
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
File: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft (raw, json)
Hash identifier: aGnMmJ7WC/JL8trBuLGziccbjMhUgG94s7UDiTfVFmg=
Subject key identifier: 97:BB:7C:64:3A:32:E8:0C:D9:21:DA:9A:B0:C4:5E:BA:A9:5D:E3:D8
Authority key identifier: D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A
Certificate issuer: /CN=A91F0AF0/serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A
Certificate serial: 0D55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
Manifest number: 1F38
Signing time: Wed 22 Jul 2026 17:16:28 +0000
Manifest this update: Wed 22 Jul 2026 17:16:27 +0000
Manifest next update: Wed 29 Jul 2026 17:16:27 +0000
Files and hashes: 1: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl (hash: QAUrZsdc/BTHCfrbCctinh808H+nwfKr8UcSk9y2BZY=)
2: CE3C7EF66FEB11EB91967864C4F9AE02.roa (hash: PoMZXZYHdteODhPAtacBWSXCAi/gVbSsN+xQtOQaEQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl
rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3413 (0xd55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0AF0, serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A
Validity
Not Before: Jul 22 17:16:27 2026 GMT
Not After : Jul 29 17:16:27 2026 GMT
Subject: CN=6a60faec-c08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:41:0d:ac:f8:f8:b3:67:be:f3:c6:92:1c:31:
c9:20:59:0a:43:1b:e3:35:28:80:5d:13:b3:23:6f:
d3:f6:10:bf:b3:41:8f:e6:23:48:56:08:76:21:b0:
51:c8:fd:55:21:ba:ea:bc:82:46:85:3f:f5:22:4a:
42:5c:8f:92:82:ad:e6:2a:df:83:85:5e:f6:ff:e7:
90:cf:d8:ee:30:f7:74:d6:40:f4:bf:f9:3c:97:0f:
e2:6e:bd:17:16:44:2f:2d:9b:36:61:ea:92:c3:b4:
4f:58:93:9e:17:49:79:63:7f:7f:0a:5c:79:bb:77:
62:d0:fa:c3:5c:1f:ab:af:c3:2d:e8:6a:24:5c:68:
4c:a9:64:71:60:84:cb:9b:35:31:6d:68:4c:c8:25:
0e:82:08:12:6d:15:0a:cc:c0:67:b0:8d:22:76:13:
78:fb:b0:45:29:b0:a5:32:9a:be:4f:57:03:f6:a5:
3b:81:96:2b:5d:ca:0e:66:b9:57:27:06:a6:b7:b3:
7b:82:60:46:21:01:ab:d3:b7:ce:73:d3:5a:3e:96:
62:77:23:fc:e6:15:c5:1b:de:7c:b9:50:90:66:97:
61:9b:b8:7b:b5:c3:0f:64:e3:da:c4:11:9e:2c:71:
d6:08:f5:08:94:a2:3e:7c:f6:2b:2a:04:dc:b8:87:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BB:7C:64:3A:32:E8:0C:D9:21:DA:9A:B0:C4:5E:BA:A9:5D:E3:D8
X509v3 Authority Key Identifier:
keyid:D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:91:0d:86:08:b4:f5:bf:da:30:92:2d:45:18:c3:24:9c:e7:
37:6e:61:5b:85:48:6f:35:06:60:64:c1:f9:14:ed:e3:93:23:
13:b3:22:7b:43:b0:53:f5:10:73:2e:28:1e:4e:90:a8:76:d3:
6b:17:8c:c6:14:e7:0f:89:d4:dd:1b:3c:27:ec:3a:e5:b0:cf:
7f:dc:6c:9a:bc:1c:a0:65:9e:12:9c:04:53:0d:38:f2:ec:b9:
a9:47:cd:37:1c:af:11:33:bd:6b:37:01:04:d0:69:ca:69:e3:
d4:62:61:c5:19:be:b9:00:84:2d:5b:20:89:43:80:44:24:ce:
41:63:c3:3d:80:8f:66:26:94:de:69:8d:40:b9:9e:2a:31:66:
cc:a5:45:d5:e4:f3:82:44:0c:8a:41:ac:0a:5e:8b:9c:93:c1:
90:d4:0d:a3:31:6b:d0:04:fa:16:2f:93:bf:07:f9:c4:16:76:
30:4f:e5:ee:d7:69:7c:b0:3d:40:d2:ed:4d:1a:a4:38:33:ac:
0d:52:cf:c6:89:ac:9a:cb:0c:ce:5d:62:2b:44:d2:f1:b2:a7:
fe:b9:15:3f:74:a6:b0:98:7c:d7:66:6e:00:e4:1d:af:3b:ae:
1e:13:1e:67:96:c0:2c:47:f2:42:8c:8c:13:87:ef:b8:f2:45:
a9:a4:d9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:23 2026 by rpki-client