
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
File: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json)
Hash identifier: qasoVFYO3/9N8W4Y9uHQpR5qyUkpX5DLSAkVzIHPemk=
Subject key identifier: F0:2A:7E:F6:B3:14:5B:77:DE:11:87:37:74:CD:63:4C:02:44:CD:B6
Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Certificate issuer: /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Certificate serial: 0746
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
Manifest number: 071E
Signing time: Wed 22 Jul 2026 22:41:04 +0000
Manifest this update: Wed 22 Jul 2026 22:41:04 +0000
Manifest next update: Wed 29 Jul 2026 22:41:04 +0000
Files and hashes: 1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: jCQCFkUkvGzW0U8css93EUW7m16EmJeBkGi/rgEgBw8=)
2: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: EIzNMKDFWXT+xpDDB3WLdazu32oeLTAqnJXbS3MPXsE=)
3: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: Axv4ofsSe90yP+Tj74eBTq7TDNPSfa7eV4MAl8BctRE=)
4: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: kK1XQ5Qi/71Yzi7I23BLNly3sjDmgPxSxXxrn5KrS+k=)
5: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: mIm/bbZcQkFrDlz9RJ874pUYBEB1ADCrlxMEBQ9UkoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1862 (0x746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Validity
Not Before: Jul 22 22:41:04 2026 GMT
Not After : Jul 29 22:41:04 2026 GMT
Subject: CN=6a614700-9c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:2e:b6:15:80:51:3a:41:2c:50:9a:f6:69:
6d:80:e3:ae:fc:71:2a:e8:d5:00:29:78:7e:c5:d5:
e4:d7:e6:4f:1b:79:88:d7:f5:a2:ce:db:16:02:1d:
c6:24:68:3f:cc:29:e2:f0:ea:76:69:bd:92:65:aa:
cc:b2:88:a8:42:c0:2e:11:9d:ee:70:f3:d6:ac:76:
26:4f:2c:16:9d:12:c3:89:69:5e:1f:25:53:64:cd:
7c:a4:04:8a:d6:8b:d1:0b:8c:d0:6e:d4:9e:d0:35:
22:b0:2c:64:b7:f6:75:30:3d:99:22:a7:3b:36:2c:
86:df:02:35:c5:c2:1e:52:3a:21:87:fa:11:5f:45:
53:f8:b7:4c:03:b3:b7:2c:1d:5e:ff:fe:04:d3:8b:
9f:ae:e5:4e:04:bb:95:bc:27:2c:2c:73:e4:e6:15:
b4:19:20:df:a6:75:a2:55:6b:80:66:d0:70:21:e0:
e8:54:3d:f3:9c:4a:5e:c6:4c:92:b2:bf:97:22:90:
f4:ac:6d:76:6e:b8:02:73:90:8e:50:ab:84:ff:f3:
94:05:57:44:02:ed:9f:17:e7:4c:1d:82:0c:54:80:
94:b6:6e:df:0b:f2:2a:62:4c:8c:2d:85:3e:78:e9:
f0:a3:7d:b8:6b:42:5b:c4:b5:78:c1:3e:69:0b:df:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2A:7E:F6:B3:14:5B:77:DE:11:87:37:74:CD:63:4C:02:44:CD:B6
X509v3 Authority Key Identifier:
keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bc:7c:18:9d:d2:ec:17:ed:fb:ec:40:70:6e:cf:0a:d3:b5:
40:02:25:09:63:97:d0:37:f3:f0:b8:ec:db:2b:26:f0:d5:d4:
39:29:fc:d9:b1:ee:6f:2f:d9:c4:56:1f:16:bd:f6:a4:36:c1:
2c:25:28:8b:ca:54:c0:7f:52:ef:38:0e:4e:f4:e0:8d:bb:80:
4b:6f:81:e7:ba:d4:2c:2d:94:27:c2:26:17:6c:6b:51:40:97:
a9:b9:9e:aa:6c:e1:6d:9f:f8:8f:39:3b:e9:93:e3:25:6b:ba:
ab:f4:0e:cb:0a:50:29:c4:1b:da:2b:87:36:36:0f:57:e0:e7:
17:eb:c0:3b:e6:f7:44:2a:01:38:7b:1b:58:a8:72:c8:16:68:
ad:1b:a1:2e:cd:ca:e4:a5:c9:ff:41:2e:02:62:42:79:4e:93:
80:e3:66:cb:c8:c5:72:b7:15:b4:85:0a:9c:16:f0:0c:87:8b:
44:06:ff:99:06:88:16:46:14:03:49:4a:90:74:dd:db:87:72:
da:b0:b9:2b:62:db:e6:fd:0f:09:7d:a6:14:09:6a:ef:92:87:
d7:f6:af:9f:cf:d1:84:49:f4:c0:a4:8d:e2:ed:28:8f:8a:db:
fc:a5:af:ac:99:92:2c:45:4a:18:ee:61:3c:2c:e0:dc:80:03:
9a:19:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:57:19 2026 by rpki-client