
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier: 72/5kbGfLXxdSh/G8acG9j7ThgfzeZFnWlygEY1mJk4=
Subject key identifier: 52:AB:48:37:9A:25:76:9D:6C:8E:15:0A:32:98:E7:F1:4C:52:A9:24
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial: 0314
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number: 02FB
Signing time: Thu 23 Jul 2026 02:12:05 +0000
Manifest this update: Thu 23 Jul 2026 02:12:04 +0000
Manifest next update: Thu 30 Jul 2026 02:12:04 +0000
Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: icoZdSOdOqDdqRypXjQis8xyARkV/i/iOrQ4p9GM6xo=)
2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: N8hOIX9lBnkWNR17KITPRqZldmiFlqdcpwwzsFLdg0U=)
3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 788 (0x314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Validity
Not Before: Jul 23 02:12:04 2026 GMT
Not After : Jul 30 02:12:04 2026 GMT
Subject: CN=6a617875-f963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:00:b3:52:36:1d:29:08:47:90:01:7a:45:
db:8b:4b:66:61:cc:38:62:b7:09:6e:57:af:7c:ff:
b5:ef:ef:d3:f1:5d:4a:6f:e8:86:ae:24:2d:c3:e1:
27:38:2b:62:b0:4e:e2:4d:ae:93:ba:17:6d:ab:f6:
6f:2c:a6:ec:1c:6d:ea:c4:d4:2e:d5:f9:3a:ce:cc:
bf:64:54:4b:89:63:bb:c4:72:6d:51:fd:37:b5:51:
93:fa:35:04:89:25:ee:2f:8b:ec:7a:58:f3:6d:5a:
b6:68:2d:1d:41:e2:23:f1:1c:fd:ec:15:1e:e4:9a:
db:36:2c:1f:e2:85:20:f9:e5:0f:23:ff:15:b5:c7:
a1:3e:00:20:ea:8d:c7:96:73:47:a1:1b:5c:ef:7b:
91:30:1b:0b:4e:79:0b:74:2a:39:99:b4:d8:e3:34:
95:09:a0:f4:d3:11:5e:21:3d:0d:cb:24:83:eb:a8:
7c:1a:ea:8f:23:e3:1d:a6:75:79:b7:40:ea:63:bb:
70:75:db:dd:9a:e5:28:cd:a8:71:18:3c:e5:bb:f9:
29:8b:91:14:24:c0:17:f5:cc:f7:d9:64:77:d3:2c:
3e:54:59:5a:b4:af:bf:38:c1:d2:f9:c2:a0:d7:14:
0f:6b:d9:df:04:23:7d:85:ae:b5:10:e6:0f:f3:56:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AB:48:37:9A:25:76:9D:6C:8E:15:0A:32:98:E7:F1:4C:52:A9:24
X509v3 Authority Key Identifier:
keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8a:56:50:b5:f4:11:ac:3f:81:7a:9c:7e:e2:8d:46:87:b0:
08:28:d6:a7:cb:ba:ad:a5:52:be:8c:ba:20:32:6e:6e:ce:23:
84:8f:04:65:fb:f5:6f:61:97:2f:19:51:1b:44:07:07:ba:71:
8d:ee:c9:f2:11:cc:26:9e:b3:0b:62:31:96:2d:53:ce:e8:7e:
1e:c0:12:25:04:38:91:04:8f:79:e1:a0:a8:d0:b5:45:f5:1e:
88:75:a9:10:9b:18:1f:bc:dd:f0:29:04:71:7a:20:79:52:35:
40:1b:a6:33:07:24:32:af:1b:74:33:4e:97:fb:0f:4c:ca:96:
dc:62:45:aa:c3:8b:30:a8:d0:54:db:e4:89:7c:ed:4a:12:68:
31:ae:9c:22:b3:2c:e7:18:9b:f7:aa:89:16:4e:0d:f9:bc:24:
73:b4:6a:fb:95:81:37:dc:e7:e5:dd:e1:cb:84:ee:35:c1:36:
1c:26:e1:27:82:c9:1e:50:ba:6a:b4:fe:fc:78:bf:2e:fc:ef:
43:fd:d2:e1:da:4a:7e:fe:ca:50:e6:3a:0c:ce:17:d1:7c:70:
ab:58:0f:44:34:65:15:3b:7a:ff:b1:8f:90:2f:13:3a:bc:28:
06:ab:f6:7d:fd:cd:d0:86:4f:2a:03:20:fe:49:40:89:67:b1:
b7:a9:9f:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0
Q0FEOEMxNkYwHhcNMjYwNzIzMDIxMjA0WhcNMjYwNzMwMDIxMjA0WjAYMRYwFAYD
VQQDEw02YTYxNzg3NS1mOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs1gAs1I2HSkIR5ABekXbi0tmYcw4YrcJblevfP+17+/T8V1Kb+iGriQtw+En
OCtisE7iTa6Tuhdtq/ZvLKbsHG3qxNQu1fk6zsy/ZFRLiWO7xHJtUf03tVGT+jUE
iSXuL4vseljzbVq2aC0dQeIj8Rz97BUe5JrbNiwf4oUg+eUPI/8VtcehPgAg6o3H
lnNHoRtc73uRMBsLTnkLdCo5mbTY4zSVCaD00xFeIT0NyySD66h8GuqPI+MdpnV5
t0DqY7twddvdmuUozahxGDzlu/kpi5EUJMAX9cz32WR30yw+VFlatK+/OMHS+cKg
1xQPa9nfBCN9ha61EOYP81bN5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKrSDea
JXadbI4VCjKY5/FMUqkkMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0
NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL
ajljUk9PSlVDWjlNcll3VzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm4pWULX0Eaw/gXqcfuKNRoewCCjWp8u6raVSvoy6IDJubs4jhI8EZfv1b2GX
LxlRG0QHB7pxje7J8hHMJp6zC2Ixli1Tzuh+HsASJQQ4kQSPeeGgqNC1RfUeiHWp
EJsYH7zd8CkEcXogeVI1QBumMwckMq8bdDNOl/sPTMqW3GJFqsOLMKjQVNvkiXzt
ShJoMa6cIrMs5xib96qJFk4N+bwkc7Rq+5WBN9zn5d3hy4TuNcE2HCbhJ4LJHlC6
arT+/Hi/LvzvQ/3S4dpKfv7KUOY6DM4X0Xxwq1gPRDRlFTt6/7GPkC8TOrwoBqv2
ff3N0IZPKgMg/klAiWext6mfIA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:58 2026 by rpki-client