
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
File: 2-mhAMSp66SyzRomcTKN73j-duE.mft (raw, json)
Hash identifier: y+E/94tYVitZgZ5UJ1UWiWedPa51F7EhL9ARi5qef8I=
Subject key identifier: 51:C7:4C:30:86:57:24:08:70:EC:4B:36:62:6B:0C:F3:E2:BF:A6:9C
Authority key identifier: DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1
Certificate issuer: /CN=A91AB74D/serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
Certificate serial: 06F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
Manifest number: 06EC
Signing time: Wed 22 Jul 2026 22:54:17 +0000
Manifest this update: Wed 22 Jul 2026 22:54:17 +0000
Manifest next update: Wed 29 Jul 2026 22:54:17 +0000
Files and hashes: 1: 2-mhAMSp66SyzRomcTKN73j-duE.crl (hash: Si3oDpwMy//uMZCeumkVefsClghXJ7o+e68sd3I0K2I=)
2: A0D57302A33D11EBA479491CC4F9AE02.roa (hash: u5ce3mhL9MTgfMANLqmHFxu4YGZmlzL+s2cu4dHRCdc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl
rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1779 (0x6f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB74D, serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
Validity
Not Before: Jul 22 22:54:17 2026 GMT
Not After : Jul 29 22:54:17 2026 GMT
Subject: CN=6a614a19-3244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:29:6e:f9:07:1e:06:5f:b6:11:69:f1:9a:
38:54:ef:a4:75:ec:44:27:a0:b2:41:27:84:5f:08:
27:8f:76:12:ee:05:c7:95:41:1b:17:5d:bb:29:b4:
cc:3b:bc:c7:3a:2e:4d:0f:34:eb:62:1f:0d:b3:fc:
2c:a6:79:78:37:fd:7d:ee:10:20:e9:2a:ed:48:f5:
28:a0:44:17:29:a8:18:d9:b9:f2:90:3e:0d:56:02:
11:9d:35:e4:87:54:7b:4d:ee:78:93:e5:68:8f:14:
5f:ec:92:a7:f1:67:08:25:a6:b8:1d:26:26:7f:d9:
31:5d:6a:41:6d:fe:cd:af:81:d7:b1:e5:ac:48:75:
01:1d:cc:a9:6a:e5:78:12:47:1f:a5:b2:a1:a9:c1:
7e:f3:9a:54:d8:e5:c9:31:70:76:51:bf:5e:60:cd:
af:ea:aa:54:dc:b3:0f:14:06:dd:1b:4e:24:65:f9:
77:d0:c8:50:df:33:5a:fb:2f:4c:88:ab:9a:c1:d7:
9b:f3:c1:58:20:db:d1:87:ca:d1:43:4b:90:b8:67:
19:96:b6:0a:b0:cd:92:08:05:61:5d:65:61:15:b6:
42:43:ea:f0:84:19:47:95:65:9d:35:fd:e5:88:21:
07:36:91:0d:05:88:bd:d4:03:45:bb:9a:52:33:76:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:4C:30:86:57:24:08:70:EC:4B:36:62:6B:0C:F3:E2:BF:A6:9C
X509v3 Authority Key Identifier:
keyid:DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:08:ba:5f:53:73:5b:da:90:70:8c:14:df:91:eb:3f:5e:1a:
5f:ca:a8:3b:b1:40:0d:3a:1b:6b:9e:2d:04:20:31:5d:ff:dd:
d6:1b:24:83:77:18:d1:c1:b8:4b:d6:0d:74:b6:80:9a:8e:08:
33:f2:28:39:31:46:87:4e:e4:10:16:b0:19:2a:16:cb:f3:64:
b8:b5:f0:72:d0:86:68:03:0c:20:12:4c:69:7d:2d:75:84:d2:
3c:19:81:59:18:85:b5:89:67:61:96:34:f5:76:fe:4b:56:74:
cf:7e:45:5a:29:7a:29:54:b2:5c:50:97:35:7d:0e:b5:e4:15:
98:a9:9b:a3:27:c7:5f:eb:fd:cf:58:32:21:6b:ca:5c:d5:78:
db:06:db:50:c8:75:fa:6b:09:98:bf:81:8b:7e:b9:be:12:92:
3e:ac:ff:f0:19:bb:5c:d4:eb:dc:f6:22:53:4d:bd:d1:ca:0d:
d5:0b:0a:cb:69:96:a6:44:d1:a0:71:0b:e9:79:a5:a0:4d:73:
f7:14:d4:30:61:63:07:a9:7b:6f:a3:4e:9f:38:4f:7b:91:93:
20:f0:f0:65:83:f1:e5:dc:41:85:b0:af:66:a3:7d:6a:58:0a:
ac:c6:fe:a4:30:18:e9:8e:98:05:eb:fb:73:5f:42:33:fc:de:
e4:78:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:59:40 2026 by rpki-client