
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json)
Hash identifier: Qlu7zPUX7tZw8lq7hLnYxY9UBNqZx4N7aN4bVgwTb1Y=
Subject key identifier: CE:DC:3D:A7:35:37:7E:9B:23:96:F0:E3:0C:08:D0:78:C2:F4:C6:88
Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
Manifest number: 01B6
Signing time: Thu 23 Jul 2026 05:29:27 +0000
Manifest this update: Thu 23 Jul 2026 05:29:26 +0000
Manifest next update: Thu 30 Jul 2026 05:29:26 +0000
Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: JPwNSQJvTSlA62UzpiyQDmufkNEC0KtyTfdJd9epJiQ=)
2: 1B7430784BD411F1A6EB1F4394833773.roa (hash: oe2ZCXIQb92ROAH/nNeoR+2JzTpi9XU0AorFDG3Oc4Y=)
3: DAF8A746E01B11F097920A16646F56BC.roa (hash: ddW0Ynay18N2vbuqKbzQBFWoQChkJES43ys+thhHWto=)
4: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nQQCvcP4Ab62KnLuqB+2dhOJymAwNDUrlbhEiMGFBCY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Validity
Not Before: Jul 23 05:29:26 2026 GMT
Not After : Jul 30 05:29:26 2026 GMT
Subject: CN=6a61a6b7-ee04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:99:32:d3:94:7b:51:8d:96:de:15:a9:8e:
a3:0e:89:86:1c:1b:81:94:bc:51:bd:41:53:79:e7:
4b:0e:52:d8:c9:a4:66:0f:f4:df:d4:aa:dc:ad:05:
ed:79:58:3a:58:7c:25:22:f9:98:ab:f9:80:bd:39:
ee:e7:8e:c9:81:3e:6d:16:15:24:14:50:a5:e0:bc:
a9:7a:87:76:e4:7b:bb:fc:cb:44:b1:36:f7:ad:42:
62:66:95:57:e0:c1:d9:17:24:8f:db:18:de:cb:cd:
08:36:b3:a4:fb:85:4b:50:b3:c1:15:86:c7:eb:84:
b7:2c:2c:bf:0c:05:6f:a9:4f:ea:10:88:9a:ac:37:
e7:2c:23:c0:f2:a7:96:6a:25:2d:2b:01:d5:f8:48:
6e:72:d0:ad:ff:b4:0c:00:c1:8b:d3:27:41:ce:95:
9c:29:e5:82:bf:33:ec:c2:1e:f1:a1:a5:7b:84:21:
cc:e5:fe:f4:26:1d:c3:91:26:05:b5:b3:31:55:c8:
84:52:74:79:f6:27:29:7c:65:99:46:b0:75:cb:47:
76:25:b5:2e:2c:1e:6e:65:5b:9c:62:36:12:8b:fe:
ae:f3:97:7f:2b:58:f7:9a:9d:14:91:e4:b0:18:fc:
45:5d:1c:c6:12:e7:7a:c9:91:ff:76:b5:32:8a:d9:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DC:3D:A7:35:37:7E:9B:23:96:F0:E3:0C:08:D0:78:C2:F4:C6:88
X509v3 Authority Key Identifier:
keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:3e:3c:9b:b0:b6:ff:84:79:c5:40:a6:0b:7b:99:40:69:be:
4e:42:4d:68:45:97:7f:e7:f5:b0:f8:29:db:d4:84:e3:4a:55:
ec:87:32:b3:f0:ab:05:b7:2d:02:48:07:0c:36:44:27:03:cb:
ec:3c:59:33:db:63:02:46:5b:7b:0a:75:c1:1c:0e:85:33:26:
37:22:8b:1d:ad:a3:18:ee:f2:93:19:2b:f0:e8:b1:5f:fb:07:
1b:73:44:3f:dc:79:c6:8c:e7:74:a7:13:71:f0:34:45:a4:69:
54:cb:78:05:01:59:49:d4:f2:05:60:49:86:86:b8:04:64:f0:
2e:d2:08:4f:15:86:73:f0:e5:38:9f:4b:c2:3c:c2:45:28:9a:
d6:a5:04:f4:73:29:1c:83:5a:37:f4:fa:71:4d:2e:62:d4:10:
56:55:f6:6a:dc:ca:18:14:e3:da:d3:16:c2:e3:ce:ac:bd:2a:
5c:f2:ee:4c:b0:f3:4d:47:59:7e:3e:ce:4d:70:5c:72:38:93:
6e:f8:40:e5:c8:90:11:15:56:49:ec:b4:86:89:ea:d3:f9:8d:
43:cf:2d:78:0a:4f:81:a6:14:1d:ca:7c:dc:5e:ec:51:43:ab:
74:1c:6b:96:b4:a2:be:f3:5f:70:b0:b4:9c:c8:6f:23:d1:18:
be:2c:bd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:23 2026 by rpki-client