
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
File: 2-mhAMSp66SyzRomcTKN73j-duE.mft (raw, json)
Hash identifier: B7nEhr66JmncwRoR0CIHaR/nbBloCC3fGgsChd4gaG0=
Subject key identifier: 07:30:E8:E7:0F:AE:B7:D0:75:FB:A8:64:84:3A:E0:E6:E5:BD:04:FA
Authority key identifier: DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1
Certificate issuer: /CN=A91AB74D/serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
Certificate serial: 0713
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
Manifest number: 070C
Signing time: Tue 22 Sep 2026 21:51:20 +0000
Manifest this update: Tue 22 Sep 2026 21:51:19 +0000
Manifest next update: Tue 29 Sep 2026 21:51:19 +0000
Files and hashes: 1: 2-mhAMSp66SyzRomcTKN73j-duE.crl (hash: E2E8uoC6ONwBwxByYkbqTpxlmvCG4DPsg5i3o6VFfPY=)
2: A0D57302A33D11EBA479491CC4F9AE02.roa (hash: u5ce3mhL9MTgfMANLqmHFxu4YGZmlzL+s2cu4dHRCdc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl
rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1811 (0x713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB74D, serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
Validity
Not Before: Sep 22 21:51:19 2026 GMT
Not After : Sep 29 21:51:19 2026 GMT
Subject: CN=6ab2f858-30a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:a9:b6:82:c0:7b:d1:25:ce:fd:a8:5d:42:
a5:4c:10:7a:e1:50:1a:18:d7:f7:cc:99:47:69:17:
06:df:b6:2a:8e:38:60:2f:c6:28:6c:0a:01:2b:88:
df:f8:43:36:44:bc:7c:e3:f1:37:05:6c:7a:ab:98:
c6:08:aa:01:43:b7:25:48:c9:80:71:8d:a4:38:84:
39:bf:f9:70:55:a0:d0:c8:9d:2b:07:2e:20:86:9b:
09:77:04:b8:08:65:fa:4a:34:0d:7b:aa:92:be:e9:
39:b8:90:e2:04:6a:70:e2:eb:8c:9e:3a:28:69:b1:
4e:31:16:aa:c1:da:b2:69:75:c7:8c:ed:75:e4:0b:
49:cf:c8:fb:18:d6:07:a3:78:47:e7:29:8e:38:17:
96:32:d7:71:6d:a4:15:3c:ac:df:c9:a8:cd:b2:a8:
f6:0b:40:2c:b0:97:1b:fa:23:29:58:cf:86:78:85:
b1:51:94:a1:60:94:c1:98:57:3b:aa:73:4a:9d:97:
9c:10:45:ee:11:fd:4e:e4:9a:08:e0:12:ae:26:38:
7e:d4:ad:f8:60:9d:18:72:c9:c4:1b:cb:e2:8b:ab:
80:4f:b8:e7:7a:78:eb:7b:c3:99:a1:1f:02:5a:bc:
19:d3:12:b3:91:88:a4:63:12:be:78:f2:35:28:41:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:30:E8:E7:0F:AE:B7:D0:75:FB:A8:64:84:3A:E0:E6:E5:BD:04:FA
X509v3 Authority Key Identifier:
keyid:DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:09:29:ff:96:55:dd:89:2c:ba:95:93:0e:5d:a7:96:d9:89:
3d:f9:be:0b:a2:b8:5f:b7:81:b8:5c:b5:67:ca:84:5f:8c:37:
a6:62:05:57:42:44:98:ee:e8:e0:10:f5:26:4f:87:26:51:7c:
d5:1b:6e:0f:f8:a4:00:a6:c2:24:e9:ca:a4:18:9c:1b:24:27:
26:54:eb:f0:d7:db:99:68:cf:56:3a:8c:4c:6b:b2:be:56:da:
13:cb:c1:ad:e1:21:b7:67:62:b1:88:d5:5e:d6:61:53:b7:95:
59:22:ac:8d:7e:b7:fd:41:c1:ee:f1:05:32:84:dc:b9:2f:14:
53:ae:e3:a6:7d:58:05:2a:12:f8:df:be:3d:1e:87:07:36:64:
45:bf:cb:b8:0a:01:68:95:90:25:5e:7b:e3:01:2d:29:f7:f1:
b7:2c:b3:ee:44:01:bf:38:c9:02:6b:e7:5d:de:bd:7c:78:31:
97:81:78:00:e1:3d:53:a8:fc:48:52:e3:e5:45:c1:cb:aa:f0:
08:71:d5:06:16:aa:c1:29:ae:fc:5b:5b:f8:a9:0e:5a:12:7a:
5b:e0:dd:16:10:16:70:d3:51:67:4f:8c:da:bb:6a:2a:9f:e3:
7f:c3:e4:63:48:26:5d:76:e1:e7:95:cd:0c:25:18:aa:8c:75:
7b:db:d9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:32:31 2026 by rpki-client