
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
File: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft (raw, json)
Hash identifier: BTHVy5v15bsanDy8+5VEu/J2eUj6HwJzl/2aUeE2Byc=
Subject key identifier: 17:7B:9E:AE:A8:62:C0:1D:C3:11:6A:EF:10:6B:F9:0D:0C:6B:EC:D2
Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE
Certificate issuer: /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
Manifest number: F5
Signing time: Thu 23 Jul 2026 08:03:32 +0000
Manifest this update: Thu 23 Jul 2026 08:03:32 +0000
Manifest next update: Thu 30 Jul 2026 08:03:32 +0000
Files and hashes: 1: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl (hash: BsPIzIkkbrwBFo4qMfyE0cA2lY36AbQxsskSzmNfsYY=)
2: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (hash: tWtaLRbtDVtWiOlLn3BiRHdz2Yx30phG2bPvS2Dv5GU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl
rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
Validity
Not Before: Jul 23 08:03:32 2026 GMT
Not After : Jul 30 08:03:32 2026 GMT
Subject: CN=6a61cad4-f64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:51:a4:0f:9f:6f:83:5e:c2:0d:e4:63:3d:
64:05:34:02:8d:0e:0b:30:16:98:3c:80:14:aa:99:
95:d5:7c:2b:df:86:97:90:d1:4f:56:3c:f6:86:fb:
bb:8f:92:38:e9:2e:a7:d6:ee:fc:6d:5b:d4:4c:a7:
ac:eb:b3:23:9e:d2:cf:ab:bc:17:c2:ed:25:28:9a:
22:9c:9a:fb:99:44:3e:19:23:ef:92:31:2c:a6:68:
d5:71:34:a6:e2:1d:49:43:84:7c:57:8f:06:c2:70:
68:25:fa:dd:a8:9e:bf:15:ab:18:02:ee:64:7b:e4:
c9:13:68:12:47:d6:6b:06:cc:ba:99:f9:fc:7d:a1:
eb:9c:9f:ce:6a:e9:fa:0d:87:f5:35:00:ee:72:f7:
b7:8f:da:fd:83:93:ac:35:08:eb:69:00:9f:00:ca:
c3:71:8a:c6:f2:2e:93:e6:23:e6:24:2d:9b:87:16:
18:4b:10:58:7d:10:d5:5f:45:58:12:af:17:9b:b5:
bc:72:d3:e4:ea:5d:b0:97:07:14:d0:81:7c:bb:59:
29:15:a3:89:e0:36:65:bc:e5:06:f0:69:22:b8:e0:
77:aa:85:28:16:4b:b9:3c:9e:ad:7e:76:6b:52:28:
0e:96:7d:81:15:52:7c:09:f7:03:ee:7d:7a:90:d6:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7B:9E:AE:A8:62:C0:1D:C3:11:6A:EF:10:6B:F9:0D:0C:6B:EC:D2
X509v3 Authority Key Identifier:
keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:51:de:82:f6:a7:de:3f:38:e9:de:1d:83:3f:88:5a:7a:fa:
55:5b:28:27:fa:49:d2:4a:72:42:7e:f2:de:4e:5c:07:64:88:
a6:2a:af:3f:06:52:4f:3f:96:a4:69:32:09:ef:c7:c0:42:e9:
8c:b1:84:bd:e4:e5:e3:cd:2e:c5:02:e9:13:6e:8e:b6:1e:f9:
d5:c8:0d:fc:ba:35:31:3e:01:9d:f4:0a:32:22:e7:b5:1b:00:
dd:e0:1a:3e:7c:7c:dc:45:09:c3:65:4d:1e:07:37:26:12:95:
84:c7:01:4d:23:12:7a:da:03:55:f5:15:da:d0:6d:5d:62:f5:
2c:20:51:02:eb:8c:29:5e:e1:94:08:3f:07:9c:71:85:8e:89:
91:c0:3f:d3:82:4b:79:58:d0:b6:78:ba:8c:ed:39:c8:b9:24:
e0:4e:58:cc:55:21:b8:48:02:f6:04:45:65:fa:a6:94:ee:90:
40:e2:4b:6e:8e:5a:73:56:e6:93:ac:d3:63:0f:78:2f:58:43:
b6:7d:d6:38:82:96:e8:4b:64:a3:4c:36:41:65:1c:ab:90:dd:
43:3d:15:10:0c:82:8a:55:17:6c:2a:18:ff:f2:81:3f:7b:a1:
1b:9b:25:db:7b:d3:54:c5:96:d6:98:e1:6d:a5:47:38:ba:ab:
df:e0:57:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZDQ0ExMTAvBgNVBAUTKERCMTNGQkFGN0IzQjM4REI3NjMwREIwQjk3Mzc0REFB
RDAzMTVBREUwHhcNMjYwNzIzMDgwMzMyWhcNMjYwNzMwMDgwMzMyWjAYMRYwFAYD
VQQDEw02YTYxY2FkNC1mNjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqGhRpA+fb4Newg3kYz1kBTQCjQ4LMBaYPIAUqpmV1Xwr34aXkNFPVjz2hvu7
j5I46S6n1u78bVvUTKes67MjntLPq7wXwu0lKJoinJr7mUQ+GSPvkjEspmjVcTSm
4h1JQ4R8V48GwnBoJfrdqJ6/FasYAu5ke+TJE2gSR9ZrBsy6mfn8faHrnJ/Oaun6
DYf1NQDucve3j9r9g5OsNQjraQCfAMrDcYrG8i6T5iPmJC2bhxYYSxBYfRDVX0VY
Eq8Xm7W8ctPk6l2wlwcU0IF8u1kpFaOJ4DZlvOUG8GkiuOB3qoUoFku5PJ6tfnZr
UigOln2BFVJ8CfcD7n16kNZ6cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBd7nq6o
YsAdwxFq7xBr+Q0Ma+zSMB8GA1UdIwQYMBaAFNsT+697OzjbdjDbC5c3TarQMVre
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkNDQS8yNDAxMEQ1MjBG
NzAxMUYwOUUyRjdEMUZDNEY5QUUwMi8yeFA3cjNzN09OdDJNTnNMbHpkTnF0QXhX
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ4UDdyM3M3T050Mk1Oc0xsemROcXRBeFd0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkNDQS8yNDAxMEQ1MjBGNzAxMUYwOUUyRjdEMUZDNEY5QUUwMi8yeFA3cjNzN09O
dDJNTnNMbHpkTnF0QXhXdDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhlHegvan3j846d4dgz+IWnr6VVsoJ/pJ0kpyQn7y3k5cB2SIpiqvPwZSTz+W
pGkyCe/HwELpjLGEveTl480uxQLpE26Oth751cgN/Lo1MT4BnfQKMiLntRsA3eAa
Pnx83EUJw2VNHgc3JhKVhMcBTSMSetoDVfUV2tBtXWL1LCBRAuuMKV7hlAg/B5xx
hY6JkcA/04JLeVjQtni6jO05yLkk4E5YzFUhuEgC9gRFZfqmlO6QQOJLbo5ac1bm
k6zTYw94L1hDtn3WOIKW6Etko0w2QWUcq5DdQz0VEAyCilUXbCoY//KBP3uhG5sl
23vTVMWW1pjhbaVHOLqr3+BXmg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:48 2026 by rpki-client