
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json)
Hash identifier: dPjNv4DhfUzQ/okmBMXQ8VAoLGrjt7JCZd7WSt+9dqI=
Subject key identifier: 44:D3:AE:48:6C:79:5C:29:C4:42:68:69:76:0F:EF:C8:D5:35:99:18
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial: 0C56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
Manifest number: 0BE2
Signing time: Wed 22 Jul 2026 19:27:57 +0000
Manifest this update: Wed 22 Jul 2026 19:27:57 +0000
Manifest next update: Wed 29 Jul 2026 19:27:57 +0000
Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: 9xOkGlmeo6hAVxaQItlxGTMmIHE8e9ZycouRD1vx8cI=)
2: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: rs5DeAiXJUjkmk87XhQXy9eavqmolXmi42NXBuxe1D8=)
3: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: dL/b9kFR/fDDp+1b1nZMcsVPe3aqtduJg9+GzU7pUT4=)
4: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: jHzcYJ90DjGoipsCrkdoqarlimj3fDzkOjXCClEv3uY=)
5: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: MsOEzeKC3wQWVNmqxzfHjUDeGAqxXFvTMRBM7uQm94k=)
6: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: Ds4m30JNX7VD0YAwlidc5p6ZJQmsCh5FAge2wZckos0=)
7: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: x0qoqY3+7NzxsMKW0qJM37L/2r2psmq486dVg8v0Nmc=)
8: B66F0C58817111EFB121970CC4F9AE02.roa (hash: ouZu/jn5ZKmwfIcE3ghEaFkVLB6My1iKKzR3gtO189k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3158 (0xc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Validity
Not Before: Jul 22 19:27:57 2026 GMT
Not After : Jul 29 19:27:57 2026 GMT
Subject: CN=6a6119bd-e14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:7f:f2:4e:7d:18:9d:a9:15:20:38:99:36:
42:64:9a:36:ee:37:db:af:14:32:fa:be:75:f5:ea:
57:eb:c2:a6:ff:db:28:ca:ac:9b:7d:4d:66:01:5e:
8d:26:c0:00:6f:45:03:02:b8:4a:ca:2c:ff:88:81:
e8:a4:f8:8c:4e:2b:16:40:5f:19:49:ac:4f:1a:40:
25:f3:7f:a2:65:4b:71:25:59:9f:f4:e3:46:a2:73:
3a:45:22:6d:ca:e9:a2:1b:f0:7a:85:2a:00:9d:35:
67:10:24:dd:dc:e4:ee:4a:d1:cb:35:02:44:82:5d:
80:d2:2a:13:90:0b:5d:80:85:7b:5a:2f:0e:84:e3:
76:4f:0a:30:85:c1:85:52:c9:80:d2:a0:51:e0:e3:
4e:31:28:8a:50:39:d1:8b:f6:85:03:65:a3:89:09:
6f:a8:2a:bf:ad:71:b5:50:4a:87:a4:21:e1:37:59:
de:00:09:8c:d4:55:ba:30:1f:6c:02:79:f5:67:1d:
09:62:8e:42:b8:19:85:bd:d0:f3:14:a5:71:fd:3e:
f0:40:9c:bc:1e:2c:4b:78:06:92:6c:3b:bb:10:1c:
38:74:de:4e:18:b7:34:2e:11:93:82:c6:2f:33:a0:
aa:7d:63:6e:6c:8d:e7:bf:78:02:11:dc:75:06:26:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D3:AE:48:6C:79:5C:29:C4:42:68:69:76:0F:EF:C8:D5:35:99:18
X509v3 Authority Key Identifier:
keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:ee:e2:76:c2:e1:95:95:f9:76:ec:e0:f4:dc:83:8c:85:37:
05:3a:3c:5c:13:70:f8:04:a7:1d:8d:a9:6e:bb:c7:17:2b:ee:
a0:17:43:29:c8:83:6b:17:42:bc:d5:f5:1a:b2:f9:0a:3d:5b:
9d:03:44:c5:f2:d5:c5:20:cc:a9:d4:34:10:a9:a7:1b:e0:b9:
62:b9:a3:eb:8e:29:5b:80:37:13:5a:3e:84:8e:5c:d4:92:1c:
fa:dd:64:52:5b:95:03:4c:d5:b7:13:92:27:34:a5:09:df:65:
a4:e4:b2:e9:f0:2c:77:be:86:c1:97:3d:24:e8:0b:97:9d:84:
2f:df:ec:dc:44:08:ea:02:da:91:1e:f3:ae:b9:ba:69:68:28:
67:a2:fd:95:64:84:52:e8:83:a1:8b:74:1d:3f:00:7e:30:36:
b2:d0:d8:9c:ff:73:7a:b3:f5:d6:87:33:95:3e:04:16:b4:1c:
2b:02:f4:ba:30:74:c3:06:54:75:4d:e2:96:0f:68:15:07:91:
ad:c6:57:d8:e5:80:9f:d6:f9:47:81:34:f7:4a:40:fc:6d:8e:
1c:2e:0d:af:e7:0d:e4:95:bf:74:5f:12:91:86:f0:ff:1c:c6:
92:75:c8:61:0e:17:1a:f5:33:b6:34:88:6f:ee:3d:59:70:50:
9a:1a:46:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:11:15 2026 by rpki-client