
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json)
Hash identifier: CJ+4q5U3FU9KUU7P2RgI89soqwMl3XaFSjqUhbQ7sR8=
Subject key identifier: 78:47:CA:63:1E:90:AC:08:A4:F0:60:EE:8E:A4:02:C7:5C:C1:3B:CD
Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6
Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
Certificate serial: 02E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
Manifest number: 02E3
Signing time: Wed 23 Sep 2026 00:49:55 +0000
Manifest this update: Wed 23 Sep 2026 00:49:54 +0000
Manifest next update: Wed 30 Sep 2026 00:49:54 +0000
Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: 97TQvoZeQTWPxgA7FEmbK4JqioXY/0M9nPh0h84PSlQ=)
2: BB052E76A76E11F1B714FA7A3A11F970.roa (hash: RodMID7dxNErWw1sBBYwx0WpdnoFizXAEXRE37nOvNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl
rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
Validity
Not Before: Sep 23 00:49:54 2026 GMT
Not After : Sep 30 00:49:54 2026 GMT
Subject: CN=6ab32233-6e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c0:22:30:7e:07:4b:48:f8:1d:4e:f6:32:d8:
c6:bd:8f:4f:27:56:62:a3:ee:40:90:d0:5f:00:cf:
33:9a:49:13:a2:0c:9e:51:35:94:b0:b8:f0:9c:48:
ad:7e:9b:94:a5:bf:9f:22:46:f0:01:ad:55:ef:57:
fd:31:ce:d6:8e:7f:61:af:d3:48:5c:69:aa:6d:86:
3e:ff:f4:fe:68:b6:55:53:1b:12:38:32:a7:76:5b:
ce:19:d5:d1:82:ab:48:02:b6:77:91:3a:47:51:c7:
01:c9:8e:47:fa:f8:ec:1f:0b:49:87:a0:c4:4c:66:
06:ea:3b:71:73:2f:8b:b2:c3:10:07:3e:3c:6a:57:
33:53:5f:10:eb:51:a6:08:c2:93:98:1d:9c:f2:bd:
d4:4c:b8:3e:bf:90:6b:31:fe:70:dc:b4:73:b3:11:
a7:95:98:de:cb:f9:cd:9f:c2:93:7d:c4:ef:7e:12:
82:b0:20:b7:ff:c9:57:86:7e:d7:8c:57:79:03:6f:
1e:57:4a:ce:a8:4e:5c:58:52:92:80:d0:cd:36:a0:
f4:e4:4c:0e:bf:e8:5d:2f:00:e6:2d:b4:80:19:82:
d2:de:a3:a0:f3:fe:df:1c:df:3b:f7:af:9c:69:35:
60:ba:bb:88:cb:82:3c:c4:0f:96:a1:ae:bd:d2:75:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:47:CA:63:1E:90:AC:08:A4:F0:60:EE:8E:A4:02:C7:5C:C1:3B:CD
X509v3 Authority Key Identifier:
keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:e4:52:26:f0:c7:a2:26:22:0c:c6:35:a3:d5:05:81:94:cc:
fa:f0:da:a6:f2:0b:30:38:a5:12:38:04:e6:22:d3:a2:20:c2:
45:8f:9a:67:42:79:62:8f:06:ed:3e:26:b1:5f:f0:5a:11:4e:
33:12:2f:8d:e1:b0:79:63:67:7d:9b:df:40:b7:74:c2:fa:8d:
ab:ce:97:16:f6:d7:94:18:f6:d2:f2:69:c5:3a:b3:bc:ee:25:
37:c6:24:b0:26:d3:a0:1a:10:a4:60:79:6b:fd:87:cb:8e:de:
80:ff:fa:68:25:4e:9b:4a:43:d8:fc:cf:0a:63:1e:f3:dd:51:
a3:46:c0:e5:69:5b:4a:34:a3:34:e5:3f:7b:37:47:38:48:c1:
83:e8:fd:04:f5:df:c1:d6:31:f9:00:ea:f7:c6:17:bf:f1:ac:
e6:a8:d1:52:4f:d5:75:cd:37:22:b1:db:a6:9e:77:d1:38:f1:
36:2c:23:b8:2b:bf:97:5d:54:81:17:e1:d0:a7:a8:e6:34:00:
b9:b5:f5:26:5e:0d:12:0d:46:7a:a0:41:f9:22:ec:5f:87:46:
c5:0b:53:e0:fa:87:21:01:9b:ef:bb:1a:c5:2d:63:f9:dc:2e:
c8:4c:16:fe:c9:be:3c:94:2f:65:41:bd:90:24:45:06:39:2b:
bb:52:5e:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy
OTQ0QjlFQzYwHhcNMjYwOTIzMDA0OTU0WhcNMjYwOTMwMDA0OTU0WjAYMRYwFAYD
VQQDEw02YWIzMjIzMy02ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5sAiMH4HS0j4HU72MtjGvY9PJ1Zio+5AkNBfAM8zmkkTogyeUTWUsLjwnEit
fpuUpb+fIkbwAa1V71f9Mc7Wjn9hr9NIXGmqbYY+//T+aLZVUxsSODKndlvOGdXR
gqtIArZ3kTpHUccByY5H+vjsHwtJh6DETGYG6jtxcy+LssMQBz48alczU18Q61Gm
CMKTmB2c8r3UTLg+v5BrMf5w3LRzsxGnlZjey/nNn8KTfcTvfhKCsCC3/8lXhn7X
jFd5A28eV0rOqE5cWFKSgNDNNqD05EwOv+hdLwDmLbSAGYLS3qOg8/7fHN8796+c
aTVguruIy4I8xA+Woa690nV2eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhHymMe
kKwIpPBg7o6kAsdcwTvNMB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC
NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ
UEhlX3hLNzRLTThwUkxuc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh+RSJvDHoiYiDMY1o9UFgZTM+vDapvILMDilEjgE5iLToiDCRY+aZ0J5Yo8G
7T4msV/wWhFOMxIvjeGweWNnfZvfQLd0wvqNq86XFvbXlBj20vJpxTqzvO4lN8Yk
sCbToBoQpGB5a/2Hy47egP/6aCVOm0pD2PzPCmMe891Ro0bA5WlbSjSjNOU/ezdH
OEjBg+j9BPXfwdYx+QDq98YXv/Gs5qjRUk/Vdc03IrHbpp530TjxNiwjuCu/l11U
gRfh0Keo5jQAubX1Jl4NEg1GeqBB+SLsX4dGxQtT4PqHIQGb77saxS1j+dwuyEwW
/sm+PJQvZUG9kCRFBjkru1Jeew==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:01:03 2026 by rpki-client