
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
File: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft (raw, json)
Hash identifier: mxurNUgIBlFFpJ5qcqjXv0KISa+H1c0XJZA4sWhfabk=
Subject key identifier: 61:88:AC:99:55:10:70:BE:33:1E:34:38:9B:AB:E1:35:ED:7B:E8:66
Authority key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC
Certificate issuer: /CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC
Certificate serial: 3584
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
Manifest number: 3584
Signing time: Tue 06 Oct 2026 14:49:40 +0000
Manifest this update: Tue 06 Oct 2026 14:49:40 +0000
Manifest next update: Tue 13 Oct 2026 14:49:40 +0000
Files and hashes: 1: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl (hash: grRiH67t+6qWZzLTB8aTXAiqaVrGHLxg8xOsAFUrk5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl
rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13700 (0x3584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127A9B, serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC
Validity
Not Before: Oct 6 14:49:40 2026 GMT
Not After : Oct 13 14:49:40 2026 GMT
Subject: CN=6ac50a84-158f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:e6:d1:c1:5b:0e:12:b2:90:0a:43:b0:98:
c6:d3:7c:0a:96:77:6f:1c:7e:bd:c7:d0:fe:6d:b8:
33:fc:9e:61:bf:50:1c:6f:0e:60:55:b4:4a:c7:50:
69:fa:a4:50:67:f6:0a:3e:53:1b:cd:c4:67:16:93:
fa:3f:df:7e:8c:60:0f:5f:80:ec:02:92:ef:73:8a:
82:9b:f5:f7:09:32:22:d3:aa:fa:c5:42:bc:59:c7:
57:a7:17:08:34:bc:7b:06:e4:4b:fe:f6:7c:31:9d:
cc:a1:8c:b8:19:1a:f1:77:3a:99:6e:97:52:0e:12:
7b:85:8b:ab:0e:bb:a4:fa:41:d1:a6:b7:73:7f:78:
1b:df:04:e0:16:a9:24:cf:af:49:1d:60:6d:d7:ff:
ec:2f:c2:74:34:91:5e:69:b6:86:09:5a:0e:2d:97:
a7:67:2d:bf:4c:bc:bc:8a:4f:6c:fa:63:12:bf:88:
5f:f7:4a:2a:d9:53:51:e6:f5:a7:16:75:b1:ad:7c:
46:ac:da:2f:1c:2f:53:78:0c:f0:c3:ab:51:1d:8b:
95:15:d3:b9:15:53:6b:65:8b:f3:30:d7:e4:e8:a6:
a3:b2:be:02:c9:5a:89:f3:75:56:cf:d0:ad:2a:62:
30:53:03:e5:e4:cf:e4:7a:98:ba:bb:25:2f:4a:41:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:88:AC:99:55:10:70:BE:33:1E:34:38:9B:AB:E1:35:ED:7B:E8:66
X509v3 Authority Key Identifier:
keyid:DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:56:a3:55:98:48:4b:0e:f9:6e:7a:72:e2:6c:6c:62:98:d7:
af:0e:86:d8:1f:3c:24:c3:21:26:23:e0:60:90:70:27:25:b7:
a0:24:05:73:a9:dc:f9:d4:c0:e7:b7:37:49:ed:fa:ea:66:50:
f3:7d:97:59:8e:75:8b:53:80:02:3c:b3:03:de:cf:7f:67:d5:
25:20:70:4d:82:cc:b1:64:63:4d:54:1e:08:26:b1:c9:e5:36:
cf:eb:07:9d:a2:9e:0b:d1:19:88:3c:65:6c:87:b7:d0:2d:d5:
fd:52:16:b3:7e:8a:00:1b:04:d0:06:c3:f0:86:8d:78:f4:59:
9d:bb:af:0e:32:f6:6c:93:88:eb:2a:ad:5e:36:46:f6:f0:58:
d0:c6:a1:81:17:a2:38:a7:d4:c6:57:8b:4c:e7:82:8b:06:af:
28:d0:56:b4:b0:bc:18:da:37:78:7c:8d:1e:22:54:b6:77:33:
24:b1:0d:b9:e4:89:d7:61:61:99:01:01:72:9e:9f:fa:72:69:
7b:0f:7a:fd:c4:23:ba:9c:c3:86:1e:f1:a7:3a:fa:77:71:d3:
3d:38:89:96:d4:d5:f3:54:16:0d:ba:90:a7:ed:52:8d:b7:ff:
c8:49:61:9e:ee:30:f3:d0:67:da:56:98:05:75:f7:d5:9c:a4:
99:1b:23:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdBOUIxMTAvBgNVBAUTKERBNjA0Q0ZEQjI3MzBBOERFNzI1RkM3NEFCMEZDNjNF
MDU1OEU1REMwHhcNMjYxMDA2MTQ0OTQwWhcNMjYxMDEzMTQ0OTQwWjAYMRYwFAYD
VQQDEw02YWM1MGE4NC0xNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlu7m0cFbDhKykApDsJjG03wKlndvHH69x9D+bbgz/J5hv1Acbw5gVbRKx1Bp
+qRQZ/YKPlMbzcRnFpP6P99+jGAPX4DsApLvc4qCm/X3CTIi06r6xUK8WcdXpxcI
NLx7BuRL/vZ8MZ3MoYy4GRrxdzqZbpdSDhJ7hYurDruk+kHRprdzf3gb3wTgFqkk
z69JHWBt1//sL8J0NJFeabaGCVoOLZenZy2/TLy8ik9s+mMSv4hf90oq2VNR5vWn
FnWxrXxGrNovHC9TeAzww6tRHYuVFdO5FVNrZYvzMNfk6Kajsr4CyVqJ83VWz9Ct
KmIwUwPl5M/kepi6uyUvSkGMHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGGIrJlV
EHC+Mx40OJur4TXte+hmMB8GA1UdIwQYMBaAFNpgTP2ycwqN5yX8dKsPxj4FWOXc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0E5Qi9GQzA1OEU1NjFE
OTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNvM25KZngwcXdfR1BnVlk1
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJtQk1fYkp6Q28zbkpmeDBxd19HUGdWWTVkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0E5Qi9GQzA1OEU1NjFEOTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNv
M25KZngwcXdfR1BnVlk1ZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb1ajVZhISw75bnpy4mxsYpjXrw6G2B88JMMhJiPgYJBwJyW3oCQFc6nc+dTA
57c3Se366mZQ832XWY51i1OAAjyzA97Pf2fVJSBwTYLMsWRjTVQeCCaxyeU2z+sH
naKeC9EZiDxlbIe30C3V/VIWs36KABsE0AbD8IaNePRZnbuvDjL2bJOI6yqtXjZG
9vBY0MahgReiOKfUxleLTOeCiwavKNBWtLC8GNo3eHyNHiJUtnczJLENueSJ12Fh
mQEBcp6f+nJpew96/cQjupzDhh7xpzr6d3HTPTiJltTV81QWDbqQp+1Sjbf/yElh
nu4w89Bn2laYBXX31ZykmRsj3A==
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:28:54 2026 by rpki-client