
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
File: 2n7tifhToFCqePhmgZCMmcNRBnA.mft (raw, json)
Hash identifier: xUJh+6JkZF20bxA9cjKT/xd95f0QmPOYA5jKomvCa7w=
Subject key identifier: 63:B9:CD:09:CD:E0:6F:5C:84:1B:DB:65:56:2F:F5:4E:41:AD:2B:1C
Authority key identifier: DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70
Certificate issuer: /CN=A91C8A07/serialNumber=DA7EED89F853A050AA78F86681908C99C3510670
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
Manifest number: 1D
Signing time: Thu 23 Jul 2026 11:03:06 +0000
Manifest this update: Thu 23 Jul 2026 11:03:06 +0000
Manifest next update: Thu 30 Jul 2026 11:03:06 +0000
Files and hashes: 1: 2n7tifhToFCqePhmgZCMmcNRBnA.crl (hash: 5WYxqfAHENz0Ufzh3YsWXse7Q/T62psD/a1NXhYcwEs=)
2: F3CE961064A311F1A97DC0998B47A888.roa (hash: pejeTtYSguLZu0BW6m0RkH55kNdbMRCqIXu4V/iuKnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.crl
rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8A07, serialNumber=DA7EED89F853A050AA78F86681908C99C3510670
Validity
Not Before: Jul 23 11:03:06 2026 GMT
Not After : Jul 30 11:03:06 2026 GMT
Subject: CN=6a61f4ea-1c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:03:df:45:77:62:4d:0a:86:e8:a2:dd:c3:
e0:c2:b8:b3:2d:85:8a:e7:4b:a7:a1:e4:73:78:60:
08:f2:ef:fa:8e:c4:8a:4b:8e:c6:ab:aa:4f:f5:94:
22:04:61:13:0c:c6:8c:f4:fa:e5:ec:71:1c:53:50:
93:35:cf:6f:d0:53:fd:d6:3d:e8:e5:21:ee:5d:37:
b9:dd:a5:36:c1:6d:1b:57:51:b7:79:4e:44:0e:1e:
9a:09:03:a4:26:12:91:b3:70:ec:3c:0a:09:b6:40:
0f:cd:a8:8e:44:ff:3e:bb:a9:13:da:11:47:ad:7d:
5f:63:46:a8:7e:55:8b:a3:4c:f3:b6:c6:97:35:bf:
59:c4:7e:e3:ba:5b:92:43:6e:3f:27:48:aa:d6:06:
b0:ed:f5:1f:f1:c6:f1:bc:f8:9a:9d:c6:ec:4e:98:
9e:9b:a3:85:7e:b0:03:3c:de:af:e0:3e:82:63:a0:
d8:f0:30:45:9d:d2:5f:f3:db:48:58:81:d2:f5:6b:
c8:bd:4c:b7:d7:1c:28:15:f5:fb:a6:f3:c7:9d:40:
38:3e:d7:ae:aa:01:d5:04:59:e9:3c:5f:22:9e:35:
0b:9f:3c:95:6c:8a:d5:87:84:4b:c2:30:e1:ca:2c:
40:1a:ef:b2:e0:93:a5:e3:ee:e3:91:2c:d9:83:e4:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B9:CD:09:CD:E0:6F:5C:84:1B:DB:65:56:2F:F5:4E:41:AD:2B:1C
X509v3 Authority Key Identifier:
keyid:DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:76:84:5f:e7:5d:26:7a:92:00:91:e3:dc:c7:3a:71:95:f1:
e6:3c:85:ca:d3:f6:03:d2:ba:0e:b1:35:4a:8c:90:ec:5f:cc:
36:1a:80:50:93:32:88:08:d5:a0:ca:96:7d:0e:4d:25:c6:20:
25:77:45:48:a4:fc:0c:cb:be:79:94:0a:27:a3:52:20:ce:29:
4f:14:de:20:25:1b:63:43:f3:b8:a4:bb:18:b3:f4:a0:c6:54:
30:8d:9d:c7:64:83:24:b2:d0:78:2d:68:57:78:d5:4d:b4:f9:
44:d2:4a:8b:44:9b:f0:54:bc:4d:f7:8c:2c:bf:ee:ba:e0:42:
13:aa:a2:82:e5:63:14:51:40:3b:6d:eb:f3:10:46:59:74:0d:
1e:97:a0:a7:eb:dc:de:ee:4a:5a:ce:c0:cb:98:ef:13:a7:1d:
cd:e0:a7:5d:79:95:6e:69:0f:09:9c:4e:59:fe:ff:75:da:d8:
12:55:37:38:32:e0:7b:dd:35:98:f5:39:c6:da:62:61:71:c8:
13:ab:69:48:f2:29:7c:4f:14:0e:0a:75:52:5d:17:94:cf:f7:
a6:62:9d:c9:3a:ee:6d:01:81:df:88:64:aa:a1:b1:46:dd:c2:
0b:3a:f9:8f:da:01:68:ea:bf:64:d6:00:cd:3b:22:dc:35:b3:
2e:8b:25:f4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OEEwNzExMC8GA1UEBRMoREE3RUVEODlGODUzQTA1MEFBNzhGODY2ODE5MDhDOTlD
MzUxMDY3MDAeFw0yNjA3MjMxMTAzMDZaFw0yNjA3MzAxMTAzMDZaMBgxFjAUBgNV
BAMTDTZhNjFmNGVhLTFjMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfYwPfRXdiTQqG6KLdw+DCuLMthYrnS6eh5HN4YAjy7/qOxIpLjsarqk/1lCIE
YRMMxoz0+uXscRxTUJM1z2/QU/3WPejlIe5dN7ndpTbBbRtXUbd5TkQOHpoJA6Qm
EpGzcOw8Cgm2QA/NqI5E/z67qRPaEUetfV9jRqh+VYujTPO2xpc1v1nEfuO6W5JD
bj8nSKrWBrDt9R/xxvG8+JqdxuxOmJ6bo4V+sAM83q/gPoJjoNjwMEWd0l/z20hY
gdL1a8i9TLfXHCgV9fum88edQDg+166qAdUEWek8XyKeNQufPJVsitWHhEvCMOHK
LEAa77Lgk6Xj7uORLNmD5HOfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUY7nNCc3g
b1yEG9tlVi/1TkGtKxwwHwYDVR0jBBgwFoAU2n7tifhToFCqePhmgZCMmcNRBnAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4QTA3LzA5Q0NDMUM4NjIx
ODExRjE4QkZDN0I0MjZENDdBODg4LzJuN3RpZmhUb0ZDcWVQaG1nWkNNbWNOUkJu
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMm43dGlmaFRvRkNxZVBobWdaQ01tY05SQm5BLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4
QTA3LzA5Q0NDMUM4NjIxODExRjE4QkZDN0I0MjZENDdBODg4LzJuN3RpZmhUb0ZD
cWVQaG1nWkNNbWNOUkJuQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBpdoRf510mepIAkePcxzpxlfHmPIXK0/YD0roOsTVKjJDsX8w2GoBQkzKICNWg
ypZ9Dk0lxiAld0VIpPwMy755lAono1IgzilPFN4gJRtjQ/O4pLsYs/SgxlQwjZ3H
ZIMkstB4LWhXeNVNtPlE0kqLRJvwVLxN94wsv+664EITqqKC5WMUUUA7bevzEEZZ
dA0el6Cn69ze7kpazsDLmO8Tpx3N4KddeZVuaQ8JnE5Z/v912tgSVTc4MuB73TWY
9TnG2mJhccgTq2lI8il8TxQOCnVSXReUz/emYp3JOu5tAYHfiGSqobFG3cILOvmP
2gFo6r9k1gDNOyLcNbMuiyX0
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:39 2026 by rpki-client