
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
File: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft (raw, json)
Hash identifier: VeSgRXxU1KheSbM+MHYU6ZYRWb9/ShXKW1e+g4E3J6w=
Subject key identifier: E1:5A:3D:01:1D:3E:D6:97:EA:AD:02:F1:F6:AF:3D:4B:5D:E6:BD:72
Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
Certificate issuer: /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
Manifest number: B7
Signing time: Wed 23 Sep 2026 06:48:07 +0000
Manifest this update: Wed 23 Sep 2026 06:48:06 +0000
Manifest next update: Wed 30 Sep 2026 06:48:06 +0000
Files and hashes: 1: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl (hash: o3/a6ZUB0Jid3xKj5NKKyk4+9B3E6krsYMNVwRaGmt0=)
2: 39FF8508738211F1B422FE586CA30FBC.roa (hash: RPhN7NCY5097529W89+5q3UwkqjueIe7ky2HFF/vGtQ=)
3: AE11F062738111F18BB794EF6BA30FBC.roa (hash: s9d5gC7hYaCvUgvmb9o9rutS4rMSCmVuPTuxjMy4QDw=)
4: 22F249F2899611F1B0B035B43911F970.roa (hash: oZYYlZ0lHZLtiZ1LM6QQKnCi3gZIOsKSkb1+bXM96No=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Validity
Not Before: Sep 23 06:48:06 2026 GMT
Not After : Sep 30 06:48:06 2026 GMT
Subject: CN=6ab37626-e60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:8a:4f:7d:5e:8e:a7:12:ea:73:69:e1:fa:
79:9e:70:b2:7f:9b:a2:66:a1:10:a6:91:14:71:db:
63:d3:ee:46:ac:9d:84:f7:7a:15:9a:ad:2e:76:a2:
a6:f7:3c:f8:11:3b:84:11:a8:ab:cb:4b:6a:ae:03:
95:20:8c:38:ad:bf:1e:3c:0d:91:a1:b4:28:ef:3d:
6d:d5:38:25:54:49:15:b4:7f:73:63:ab:3d:1e:f3:
80:fe:b3:5f:ec:78:92:67:3a:b0:b8:ef:4d:82:f6:
9d:64:0e:38:25:e4:23:b5:22:5b:2a:57:da:ec:d1:
1f:db:81:b0:81:08:91:bb:9f:19:eb:8e:4e:01:e0:
be:f9:e6:4e:65:cf:d0:db:c3:18:4a:da:8b:9e:69:
bb:00:b7:04:d7:48:34:98:d0:dd:a1:c2:98:70:c7:
3d:c3:eb:1b:1d:b6:94:f8:9d:4e:f3:3c:52:33:3f:
1e:d2:14:f4:a1:0f:33:25:f3:c5:73:04:25:b7:45:
67:7b:89:ac:2e:d6:98:2f:e9:9c:c8:ae:47:8f:37:
47:03:a9:4d:24:77:93:65:d6:22:02:2e:73:eb:bc:
6c:b2:71:4b:b5:53:9a:e5:ad:bd:7b:5a:35:ff:77:
83:26:93:81:31:1b:c9:c7:8a:75:14:5c:9d:06:04:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5A:3D:01:1D:3E:D6:97:EA:AD:02:F1:F6:AF:3D:4B:5D:E6:BD:72
X509v3 Authority Key Identifier:
keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:e2:ae:79:2e:c5:97:4a:78:dd:2a:7d:60:04:8a:12:2f:18:
12:0c:9c:1a:32:51:86:b0:ff:8c:3b:4c:65:d0:36:97:ec:77:
14:4a:22:18:f1:51:62:f2:3a:ef:97:b2:79:63:ae:c4:fe:df:
71:d3:20:d4:f3:31:e9:cf:47:92:54:87:8c:b9:f5:23:ba:0b:
c0:8d:60:0b:80:1d:40:be:c5:b4:fd:ca:76:ed:d4:9f:2d:43:
67:aa:76:27:79:1e:98:40:ec:44:71:c5:81:26:96:b0:be:38:
e6:c4:4b:de:4c:21:1c:69:73:c5:8a:30:af:fe:e5:3f:fb:82:
7b:f3:ee:f4:41:05:cc:d7:c4:a0:46:54:ac:21:41:74:35:58:
5d:47:fc:ad:37:58:44:2a:7b:7d:b1:20:71:22:81:e0:20:6a:
6f:35:f4:1a:ed:52:02:b3:2b:a0:be:8b:0d:7b:07:a6:e2:74:
00:9f:31:0c:0a:c2:6e:13:c4:b4:a4:e1:19:2f:b6:8b:d7:e4:
d6:72:ec:88:67:01:8e:f1:73:db:c5:82:c2:61:81:c5:88:b3:
8f:99:92:71:83:c5:fa:ea:2a:5d:fd:03:8a:44:a4:27:7c:1d:
af:ae:60:7a:9f:8d:04:c0:85:3e:8b:d8:eb:ea:35:d2:bb:02:
fa:99:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:32:11 2026 by rpki-client