
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json)
Hash identifier: CTSC4Dm9CVEp0GHN+q5FafPQDXhz1w90T0wqs22d850=
Subject key identifier: 0D:80:4A:30:A8:7E:EF:FD:2F:E6:29:B2:38:4E:36:9E:C7:CB:D6:AC
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial: 074F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
Manifest number: 073D
Signing time: Mon 06 Jul 2026 22:23:58 +0000
Manifest this update: Mon 06 Jul 2026 22:23:58 +0000
Manifest next update: Mon 13 Jul 2026 22:23:58 +0000
Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: dyb3eAQ/OfExslVnJmxBsOYfWOtg9qpXKTVtAp5/7f8=)
2: 88A31320809211EB938F4016C4F9AE02.roa (hash: hQTt0AFzBYtxdeGsE5h3TYl3htX01dC5soXQmdrd9Fo=)
3: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: rQHi52MocQB/prtSJtGO8uedEqwHLU7/+mRUSwiw+1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 18:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1871 (0x74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Validity
Not Before: Jul 6 22:23:58 2026 GMT
Not After : Jul 13 22:23:58 2026 GMT
Subject: CN=6a4c2afe-f8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:3f:9b:94:df:c5:90:b6:2e:a2:a0:9c:b5:
33:d7:39:58:89:6c:c2:0c:2d:06:94:df:34:d3:30:
eb:0d:3a:59:f6:f2:a7:d5:b9:5d:31:e9:6f:c8:89:
24:aa:cc:50:b1:5c:98:20:9e:91:c7:c9:3d:25:6a:
b5:fa:ea:e2:d7:dd:60:67:51:91:54:f4:8d:5f:50:
a1:4c:6a:6b:c1:0d:a7:18:64:18:da:65:75:9c:9d:
68:8d:c1:e3:f5:1f:61:b3:4e:e5:f3:fa:91:59:2f:
28:67:d5:e5:e1:ab:60:6c:4f:2b:8b:27:69:b0:86:
c3:ba:b3:72:15:a8:dd:5f:3c:a5:1a:74:25:97:be:
59:6d:e8:89:7d:3e:b2:b3:2c:ce:25:97:44:d8:98:
11:8e:dc:e6:fb:7b:df:03:45:f4:eb:64:48:e3:d1:
ca:5a:cb:f5:a4:45:34:3e:7e:ee:ab:75:ec:9c:7c:
ba:3b:6e:1f:67:68:ab:8d:ab:57:b0:76:3e:e3:b8:
8f:d2:44:db:2f:8b:8c:e9:9d:87:fe:85:02:93:db:
dd:49:80:9d:0a:85:3d:81:e4:b9:f5:ec:c3:0e:96:
e9:55:9a:4a:9d:48:0e:fd:01:ff:77:3c:9e:88:c4:
f6:1e:7b:b9:30:78:9a:65:ea:a2:90:fe:05:5c:54:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:80:4A:30:A8:7E:EF:FD:2F:E6:29:B2:38:4E:36:9E:C7:CB:D6:AC
X509v3 Authority Key Identifier:
keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:71:d8:a6:2e:b3:f8:b9:38:56:39:f8:f3:27:86:f9:02:70:
10:6f:43:ad:78:7d:9b:1e:31:4f:e8:cd:59:9f:09:51:73:37:
f4:6b:be:cb:b0:22:71:09:c3:42:e9:d6:1e:dc:70:fd:b5:34:
ff:19:ce:e2:7b:53:8d:03:1a:1e:6e:84:d4:ee:84:b1:20:34:
f2:ab:37:3f:c3:1b:64:64:de:1c:08:a0:2d:ff:b3:9f:7f:c9:
86:82:13:69:1e:f1:b7:25:d5:7f:8f:79:27:32:20:5b:08:02:
d3:52:78:09:29:df:64:a1:d4:4d:88:54:6e:04:c6:2d:6f:c1:
bd:80:d4:22:9d:02:ef:68:f1:1c:ad:ad:b7:11:92:47:3c:2a:
5f:2e:01:c6:44:f9:49:b0:d2:fe:ba:b2:9e:ab:93:a9:26:a7:
a8:3a:39:2a:8e:96:c4:53:c3:f7:e6:8f:cb:27:dc:c4:67:00:
e4:fe:f6:ab:81:76:9c:3a:0e:1e:5c:c3:9a:47:f2:7b:32:6e:
31:e5:b6:83:3d:e3:0d:09:6d:80:0d:55:d0:cb:fd:e4:32:d8:
fa:c6:8d:da:79:f9:a9:f7:61:a8:d7:bd:e3:e1:d7:15:48:8f:
f4:44:87:78:b1:f1:cf:cd:6f:84:e4:71:00:e0:71:ad:a2:c4:
3b:af:c0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:14:00 2026 by rpki-client