
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json)
Hash identifier: Br/3zWSfCyRVP0BcET2laD5ibRRWwwox5EFJaBxl5V4=
Subject key identifier: E1:95:6F:5F:96:D1:EB:08:9C:3A:A5:C9:EE:E5:14:F3:00:67:97:EE
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial: 0737
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
Manifest number: 0725
Signing time: Wed 20 May 2026 21:56:37 +0000
Manifest this update: Wed 20 May 2026 21:56:37 +0000
Manifest next update: Wed 27 May 2026 21:56:37 +0000
Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: BeTpXwNCQeR+aqbqA8IBcDfZ2O7S+yxCOud4sofT4Qs=)
2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: rQHi52MocQB/prtSJtGO8uedEqwHLU7/+mRUSwiw+1Y=)
3: 88A31320809211EB938F4016C4F9AE02.roa (hash: hQTt0AFzBYtxdeGsE5h3TYl3htX01dC5soXQmdrd9Fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1847 (0x737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Validity
Not Before: May 20 21:56:37 2026 GMT
Not After : May 27 21:56:37 2026 GMT
Subject: CN=6a0e2e15-58cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:91:38:0f:75:18:b6:ab:87:59:41:9f:d7:
65:40:53:28:21:bf:07:6d:9f:89:e4:8c:98:ac:56:
7a:7e:f9:7b:72:77:96:84:51:ea:26:d9:0b:57:f8:
0d:22:56:59:0e:71:a2:9e:27:d6:42:45:08:de:de:
33:0e:a1:4e:a0:39:bf:91:7c:d1:bb:d9:63:a2:aa:
cd:f8:bd:cc:cd:93:86:b1:77:26:ef:ce:06:fa:a6:
09:c5:b5:5b:c8:8b:73:67:5f:96:3e:f5:bb:98:c6:
6e:0b:0f:cc:16:ad:e3:24:16:ee:cf:69:ae:8e:e9:
f6:c2:4a:bb:18:18:74:29:ed:2b:e9:89:af:ce:a5:
97:80:c9:57:90:bf:9f:4c:21:83:9d:d1:25:ca:21:
ff:57:44:41:f5:10:22:c7:be:8e:0e:0b:fc:4c:41:
4f:10:05:8b:d4:06:e8:c0:86:f1:f1:95:36:c3:bd:
da:1d:b0:b9:2c:4d:5d:d5:0f:f4:c3:cf:78:e5:96:
ff:0c:18:ee:61:54:f5:08:b8:d1:8d:3b:3c:ad:ea:
e5:49:c1:24:5d:57:0d:57:1c:2f:64:48:e0:45:c1:
fb:a6:65:ab:7b:79:8c:32:76:13:18:e2:d5:4e:a2:
37:15:fb:3f:7f:1c:60:47:30:10:65:09:9b:7f:24:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:95:6F:5F:96:D1:EB:08:9C:3A:A5:C9:EE:E5:14:F3:00:67:97:EE
X509v3 Authority Key Identifier:
keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:e0:47:0b:fe:16:29:96:cd:47:3c:35:42:fb:d4:f1:68:c5:
01:4e:4d:83:cd:a7:46:64:a6:e7:cd:ee:c8:37:6d:92:03:46:
ed:ce:26:04:02:ab:7c:62:e2:74:4d:0c:e4:c1:20:15:3d:21:
b4:1b:77:3d:04:7f:73:65:14:5e:d5:b3:e6:c9:f4:53:6e:d0:
94:30:ec:ee:ef:39:e1:5b:cc:b1:28:fd:da:a2:d4:0a:fb:10:
66:c0:ad:07:7b:f3:f0:b8:a4:0f:9d:cf:89:4e:db:17:0b:18:
64:7a:6f:25:eb:8e:1a:db:b0:6b:a8:75:e4:5d:da:22:ba:a1:
92:9d:3e:af:27:cf:f8:64:a3:12:98:22:c8:6f:42:3e:31:33:
22:80:fe:ad:6a:c7:db:6e:74:5d:66:1d:3d:5d:35:f7:9b:5d:
54:6d:34:e2:de:4d:68:db:de:ab:95:35:e8:1c:a1:4f:e2:b6:
b8:0f:73:5b:d5:55:26:11:95:cd:76:35:f6:a1:b0:d8:7c:89:
b2:80:1e:6f:76:1e:df:33:68:ae:fc:3d:4e:f8:8a:da:f9:e1:
ca:b9:11:7b:e0:ee:df:0a:2d:3d:6d:9a:50:ea:f6:0a:45:cc:
ae:7f:28:60:dd:68:e8:56:96:9d:6a:92:aa:7a:f4:36:f7:87:
5c:ff:68:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:35:58 2026 by rpki-client