
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json)
Hash identifier: rshSHEJz8jkZhxfjUrvz0x8YTUk7ql7SitQuXKBTb9E=
Subject key identifier: 86:E3:6E:EC:35:5B:56:47:A5:AB:3A:95:75:9B:C1:8D:8D:36:45:2C
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial: 076A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
Manifest number: 0756
Signing time: Thu 20 Aug 2026 21:41:53 +0000
Manifest this update: Thu 20 Aug 2026 21:41:53 +0000
Manifest next update: Thu 27 Aug 2026 21:41:53 +0000
Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: cavHuwN3QcIS5yYK242hfUblWWWI4Iy04ii4VlahVNM=)
2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: Q7swCwzo9hJZ24gi07aIuTosZazuiPIGE4MruPYbUYg=)
3: 88A31320809211EB938F4016C4F9AE02.roa (hash: b6E7DewMsW5No0gHoGWgtPqjqNVuvoeEo4AmJEYJ2S8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 21:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898 (0x76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Validity
Not Before: Aug 20 21:41:53 2026 GMT
Not After : Aug 27 21:41:53 2026 GMT
Subject: CN=6a8774a1-83e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:dc:35:14:39:10:9a:41:40:f1:1d:4a:b3:
8a:f7:cc:06:21:08:ff:65:07:dd:10:ba:f6:76:5a:
34:d9:2b:d1:1f:2c:78:87:0e:92:e3:4a:2f:8b:a3:
21:5a:59:08:0a:fb:14:f1:be:77:e4:e7:dc:df:e9:
50:03:6f:fa:95:9c:9e:8e:af:7f:9d:75:e9:9c:d9:
89:6a:9b:72:4d:b7:a6:77:a6:7f:bb:91:2a:cb:26:
30:44:f6:2b:9c:55:31:3e:f5:58:a7:9b:71:47:ad:
47:b5:49:73:6f:d8:18:3b:13:68:af:e4:bd:cc:ee:
19:56:ff:ac:d5:f4:59:a7:da:0e:b3:f9:90:a4:d0:
11:17:3e:11:4c:e9:85:f5:5c:14:64:a5:a6:8f:b5:
d5:62:21:cd:3b:72:31:f8:a7:f6:43:05:af:2c:fe:
d3:35:16:29:46:e8:7d:c2:89:4a:a0:90:e5:fe:80:
f6:4c:26:3f:d6:b7:e8:9e:8a:7e:c5:c8:5e:41:71:
3b:1c:e0:b7:0c:69:52:ae:78:57:10:6f:1f:5d:db:
40:e8:c4:6a:06:0a:e3:0e:95:31:c2:da:cb:50:41:
9c:7c:86:d3:6e:02:cb:b7:83:1e:23:5a:62:21:2d:
36:b3:04:70:66:74:a7:5f:b0:50:5a:6a:f7:2a:42:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E3:6E:EC:35:5B:56:47:A5:AB:3A:95:75:9B:C1:8D:8D:36:45:2C
X509v3 Authority Key Identifier:
keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:18:bd:e7:e3:d2:3e:73:4a:c1:69:5a:37:8e:34:49:d4:1e:
ca:3a:8a:3a:87:c5:43:36:8a:f8:5f:0c:df:9e:7a:77:23:aa:
6f:03:27:54:87:1d:1c:d3:6d:57:83:13:c2:1b:73:3e:59:d2:
b8:56:8c:9b:6c:e3:64:00:19:ce:8a:8c:da:16:1e:fe:96:95:
d2:b5:0c:23:6c:f7:89:d5:47:fb:e3:ae:ce:78:3c:93:3b:df:
d3:ec:ba:a1:bb:61:6a:a1:ab:74:ab:58:cc:74:80:21:7a:3b:
49:ba:37:16:1b:ea:3d:8b:35:8a:86:d3:06:5a:2b:3e:78:28:
58:35:6c:8d:7e:a5:a6:18:42:52:b8:99:45:2c:91:ce:02:ff:
86:85:9b:0a:fc:85:74:6c:54:de:b3:37:6f:03:ce:bd:c6:8e:
ee:aa:da:6b:90:bf:58:96:c7:c5:70:26:f0:47:43:23:10:af:
0d:d4:2e:b1:46:94:e3:c5:16:4e:8a:c0:65:f5:04:55:9f:51:
e3:06:d9:f0:49:0b:35:aa:94:4a:16:ac:c1:a1:9c:fc:9b:a0:
92:ce:41:e2:50:fd:a3:43:58:8e:b5:c7:a3:02:56:ca:a9:9d:
52:79:e6:cb:c0:38:41:b4:67:57:eb:4d:10:7e:fc:c8:b6:6a:
59:a1:53:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:49:17 2026 by rpki-client