
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
File: R2e2k72EYu6vqD2egDydKGtiHcg.mft (raw, json)
Hash identifier: lT3km/ZqpCjBY0zaE6hJCvCFg35EBRiwmjb95SoiGvo=
Subject key identifier: 8E:BA:5B:22:1D:79:7A:89:E9:E7:78:8F:3A:73:E8:35:43:DC:EC:25
Authority key identifier: 47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8
Certificate issuer: /CN=A91F9B6C/serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
Manifest number: FC
Signing time: Sun 05 Jul 2026 06:54:59 +0000
Manifest this update: Sun 05 Jul 2026 06:54:59 +0000
Manifest next update: Sun 12 Jul 2026 06:54:59 +0000
Files and hashes: 1: R2e2k72EYu6vqD2egDydKGtiHcg.crl (hash: Y89YlOESn7PyAZnxWkur3QBv9ykzPvFTLnc6afVihXQ=)
2: 3D60B6FCFA5E11EFB84AF068C4F9AE02.roa (hash: NN7TdFNt1WRW/52kOM2Hp51nX3VWKqgOLsvUo4lFNA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl
rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 05:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9B6C, serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8
Validity
Not Before: Jul 5 06:54:59 2026 GMT
Not After : Jul 12 06:54:59 2026 GMT
Subject: CN=6a49ffc3-457e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:17:94:90:38:ad:f6:b3:97:d4:e2:e1:1b:
f6:0a:38:3a:36:1a:8f:6c:32:b1:da:fb:b7:ac:f9:
71:15:16:80:a1:6c:4f:82:ff:24:5f:c0:94:66:02:
9e:67:e3:03:a6:4c:66:52:b1:f2:05:70:f2:65:dc:
07:5b:a0:71:0e:75:9f:20:cd:98:4d:fd:e7:1f:9e:
23:53:4f:41:b7:29:38:ad:71:97:85:f0:d7:bd:b2:
fe:a4:c3:3f:25:26:6c:95:c5:dd:eb:2b:9e:34:86:
28:96:b1:96:a9:33:2d:47:59:a4:7c:fd:0f:c6:8f:
4f:2c:56:4c:2d:6a:f4:1f:50:be:89:d4:13:fb:f3:
2d:f6:52:16:68:da:34:02:fb:1e:a1:4b:6e:92:5b:
f0:e9:33:07:36:ff:31:1a:d9:22:7d:08:2a:af:c8:
b0:95:c3:a4:40:e5:18:14:c3:53:f4:34:ab:61:56:
21:6a:ef:da:6d:41:f5:6b:78:c5:22:68:74:4c:94:
9d:49:42:25:fa:96:74:f4:50:65:81:01:8d:b7:99:
65:d7:38:ef:ee:c1:c3:9f:59:bc:f0:ed:7f:ad:68:
43:cb:d2:e3:fd:7a:ed:8f:0b:b6:f0:68:78:1c:46:
4d:c4:f5:5b:a7:25:ba:34:ea:35:86:29:ee:da:a4:
07:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BA:5B:22:1D:79:7A:89:E9:E7:78:8F:3A:73:E8:35:43:DC:EC:25
X509v3 Authority Key Identifier:
keyid:47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a1:88:1d:ac:8f:86:12:f0:b1:3c:ba:8f:79:6e:bf:c1:a0:
55:91:1a:a1:39:c9:23:79:60:fe:58:0e:d2:da:a1:29:37:f4:
0e:c6:9b:d5:50:23:18:96:64:0a:2c:34:1c:05:f7:ae:d6:d1:
6c:42:88:56:54:7f:96:5b:66:0b:8a:04:de:64:5b:13:cf:62:
d1:8c:a6:41:99:51:21:b1:41:a0:47:4d:26:0e:93:92:89:af:
37:22:df:bd:59:f1:71:65:2a:ae:77:fd:e8:54:31:b5:4e:13:
bc:25:08:64:d9:a4:a4:42:00:d2:30:6d:6e:fd:11:4a:5a:7a:
47:a3:9a:30:c5:04:0b:29:43:4e:0a:b7:ad:6d:66:84:25:9b:
8d:91:a3:6f:ac:ea:bf:54:63:c0:39:87:13:7d:f0:cb:21:3b:
b1:32:25:19:c7:49:f9:4e:d4:b5:94:a3:da:90:8d:99:af:4e:
fb:e4:2b:a9:9b:6f:b7:b8:45:a6:91:d7:e3:92:31:86:2d:8e:
e2:94:47:1e:79:7b:58:be:28:02:0f:14:02:7e:4f:bd:5f:7b:
76:1c:0d:b5:ca:85:de:9f:69:09:a1:a1:ff:21:6e:35:da:cc:
aa:a2:47:0a:42:77:9b:5c:59:de:86:b4:44:89:39:56:4d:7f:
14:b0:0a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:15 2026 by rpki-client