
$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft
File: 2udQjRHkcijaH-ADJZe70p91iQw.mft (raw, json)
Hash identifier: tprD0Ni4TYImxw/qqWdyEYTencFx06nRxNJaxsxhkbU=
Subject key identifier: 10:AB:B8:96:69:84:72:4F:56:6C:88:39:F4:75:4F:36:9B:DB:C1:91
Authority key identifier: DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C
Certificate issuer: /CN=A91912DD/serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C
Certificate serial: 178A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft
Manifest number: 175F
Signing time: Tue 12 May 2026 16:37:21 +0000
Manifest this update: Tue 12 May 2026 16:37:21 +0000
Manifest next update: Tue 19 May 2026 16:37:21 +0000
Files and hashes: 1: 2udQjRHkcijaH-ADJZe70p91iQw.crl (hash: npA+ponjdKgVe+pQY8kjaphOlczGMeGh0dzsIR76Ta4=)
2: 2FFD1298AC5A11EDA8C03215C4F9AE02.roa (hash: 9GgRZxqaQZcejhwB/9pJZ8cfO+FzBiNgy3V+3DIT4ls=)
3: DCF1073E26B211E9B0DD0155C4F9AE02.roa (hash: fDbYr0EVY0HHpg82DdAQ+a/vYfR5r/kAjpAM5PF5EpE=)
4: 2E0A645AD3B211EF83FA102FC4F9AE02.roa (hash: WMKhPELFr7sydQirrifvcLQGLjTAgGeSRNjGOKEEwqU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl
rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6026 (0x178a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91912DD, serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C
Validity
Not Before: May 12 16:37:21 2026 GMT
Not After : May 19 16:37:21 2026 GMT
Subject: CN=6a035741-f07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:60:c0:2b:e8:58:c5:ed:d6:8a:18:9d:ac:
3c:77:18:65:b2:d1:02:b3:3c:5f:a5:a3:bb:fb:0b:
35:ed:1b:e5:0a:bc:41:2d:0e:20:c8:80:e2:85:96:
9c:2d:6e:6a:fc:eb:d4:20:bf:d5:f4:d9:61:fa:17:
0b:a1:3c:1f:c4:57:40:20:5c:d7:f2:9c:ec:b6:6d:
03:e2:77:fb:05:01:a2:52:0b:2d:1b:a4:ed:a3:b9:
6a:be:91:21:64:19:dd:79:ce:24:d0:d2:60:83:9d:
d6:4b:1e:ff:c2:7c:f7:ba:24:09:9d:4d:c2:90:e2:
0e:a8:66:b4:d8:ee:ae:ed:32:05:23:e0:9b:5e:b5:
6e:01:76:83:94:ba:fe:85:b4:a2:c5:59:e2:df:17:
10:c8:cf:1e:da:48:15:67:9b:ca:91:01:f2:9b:e6:
d8:4b:87:27:76:36:ea:38:70:a8:4f:38:b3:ca:40:
27:fa:9a:b3:10:d0:a2:70:b6:2c:2b:b5:fd:c6:fe:
5f:63:8b:2f:c0:bb:c6:68:21:99:fa:5c:9f:3e:cd:
af:a4:4e:84:6f:11:dd:dc:1e:f0:8c:da:a8:ab:60:
cc:3d:88:fd:6c:ce:98:01:d4:aa:d7:b7:4b:0d:17:
d5:4a:f1:dc:f0:13:50:0d:c1:49:3e:2e:b3:0e:6e:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AB:B8:96:69:84:72:4F:56:6C:88:39:F4:75:4F:36:9B:DB:C1:91
X509v3 Authority Key Identifier:
keyid:DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:da:c1:73:15:1b:68:eb:6e:e9:d7:b2:dd:e7:59:25:13:c1:
89:64:dd:33:8b:5b:4b:a1:49:ac:52:47:60:e4:33:19:a4:1e:
8e:76:03:a4:91:73:2f:0a:28:2d:33:4a:ea:31:2f:e1:a2:87:
9e:97:b1:d3:d9:38:cf:1e:16:b4:4e:f4:39:1c:40:ab:42:c3:
52:39:6f:6c:04:89:a4:73:a0:cd:9f:27:c7:b4:91:15:9a:d0:
ba:6e:a8:ff:8d:7b:66:5c:aa:5b:8a:37:2a:4b:2d:38:a2:c1:
37:21:fd:f2:57:75:4c:ea:68:b2:98:91:d9:42:17:45:2e:8d:
8e:c0:82:0f:99:73:99:e8:e7:87:9c:82:06:25:7f:a1:23:e5:
78:f5:bd:59:28:08:ba:1c:a9:59:f2:25:31:83:8a:90:a8:35:
79:89:80:ca:95:57:14:81:79:0a:cb:14:02:6e:3d:1e:51:2e:
68:18:b5:6d:91:ee:b1:43:d1:c5:56:6f:82:dd:ac:ae:61:e1:
d8:d0:39:7d:e6:85:07:9e:c3:e2:bf:16:1b:ba:c0:6f:83:a3:
77:d8:20:bd:7e:bb:0d:d0:91:31:0e:a5:e1:fe:9d:8c:ed:41:
c4:96:75:65:0a:e2:0f:7a:76:9a:cd:52:4d:ca:40:9e:89:d8:
7f:bb:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:04:19 2026 by rpki-client