
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json)
Hash identifier: EFJObJY2o7T+67PT/4iy9uoiiChpwpEp2ujfXdoO7b0=
Subject key identifier: D4:65:2B:AE:08:86:4A:97:39:AC:0A:D8:2F:1C:F9:03:F1:EC:2A:AF
Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Certificate serial: 04FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
Manifest number: 04EF
Signing time: Thu 23 Jul 2026 00:34:38 +0000
Manifest this update: Thu 23 Jul 2026 00:34:38 +0000
Manifest next update: Thu 30 Jul 2026 00:34:38 +0000
Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: ViT0qMKlR442CG1lHRoacGCfgPXd+jhazPNvyzl/glI=)
2: 996419B6627D11F1B70F09038E47A888.roa (hash: 6fwP2rsJ1aYLnM+RF5A41SVQIk30a/xQCKjUg+QU10c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1277 (0x4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Validity
Not Before: Jul 23 00:34:38 2026 GMT
Not After : Jul 30 00:34:38 2026 GMT
Subject: CN=6a61619e-04f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:49:8f:ab:be:07:55:08:78:61:6d:62:d8:cb:
84:57:49:7a:b6:5b:47:5b:35:4f:a3:84:ea:9f:42:
1d:62:20:80:1a:c2:78:a6:f3:ca:f4:e3:85:6d:ab:
e1:f7:2f:6e:68:52:7b:19:ed:42:65:56:30:7c:82:
ce:8d:0a:5f:4b:87:64:7a:9f:a7:c3:ee:17:9e:f0:
ff:2d:b8:1b:04:12:6a:1c:e6:97:69:2c:76:f2:80:
d3:ae:42:42:ee:19:50:bb:1b:1f:9c:30:96:32:d1:
24:7e:da:fa:32:5a:d7:22:52:75:e3:ad:c2:95:a1:
45:75:0b:0f:01:81:aa:15:70:38:45:c7:8f:c7:30:
83:23:b0:07:19:92:f5:87:8d:47:09:de:4d:36:11:
25:b6:20:41:2b:48:32:fb:80:6d:4f:60:e1:9b:a5:
48:c9:43:14:cd:c5:33:17:4d:6c:47:25:80:8d:36:
3d:88:3d:a1:4b:91:f8:9e:b9:8d:af:a8:ec:9f:f7:
bf:84:fe:c9:2e:bb:32:fd:26:1a:9b:01:66:45:c7:
30:ca:f9:6a:ce:56:2b:92:65:48:e7:49:6f:fd:b4:
87:93:36:95:16:0e:05:d1:b6:53:8d:8a:93:d0:c8:
f2:c5:5b:5d:37:ed:ef:9a:f9:7b:f8:be:c6:94:42:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:65:2B:AE:08:86:4A:97:39:AC:0A:D8:2F:1C:F9:03:F1:EC:2A:AF
X509v3 Authority Key Identifier:
keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4c:6c:59:e4:18:de:c3:43:a5:18:f2:87:10:80:47:49:26:
7e:75:ae:97:b3:02:5d:e7:93:12:f4:0a:0b:a3:13:08:6f:4e:
5d:a6:70:bf:92:a3:b7:b4:57:74:5d:55:47:7f:12:27:11:ac:
63:1d:70:aa:9f:86:3a:08:a3:51:7b:10:42:04:93:b5:f6:97:
98:86:12:22:f2:5e:f9:95:34:05:e4:5c:7a:a8:15:55:df:2e:
8c:f7:2c:86:9b:c2:13:88:3f:d8:11:85:fe:a9:91:a4:b6:03:
e0:4b:10:13:6d:1d:6e:df:71:75:ca:e9:fc:97:19:62:b2:93:
48:0d:a3:53:a6:e2:60:2b:d9:52:5f:0c:b1:70:93:fa:1d:46:
20:cc:7f:c2:2b:1e:39:60:c9:ba:dd:5c:50:d0:cf:ec:02:b6:
c2:47:f3:05:9b:b2:a3:78:8f:a8:4b:b0:36:82:03:ee:6b:63:
b8:08:dc:cb:c4:ac:57:b5:d1:11:fe:5c:31:7a:00:09:13:63:
b2:be:fa:4f:88:18:cb:b5:77:61:d7:b1:20:53:dd:35:bb:92:
0a:89:d7:e2:a4:08:d0:45:90:3a:07:79:95:47:e1:0f:dc:7e:
33:c0:b8:02:f8:24:24:aa:77:02:fa:e7:58:9a:9c:c8:b6:a3:
91:b6:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:03:15 2026 by rpki-client