
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier: hraSb76Oe5cMzTezUBTV/8iZYaKKZV4gdDvkUHBv4ik=
Subject key identifier: 06:FE:3E:B5:DC:3A:19:E4:7E:BD:05:C9:39:0D:C5:06:0C:25:41:2B
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial: 02EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number: 02D6
Signing time: Mon 11 May 2026 01:28:42 +0000
Manifest this update: Mon 11 May 2026 01:28:42 +0000
Manifest next update: Mon 18 May 2026 01:28:42 +0000
Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: ZEcujk+M3oolQy9URQPx/cnjbwCWqIIBkZY1bM8HJko=)
2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: N8hOIX9lBnkWNR17KITPRqZldmiFlqdcpwwzsFLdg0U=)
3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Validity
Not Before: May 11 01:28:42 2026 GMT
Not After : May 18 01:28:42 2026 GMT
Subject: CN=6a0130ca-dff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:7b:38:00:7a:16:90:ca:a1:60:21:cf:1e:
1c:3a:54:06:42:87:1f:c6:82:3c:1f:bf:d0:dc:4f:
59:0b:35:0e:a3:c8:41:e6:3d:55:be:b3:3c:a0:b5:
6b:77:11:32:80:14:4d:9d:da:44:f2:ad:1f:26:e7:
0a:da:f5:eb:3d:7e:2e:9c:f9:fa:98:4d:72:a2:98:
e2:00:71:d8:1f:71:06:64:6d:90:54:4e:1f:d3:f5:
de:89:31:21:41:cd:d7:25:d4:7c:6c:8e:68:26:84:
0d:df:97:c5:7b:2f:fb:c0:6f:5e:22:ee:fe:a6:5e:
00:f3:41:ab:73:88:6b:59:e4:ee:15:40:5d:e5:e3:
47:57:de:2e:dd:9b:33:5a:69:df:e1:21:f3:5e:9b:
9e:1c:7d:97:cf:38:13:a2:13:38:40:a2:f1:73:bb:
13:66:c5:4d:aa:94:0b:b5:f8:f1:ba:36:a4:7d:d6:
e3:4c:5d:bd:f5:98:ce:62:0a:76:2a:36:e6:49:ac:
04:78:69:34:b4:e6:f2:94:6b:45:b0:cf:f4:1e:06:
cc:bb:26:e3:1a:56:41:4f:97:c7:a7:7f:03:38:da:
cc:7f:76:fe:c5:da:bd:8a:5b:41:c6:45:df:4e:d7:
29:3a:a2:89:5e:32:52:f0:37:37:11:90:46:14:34:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FE:3E:B5:DC:3A:19:E4:7E:BD:05:C9:39:0D:C5:06:0C:25:41:2B
X509v3 Authority Key Identifier:
keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:67:fc:61:c6:32:d4:89:8c:d5:6a:05:4a:a6:34:d9:09:63:
00:12:62:17:9b:1b:7c:0d:05:cd:b2:e2:c4:90:e1:2f:52:16:
e1:dd:6a:27:3c:6d:56:51:2a:1f:d1:b5:21:a3:4b:d9:bc:da:
8e:48:2a:3c:ed:b1:5e:c5:bc:b5:47:bb:6c:ef:1e:fe:33:81:
3f:25:ba:a9:92:5a:a2:a1:5d:3b:ce:c2:07:e7:e3:33:87:f1:
7e:60:30:87:ff:25:8b:f9:53:40:bd:bd:d3:8d:3a:be:e6:d8:
20:50:9c:cd:f4:2b:1e:94:2a:da:78:e0:2d:b1:b5:d8:87:f1:
77:17:e2:c9:1c:15:8f:40:ae:b9:2e:87:d9:6d:ac:42:59:b6:
bb:41:8b:44:fc:c8:69:23:2f:75:15:2b:e5:3a:f6:89:a2:d7:
57:1f:c5:83:8d:76:ff:0f:1f:1e:6b:39:cf:12:12:ef:31:c2:
b3:fa:ac:8c:cf:a2:bb:6b:dc:09:6b:a5:69:4d:26:27:fe:c7:
78:52:1e:e5:21:61:ff:b0:80:36:53:cb:64:4f:44:09:82:9f:
32:10:80:9c:b4:b6:af:89:f0:a6:55:d0:66:30:5c:cf:88:51:
4f:f0:88:3a:2c:47:70:dd:ce:35:5c:e9:c1:51:82:ab:1b:97:
95:12:14:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:13 2026 by rpki-client