
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json)
Hash identifier: ZfAcs53S3Ox57nmAcqrn7/tWupFJBz2xW5u3hE6FwkI=
Subject key identifier: FC:19:EF:35:42:5E:E8:0A:64:F6:25:11:58:19:D5:BC:E5:FF:7E:27
Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59
Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59
Certificate serial: 0A7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
Manifest number: 0A73
Signing time: Wed 22 Jul 2026 20:00:28 +0000
Manifest this update: Wed 22 Jul 2026 20:00:28 +0000
Manifest next update: Wed 29 Jul 2026 20:00:28 +0000
Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: 0mxfKoPNjsQ+NGERLALC6UufpD9b0AkQaaIgvToOWqA=)
2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: GNVMRmxpK7mVQconnlOE34cE3Vp+VynLXCF2Ha4Paq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl
rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2684 (0xa7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59
Validity
Not Before: Jul 22 20:00:28 2026 GMT
Not After : Jul 29 20:00:28 2026 GMT
Subject: CN=6a61215c-98e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:4d:3d:6d:58:e8:eb:af:b2:a7:97:0f:b8:
cb:da:08:ea:e1:58:f1:69:40:5a:cc:8a:cf:39:81:
b6:1d:71:af:28:e1:a5:f2:e3:97:b0:c5:64:83:cb:
5f:ee:12:21:ab:d9:47:81:be:04:38:9a:79:e2:7d:
fb:d1:50:a1:be:9a:67:34:3f:ef:09:fd:58:da:51:
66:56:ab:dd:60:8f:09:51:5e:44:e7:60:27:01:68:
93:cf:b9:bf:ee:b0:04:dc:ba:ab:8b:46:94:9b:2c:
7b:b4:01:7e:dd:87:32:f0:f2:38:e0:59:57:82:bc:
50:f7:07:b6:11:b8:31:a6:ce:0b:86:a9:7b:b0:f7:
e5:df:eb:60:91:64:70:69:7a:eb:f7:70:f4:b9:1e:
b1:b8:ce:84:b2:43:6a:f4:1c:b0:30:3a:d1:28:cb:
1c:ff:dc:56:d0:ed:a2:6c:4a:eb:dc:33:a7:5c:f1:
29:0b:bd:2d:b8:47:86:ae:fa:9e:22:c5:4c:9d:0d:
76:d9:a1:10:7c:2c:01:e1:f5:ad:62:bb:09:20:c5:
3a:91:e2:29:0c:b1:e4:4b:b7:3d:2d:94:e9:d2:f3:
90:7c:e0:9d:20:3d:3f:66:29:42:55:a8:db:b7:f5:
f2:f2:0e:81:cd:11:3a:db:75:ab:ba:07:64:29:91:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:19:EF:35:42:5E:E8:0A:64:F6:25:11:58:19:D5:BC:E5:FF:7E:27
X509v3 Authority Key Identifier:
keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:ff:98:7c:c4:be:13:9d:a9:31:99:60:2d:8d:76:97:7b:8a:
85:3b:44:46:21:17:2d:70:98:04:3e:6e:fb:a5:34:df:17:64:
ac:55:57:d8:51:49:26:07:87:0d:bf:da:d8:28:7a:24:15:e6:
8e:77:d7:93:3d:87:7b:d6:de:e4:ee:d6:8a:99:a5:e2:77:3a:
c4:48:12:8b:65:3d:5b:e2:61:81:c4:a0:58:38:40:3b:f7:2f:
09:e8:3c:8f:20:5d:8f:ce:9b:24:ca:73:67:36:ce:ab:7e:7e:
6b:9e:cc:47:e5:04:04:ca:89:c8:9c:a4:d0:4d:9f:b4:c5:11:
bd:69:7f:2d:dd:4a:d0:4f:a3:52:b5:63:dc:dd:d8:a4:3b:43:
f0:6b:22:44:f7:a3:64:47:dc:c6:d3:99:62:ec:23:9d:bb:95:
a2:87:8f:f3:c8:4a:47:5b:5f:ed:6f:52:a1:45:b4:b7:e7:96:
f2:cf:10:34:fa:95:a2:3c:ec:1c:7b:a4:c8:54:02:3b:05:ad:
12:a8:32:b1:41:75:60:d2:4c:66:20:50:d7:4c:75:11:07:af:
02:64:31:a2:1a:53:be:ac:36:a1:2f:4d:8b:d0:70:01:11:4e:
82:0b:8f:05:39:81:d0:49:43:fb:45:29:82:7a:42:ad:b6:87:
bb:c5:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:58 2026 by rpki-client