
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json)
Hash identifier: ycj3fQRiVT9Qut+YCa+08nAMYXuVKrWmZ1HLPUYHcBw=
Subject key identifier: D5:EF:1D:ED:49:AB:15:62:24:34:ED:DE:EC:EF:63:E0:28:C9:4F:7C
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial: 028B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
Manifest number: 0284
Signing time: Thu 23 Jul 2026 02:56:49 +0000
Manifest this update: Thu 23 Jul 2026 02:56:49 +0000
Manifest next update: Thu 30 Jul 2026 02:56:49 +0000
Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: lNDMjpD85cKLXIRd5BUZf/vYONDU4hm+a2Z4PaCixjE=)
2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 4E7B7eClCEG5d3gzWwa9hz6tdWf+XUY9sPo6EaTao1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Validity
Not Before: Jul 23 02:56:49 2026 GMT
Not After : Jul 30 02:56:49 2026 GMT
Subject: CN=6a6182f1-85bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:26:44:13:2e:af:4b:53:95:38:31:6f:02:
ae:54:17:fc:ad:81:75:60:6b:cc:53:45:de:be:f4:
35:33:ac:c7:41:a5:13:ea:fb:fb:d0:3b:4f:09:a1:
c1:27:0e:77:9d:32:81:9f:8a:34:7a:52:a3:28:aa:
49:3d:a6:b7:62:a4:02:02:d8:a7:6b:bb:40:3f:94:
f8:39:0a:73:99:9c:97:d1:4c:38:c7:9e:b4:d9:b2:
15:e8:a4:8c:05:e2:f4:0b:83:7c:5b:12:e2:5a:73:
d1:9b:29:f6:5e:74:e5:cc:d0:3e:79:48:2a:66:f4:
00:2f:05:76:67:c3:d1:9f:30:49:94:7a:86:3a:82:
db:25:50:49:43:1a:44:9b:93:4c:93:9d:5a:c9:f5:
cf:4f:ca:c9:92:54:57:c5:bf:87:3f:61:bd:5a:f4:
cc:4f:4d:de:92:db:92:28:81:c9:ad:cf:56:2f:a1:
35:3f:cd:2e:17:87:7f:b5:05:cd:4e:52:aa:e3:73:
77:d0:2d:7d:56:18:e2:7a:a6:8d:6a:1a:3a:34:b4:
ad:c1:dd:0b:01:fb:cb:90:cc:e7:a1:06:16:f1:ec:
4e:7b:3f:88:26:e4:14:47:bb:c5:17:37:28:b8:4f:
ec:f8:b3:75:fb:98:9d:f0:c8:4a:18:fa:ba:8e:05:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:1D:ED:49:AB:15:62:24:34:ED:DE:EC:EF:63:E0:28:C9:4F:7C
X509v3 Authority Key Identifier:
keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:00:12:1f:6c:d9:32:37:3c:2d:dd:3c:73:8a:55:81:b7:95:
0c:3c:d7:23:9b:7b:c1:08:42:62:f0:7c:f9:c1:3f:09:f5:e8:
4b:61:e5:d6:53:84:87:86:49:c9:a3:18:a1:81:35:50:20:1f:
78:e8:04:06:35:ff:d9:c6:9f:2f:86:5d:4b:66:8f:33:7f:0e:
27:d6:41:db:45:43:de:a9:a6:6b:07:4b:25:33:38:4f:8b:5f:
0b:1f:7f:4b:b4:8f:ca:aa:e1:1f:0f:64:b9:97:28:61:16:69:
34:39:5c:da:a4:07:2b:99:ff:b8:f0:68:22:b4:1d:17:2c:28:
2a:ba:fc:1e:96:e7:f9:79:9f:d6:3f:29:71:df:f2:b2:d0:0d:
8d:74:9c:42:39:28:8a:5d:96:eb:3a:05:0b:b6:dc:dc:df:5b:
76:ef:e4:73:45:88:18:cb:4b:36:44:4f:c2:c1:b1:42:d7:a2:
61:b1:93:a9:a9:d2:ff:98:ce:4d:52:be:a0:14:56:4d:f1:43:
59:7d:f7:de:7d:ce:a6:1c:63:23:71:f0:8b:f4:7d:bd:e7:10:
d7:a8:8b:88:02:36:c9:4e:31:63:15:b1:30:b5:01:72:04:9e:
b2:78:55:0c:78:95:c4:4a:46:3d:cb:82:98:4d:be:bb:56:78:
23:b3:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:33:03 2026 by rpki-client