
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
File: maB2Nu64AHCDMDGWpYxBvsxoj4A.mft (raw, json)
Hash identifier: qqHMwpaW/MCLRRCA0RXb8lEEDIs8FDotTvLYGLYgpEY=
Subject key identifier: FA:C2:DF:AE:73:76:77:9C:52:C0:E2:82:74:41:B9:03:D9:FF:FA:81
Authority key identifier: 99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80
Certificate issuer: /CN=A91EEC3B/serialNumber=99A07636EEB8007083303196A58C41BECC688F80
Certificate serial: 0CB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
Manifest number: 2ED2
Signing time: Wed 22 Jul 2026 16:28:04 +0000
Manifest this update: Wed 22 Jul 2026 16:28:04 +0000
Manifest next update: Wed 29 Jul 2026 16:28:04 +0000
Files and hashes: 1: maB2Nu64AHCDMDGWpYxBvsxoj4A.crl (hash: cYia4u6ki3XwDmtz8j/OS/AErE/ArVgSXGqNmZ0wOrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl
rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3249 (0xcb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEC3B, serialNumber=99A07636EEB8007083303196A58C41BECC688F80
Validity
Not Before: Jul 22 16:28:04 2026 GMT
Not After : Jul 29 16:28:04 2026 GMT
Subject: CN=6a60ef94-f39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:93:dd:8b:08:94:58:38:9a:c8:88:10:4b:
d9:84:b7:4d:74:42:a9:36:64:10:2c:bc:56:91:06:
6b:62:b3:4e:8d:67:d1:72:9e:8b:b2:b4:47:f4:5d:
35:66:13:8f:c9:7b:ef:25:00:7a:73:56:fd:84:88:
a0:a5:d7:b8:15:72:89:28:0a:16:8e:c9:2c:19:68:
b8:bd:db:cf:91:b0:50:cb:ed:d3:c8:67:a2:06:65:
6f:1d:94:7e:7d:43:09:23:ec:11:99:33:a4:3c:20:
eb:1f:63:1b:d1:a1:65:da:ec:b4:4a:b3:2f:8e:a9:
4d:c9:c3:4f:d4:87:15:bf:d0:07:5e:94:cf:02:b9:
d3:6e:3e:4c:59:f4:ce:e3:d2:ff:cc:26:56:da:74:
bb:0e:c7:1d:10:f8:6c:81:0c:ec:f0:03:92:f0:f7:
70:6a:0e:c1:19:bb:e3:bf:22:85:72:9d:ad:ce:c1:
ab:3b:06:c5:da:f2:d2:51:d2:d6:32:a3:0f:9a:03:
50:a9:29:0f:d1:e1:88:92:42:ab:ac:60:02:67:47:
5c:51:2f:db:61:68:f5:f7:0b:ea:6e:c1:da:fa:94:
21:81:cd:03:ce:7c:72:d4:32:82:33:43:56:08:33:
47:5f:3a:1b:61:61:bb:02:4e:cd:58:53:d7:63:0e:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C2:DF:AE:73:76:77:9C:52:C0:E2:82:74:41:B9:03:D9:FF:FA:81
X509v3 Authority Key Identifier:
keyid:99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fd:a7:9f:62:54:8d:aa:c7:5b:ff:fe:0a:64:ec:e9:5e:b3:
64:6b:6d:e4:6f:35:d3:46:e1:fd:89:03:9f:f6:fd:69:07:22:
7f:e4:bf:67:7b:29:a3:33:4a:b7:26:8c:70:b5:c4:b7:d5:1a:
d7:34:0c:9f:a5:43:f0:0b:c5:c6:5c:58:0f:2e:ad:aa:a0:3c:
0d:c0:11:35:52:59:b9:05:2d:57:1e:05:51:d0:97:df:6e:b9:
7c:59:64:0d:ee:de:5a:b0:d9:69:73:18:6b:cb:35:f5:7d:98:
a7:ee:71:8b:6b:fc:3f:b1:5e:ea:fb:f0:4e:02:c9:78:59:64:
c7:4a:b8:30:44:1b:2a:a6:ce:2d:c3:44:97:ea:d4:e2:bc:bd:
28:e4:b5:48:93:35:03:99:95:eb:10:23:ce:31:44:a0:96:3a:
b8:bf:05:9a:e2:c8:42:e3:bf:04:59:77:09:25:4f:b0:db:5e:
15:8a:7f:95:9d:ad:ee:da:e2:1f:4d:2e:93:10:60:47:1e:2b:
a1:f5:c2:de:56:23:fe:79:0e:2e:f8:81:03:ea:ff:6d:5e:19:
0d:bb:fd:13:e0:36:d8:fd:a5:b3:5f:5a:48:71:b1:88:ef:5d:
f7:aa:86:3a:d1:87:da:e9:56:2e:63:8a:84:71:ee:b9:f2:c0:
24:c1:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:49 2026 by rpki-client