
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json)
Hash identifier: D8Uqf2n7Fyx6bgyYWlPGwYIEqnv+841Qb56LYQ/7eGY=
Subject key identifier: 40:4D:93:F2:29:25:3F:FE:66:8D:A9:13:C4:9D:45:10:C1:8C:B7:CA
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial: 0346
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
Manifest number: 033D
Signing time: Mon 21 Sep 2026 00:47:40 +0000
Manifest this update: Mon 21 Sep 2026 00:47:40 +0000
Manifest next update: Mon 28 Sep 2026 00:47:40 +0000
Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: 1ve+cPC5nz78AjZxw8zcnju5d9RNtkeW46mwz3QKhLo=)
2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: h9XZber2EyFddUowRYB4R36YQps0wInKux9nbzLj6gU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 838 (0x346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Validity
Not Before: Sep 21 00:47:40 2026 GMT
Not After : Sep 28 00:47:40 2026 GMT
Subject: CN=6ab07eac-c60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:c1:f3:f4:ef:23:cf:fd:f8:f5:9c:a1:e1:
18:ee:d9:68:0c:78:25:92:33:52:29:2b:b2:64:e4:
40:d1:d2:44:8a:49:35:e5:fe:65:77:24:48:15:0e:
ec:80:83:05:d2:66:75:95:43:f1:fa:56:ef:58:c5:
4f:b8:33:58:f7:5e:ec:2f:c6:72:10:78:35:ee:9f:
ed:7f:ed:1a:0c:e1:1f:03:ab:f7:c3:9e:1b:c1:c7:
08:35:d9:0c:46:aa:8a:d8:6e:2b:08:df:e8:5f:f5:
8a:81:82:24:b0:cc:54:d2:ca:12:c2:d5:7f:cc:d0:
c6:06:d6:43:9e:ec:17:91:f3:af:86:52:f0:b6:87:
bc:26:36:33:03:7f:b0:ab:62:4f:d1:7e:e0:1f:df:
8a:7b:c3:07:88:1a:0d:f1:2c:57:f0:a8:fa:f4:fa:
91:11:44:34:6f:f8:03:63:94:81:d5:49:d4:f6:6d:
e1:a0:10:2c:bb:8b:b2:6e:65:60:d4:70:5f:87:2e:
73:5b:a8:51:5d:e9:15:6a:94:12:14:6a:6d:67:ab:
12:1b:ba:22:c1:a2:2f:5d:cf:8c:72:60:9f:4e:b5:
81:00:d3:47:35:10:db:ed:67:a9:08:d8:b3:60:06:
2c:4d:3e:fb:fb:ee:64:21:53:a1:1c:c0:93:59:f0:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4D:93:F2:29:25:3F:FE:66:8D:A9:13:C4:9D:45:10:C1:8C:B7:CA
X509v3 Authority Key Identifier:
keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6c:48:0e:75:7c:ce:0a:09:71:90:fc:3f:13:3b:39:8f:b5:
e4:d6:40:18:fe:7b:d6:d9:9a:29:e0:93:52:93:ea:6a:5c:30:
1c:e8:47:03:33:f3:90:74:59:95:2b:cd:53:1b:4e:65:8d:34:
0a:7e:08:cc:32:67:97:73:e9:fc:4b:06:ef:11:a2:0d:d9:46:
8a:91:17:91:bd:f3:8a:47:50:e1:85:14:8f:08:59:ad:09:34:
02:59:41:83:42:65:dd:4a:12:63:36:0a:83:5c:de:f3:37:87:
4e:ed:bd:1a:39:57:1a:aa:fe:d5:cc:71:f4:0e:d2:b3:d5:cf:
18:0d:9f:e2:1c:a0:b7:2f:9c:19:30:92:b2:a5:0c:50:85:36:
0e:3e:41:ee:24:62:81:65:55:53:d9:84:b8:96:40:55:d9:f5:
ee:ba:7a:d7:67:9b:a2:0e:4e:b4:69:e9:6d:1d:81:79:bb:ca:
dc:97:f1:70:62:7d:2d:28:c4:ed:f5:78:44:7d:3a:0f:85:1a:
2f:f8:b1:c5:d4:a5:95:37:3f:56:43:b6:91:ac:d1:39:ed:16:
e8:e9:ba:d2:f5:a9:f2:85:c8:f3:1c:d0:36:90:ea:4e:ee:0a:
38:1b:60:78:cd:62:fe:60:8c:ea:38:b3:f8:f4:5f:85:b5:ee:
90:be:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:03:29 2026 by rpki-client