16:
32:6f:c5:46:7b:b0:6e:96:15:4a:a7:31:57:b4:f0:4f:c6:4c:
cc:e3:b8:5f:68:dd:c1:dc:8e:bd:85:10:f5:dc:6a:e1:f3:c6:
ef:d6:5a:f3:85:77:90:c1:ae:d8:77:cb:ce:87:64:8c:1c:cd:
ba:ff:da:2c:a5:0d:17:f3:bd:4d:0b:52:4b:fc:7b:2e:c7:82:
3c:05:d0:26:46:6b:ee:18:67:6f:fe:a3:8c:85:7d:c3:5b:4a:
db:52:39:8d:20:62:94:94:37:c9:56:3b:5e:ff:6a:04:4a:34:
07:f7:fe:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:38:32 2026 by rpki-client