
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json)
Hash identifier: 24+DNl+Ysl+TN0XxJTT2HAun/7edFz9WmFNSsBeXDNY=
Subject key identifier: FC:84:2B:E8:F8:A7:80:FE:B8:D2:02:78:99:56:4E:8B:54:08:E1:EA
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
Manifest number: E0
Signing time: Thu 23 Jul 2026 08:18:44 +0000
Manifest this update: Thu 23 Jul 2026 08:18:43 +0000
Manifest next update: Thu 30 Jul 2026 08:18:43 +0000
Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: SnuNyYwurKCftBhXb7NTAoXdFUMVqrEO6PYT/BrJPJY=)
2: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=)
3: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Validity
Not Before: Jul 23 08:18:43 2026 GMT
Not After : Jul 30 08:18:43 2026 GMT
Subject: CN=6a61ce63-cebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:ac:b5:9a:61:cc:9f:ab:c6:dd:4c:c9:2b:
7e:92:37:c3:6e:c4:04:34:aa:32:e1:e0:2d:ec:09:
2e:9e:61:33:bc:0e:62:2b:f9:2e:3a:da:e3:8b:68:
cd:cd:69:2a:f8:6c:1b:ee:5c:41:fb:51:0d:da:0e:
0a:ba:17:75:f9:17:f0:46:f2:a5:29:22:9d:38:a9:
62:e3:6b:40:a1:85:2f:6b:ab:c9:43:26:27:6f:28:
30:1f:39:6d:6a:cc:35:17:be:11:33:61:60:f9:33:
b5:96:ed:a9:54:7f:8b:d3:40:3b:de:67:23:d5:b9:
f9:9f:d0:b0:e6:94:ea:a4:16:b6:e8:58:30:e0:b1:
24:43:0a:f8:f7:d2:59:79:71:9a:38:69:c2:5f:c6:
b3:e2:f1:7f:13:92:79:51:4f:17:49:75:ac:57:ee:
d2:c0:fc:4a:b0:7a:a8:4a:10:69:9d:d8:53:a0:01:
29:f9:da:8f:c2:fc:70:32:03:63:af:79:44:22:3e:
68:81:8c:6f:a5:85:aa:a8:20:0c:62:b4:71:47:43:
2c:32:12:95:01:1a:1d:ef:3e:cd:28:05:d1:ad:dc:
4e:5e:94:0e:39:ed:b2:99:99:ad:3f:38:df:33:a3:
68:ca:36:69:f8:e7:a8:2d:e1:85:a6:7e:ff:53:f3:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:84:2B:E8:F8:A7:80:FE:B8:D2:02:78:99:56:4E:8B:54:08:E1:EA
X509v3 Authority Key Identifier:
keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:b2:5f:30:78:91:ca:47:96:48:63:75:0e:cc:34:31:4c:13:
f3:38:2c:f8:d7:d1:65:18:b7:96:60:0e:52:81:bb:7f:47:a4:
ca:35:4d:b7:ab:3a:d1:c5:62:d8:38:92:33:be:1a:80:55:43:
f8:d6:fc:14:22:bc:69:21:79:31:51:80:67:99:fc:56:fa:85:
2c:e2:6e:59:e5:cb:d5:a3:1c:fc:68:a1:f0:b4:76:4e:7d:7b:
63:df:7a:26:98:7c:6a:2e:46:e1:0c:aa:a8:7d:90:0f:14:b7:
62:de:64:9e:a5:11:3c:5c:71:ad:83:87:a5:39:10:80:ef:66:
3e:70:fa:99:e4:0f:ff:ea:e6:ba:03:ee:fb:a2:ef:29:cd:a6:
26:da:21:d5:9f:e5:5f:4a:ee:16:5c:4b:ef:4e:d6:08:40:8f:
42:76:19:0d:66:31:45:cd:65:f2:6e:19:fa:b1:ff:9c:1f:13:
3a:7e:2c:92:17:30:c0:dc:5f:6e:fb:2b:47:31:8c:26:c5:96:
d0:39:2b:a5:7e:9f:f7:7e:11:0c:4d:cc:ff:8e:c1:2b:a0:43:
52:79:05:c0:56:3e:9b:8b:c4:2a:33:15:81:c8:91:3c:82:41:
40:4e:4c:ea:bc:10:f4:65:f1:63:6a:fa:b8:6e:44:01:54:12:
14:0c:4f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:41 2026 by rpki-client