
$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json)
Hash identifier: akb54Tj/G/lFi/vYR56nXjAm57C/MwOgyevO28DJn+M=
Subject key identifier: 51:F1:0D:41:5F:C4:5E:74:83:4D:CB:08:C5:C6:56:91:F7:73:0A:B5
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial: 0327
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
Manifest number: 031E
Signing time: Thu 23 Jul 2026 02:03:44 +0000
Manifest this update: Thu 23 Jul 2026 02:03:44 +0000
Manifest next update: Thu 30 Jul 2026 02:03:44 +0000
Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: o1GlKB2mN3PyKVf2gLkH/2h3ahCIKFTdpqKNShWgFiM=)
2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: h9XZber2EyFddUowRYB4R36YQps0wInKux9nbzLj6gU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807 (0x327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Validity
Not Before: Jul 23 02:03:44 2026 GMT
Not After : Jul 30 02:03:44 2026 GMT
Subject: CN=6a617680-fa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:87:be:76:8d:54:34:8a:6b:97:d9:41:4a:
98:f6:88:26:32:3c:b8:c7:79:d9:d7:d8:0d:e6:3f:
d5:c1:88:03:3d:b6:08:0d:cb:7e:3a:3b:d3:51:1a:
e9:90:f0:c3:bd:90:b3:80:e8:55:3b:11:ce:4d:8b:
b4:7a:60:cf:b1:bc:83:f2:3b:6c:35:b8:e6:af:3f:
c3:7a:9c:d6:1f:64:8d:d5:4e:b8:f1:fd:17:94:0f:
75:11:13:9a:18:1d:13:53:ad:5c:b8:b7:a7:17:00:
b3:0c:b8:1a:f5:45:a3:9a:e2:6c:0c:b8:53:aa:04:
7e:55:9f:d1:f9:d5:b6:bc:cf:2f:3a:9a:46:28:a0:
0a:a5:5b:95:55:ba:0b:45:13:15:36:b6:18:12:71:
51:1a:cb:ed:b4:bd:ec:04:76:51:d7:ca:da:2d:8d:
67:00:3b:92:0d:dc:f8:bc:df:de:49:66:04:a5:8a:
a8:16:cd:a6:c9:4d:f4:a2:70:42:98:4e:86:e5:d9:
3e:c6:db:30:99:43:e1:b7:2f:a2:83:d2:36:d7:57:
43:90:de:16:01:d5:ef:b3:a9:a8:98:ef:8b:a8:17:
43:2a:b1:d9:10:5d:c2:16:cd:c1:5e:28:60:e5:80:
c3:9d:85:d1:58:b3:a4:31:a1:e2:5e:b4:df:37:28:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F1:0D:41:5F:C4:5E:74:83:4D:CB:08:C5:C6:56:91:F7:73:0A:B5
X509v3 Authority Key Identifier:
keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:64:ce:e6:2b:de:72:a6:57:80:27:68:f4:c8:37:57:a7:a7:
19:47:7d:a3:2a:d2:61:99:64:ae:6c:25:5f:cd:96:58:2d:38:
3c:f2:5e:14:5e:a9:c7:df:a1:8b:95:b9:95:96:58:e6:4e:16:
64:ce:06:e3:64:e0:6a:7f:e7:58:7c:4f:77:f1:6e:b3:4d:e3:
a7:4f:c9:ec:7c:e5:ce:ea:6e:1e:20:df:16:b7:d2:7a:27:2b:
b6:c0:ca:15:dc:c9:61:f2:96:56:3a:e8:e2:67:85:62:b2:45:
e2:32:28:d7:90:ca:de:13:9e:4e:b8:b5:c9:d1:a7:ee:9f:c5:
01:0e:43:44:35:67:38:b1:26:18:d9:67:1b:c3:db:91:94:8c:
0f:a3:b1:77:fa:a8:3e:9c:f6:d9:d9:68:3e:95:8d:b2:f4:24:
08:a5:38:13:65:f1:fb:13:13:e9:5a:0f:92:90:36:da:e1:c1:
6b:a0:5e:66:c4:0e:a7:87:3f:aa:97:07:ea:b0:2f:85:32:a7:
f9:5e:67:b0:37:75:e3:22:8f:30:61:5c:55:b5:96:28:83:43:
9d:82:69:3f:bd:1e:35:3d:ab:e8:61:48:dc:ed:ef:da:14:d8:
32:06:bc:92:e8:7c:3e:2c:21:80:07:84:2b:c7:f2:10:01:d8:
21:0c:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:40:28 2026 by rpki-client