
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
File: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft (raw, json)
Hash identifier: XkwHZIXIc1o5WaxZYYIEMEJKyxnLsSRw6lhlY21kSL0=
Subject key identifier: 9F:13:97:E0:E3:36:92:46:BB:41:59:7F:17:EA:31:6D:BB:92:B3:75
Authority key identifier: D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
Certificate issuer: /CN=A91758EC/serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
Manifest number: C8
Signing time: Thu 23 Jul 2026 08:50:22 +0000
Manifest this update: Thu 23 Jul 2026 08:50:22 +0000
Manifest next update: Thu 30 Jul 2026 08:50:22 +0000
Files and hashes: 1: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl (hash: wJ3Ga30im6zlRQZZNfx1RgyHbohGNTz8hxeFW72CAmc=)
2: 1B34EF06FC1C11F0AA0D3BE4396F56BC.roa (hash: iqYV9/xnKXVfiZZcxAVxMjO3LAkmh0lLnZhQciHJSJg=)
3: 1AC14F60FC1C11F0AA0D3BE4396F56BC.roa (hash: aYDnHlZZ14KegbsrCL1Glj9EDgxGx2Y0U5BoskwOni4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl
rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758EC, serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
Validity
Not Before: Jul 23 08:50:22 2026 GMT
Not After : Jul 30 08:50:22 2026 GMT
Subject: CN=6a61d5ce-f56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:db:f4:cb:1c:05:fc:9e:4e:25:d8:2f:18:
14:72:ae:e2:bd:15:f8:f9:dc:bb:f2:19:7a:5d:36:
ca:d6:93:06:5d:49:9d:d2:e0:23:30:8a:16:60:b6:
e0:49:0e:8b:ca:c5:9c:1a:44:32:c1:69:b5:35:c9:
3a:56:3f:bb:2c:35:19:95:c6:86:c6:5a:c6:41:90:
af:5b:98:da:58:47:39:8b:e7:5f:8a:cf:ce:fc:4a:
26:cc:a6:09:f4:38:4d:88:ad:34:66:69:66:aa:b1:
3a:0f:06:43:a0:df:7a:ee:e2:e6:57:e0:69:fe:69:
0d:a0:36:8c:dc:12:40:6d:75:4c:83:41:3d:cc:a3:
08:33:bd:44:c2:d9:02:83:05:05:c8:8e:2b:1a:7f:
1a:d9:37:af:1f:18:10:ec:b4:08:c1:7a:2c:0e:aa:
18:29:f8:3f:75:63:7c:d3:a2:f8:06:dd:b4:84:01:
74:4e:d9:81:b6:30:bf:0d:fe:b4:46:a6:2a:90:77:
71:bd:28:2e:83:ca:ce:12:2b:6f:2e:71:e0:6a:5e:
ef:32:dd:f0:95:9b:b0:24:2b:5f:74:a3:a6:e8:3d:
02:10:a3:7f:10:e8:f7:8d:7f:90:a8:c9:00:90:1e:
42:05:2a:22:08:34:54:f0:3d:bb:40:d4:f7:e3:65:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:13:97:E0:E3:36:92:46:BB:41:59:7F:17:EA:31:6D:BB:92:B3:75
X509v3 Authority Key Identifier:
keyid:D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4e:a8:fa:42:51:ef:99:32:2f:5e:e3:19:21:ee:fc:02:08:
2e:e9:af:e0:37:3a:da:e3:5a:64:63:b0:25:2e:c9:21:31:fd:
50:7f:21:a6:ab:e6:01:95:a4:d5:06:83:0d:88:51:4a:97:c8:
c8:26:b7:6b:bf:64:36:4d:7a:7b:2c:9f:5a:50:c3:d0:85:39:
c9:6e:f3:eb:4f:b1:60:b0:0b:0e:41:8c:12:02:a6:0a:26:fc:
f9:5e:56:44:75:71:dd:2f:43:d3:4d:02:dc:2d:7e:1a:e5:b9:
3c:eb:74:ee:0c:0e:5e:ff:df:88:f3:2f:a4:2d:6f:f4:cb:39:
00:10:55:34:db:f7:12:68:4f:51:54:a4:86:45:9f:29:fd:7c:
58:7e:87:35:91:e6:03:17:fa:e7:27:72:0b:35:cd:b0:cd:44:
98:3d:65:70:cb:c1:05:f8:5f:97:7d:b3:ff:2a:56:03:8a:ed:
9e:99:b1:90:de:39:9b:4e:7e:02:f6:eb:15:d5:b2:f2:9c:ce:
cc:1a:09:b6:37:87:ef:89:c5:1b:f9:78:75:49:5e:09:5f:4e:
43:83:8b:25:7c:1d:5e:c6:86:e8:89:55:18:eb:c8:c3:05:7b:
03:84:62:af:f9:26:76:cf:8d:e1:7d:d7:eb:be:71:6d:67:be:
0b:7d:c5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:12:49 2026 by rpki-client