
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
File: 2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json)
Hash identifier: 6Xw1iex+m3ZumYq7o6WaYBwOu/IjLEV6X14Tp3xjzmY=
Subject key identifier: D0:BB:F9:18:E0:AA:1D:F0:F2:AE:55:AA:27:78:06:DE:51:B3:EF:50
Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Certificate issuer: /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Certificate serial: 0342
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
Manifest number: 033A
Signing time: Fri 25 Sep 2026 00:49:26 +0000
Manifest this update: Fri 25 Sep 2026 00:49:26 +0000
Manifest next update: Fri 02 Oct 2026 00:49:26 +0000
Files and hashes: 1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: lhzq251A1uK91ODj7aXlv0y6T7yP1yjzNxqNFcBzil4=)
2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: tluEXRfv1yfj6g2yuqwe5cSshlgt2BkkJs3C6pzFBNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Validity
Not Before: Sep 25 00:49:26 2026 GMT
Not After : Oct 2 00:49:26 2026 GMT
Subject: CN=6ab5c516-25be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:7f:62:dd:cb:95:e5:3b:e0:94:0a:7e:84:
bd:8d:c6:ed:05:66:5f:6c:ec:39:7e:1a:50:1b:b2:
6f:57:e8:a8:8e:cc:c2:99:51:ce:a5:27:3f:e1:db:
e7:d3:97:bb:28:5c:7c:e4:5f:9f:bb:f8:91:a8:ab:
58:2b:a0:a1:49:9d:b9:08:d1:00:5c:9a:9f:c1:a0:
e3:d3:9d:c4:19:73:8a:e1:01:5e:50:e5:23:01:03:
89:6f:71:6e:bf:7c:fc:99:99:11:8c:0e:46:8e:d9:
d0:fc:48:1a:ab:10:be:28:ac:42:f0:6a:ba:7e:4b:
eb:2b:c7:1d:b0:7a:06:b2:87:f0:7f:7d:a8:ba:6d:
28:51:19:97:ed:7c:34:a4:ea:f1:c8:8e:07:6b:3d:
24:57:2c:e6:db:2f:28:96:65:79:ac:a1:22:b7:89:
be:d0:00:7c:aa:5f:a6:b2:17:fa:bf:54:66:8f:76:
97:8a:8d:f2:84:ab:a0:3f:cb:f6:97:e6:10:3e:b2:
f8:d9:56:8b:70:d9:f7:4f:cd:df:ea:41:a5:dc:3d:
2b:d5:a4:35:37:ba:34:2b:59:6f:b3:2c:0d:7b:98:
6f:b9:2b:f8:78:14:ba:72:b6:b4:b7:03:68:49:c4:
42:71:f3:e0:ee:6c:54:eb:01:58:e0:e7:2e:71:aa:
7c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BB:F9:18:E0:AA:1D:F0:F2:AE:55:AA:27:78:06:DE:51:B3:EF:50
X509v3 Authority Key Identifier:
keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:b1:cc:c8:ed:99:d0:a3:16:1b:03:bc:16:7f:75:9e:b1:55:
ba:80:ba:05:4d:44:27:0d:e6:86:b5:f8:69:9c:3e:30:50:c4:
c4:b8:9f:96:fb:24:51:f9:1c:fc:8a:ff:8c:76:e9:6c:9c:20:
46:41:a2:06:89:b8:48:97:d4:35:e2:8f:1f:cd:71:0a:93:0b:
8a:11:67:8b:6f:5e:84:0e:89:db:97:e7:ae:25:e7:cc:8d:d4:
37:4a:c7:a1:2c:a0:e9:90:58:88:0b:95:50:9d:ad:88:01:b5:
05:c2:d1:50:58:c5:29:e5:17:b0:c8:69:f2:19:05:da:9f:51:
00:04:68:32:e0:ba:2b:34:05:97:eb:ec:e7:c5:bc:40:4f:2f:
c0:f4:b3:f3:af:7f:02:da:bf:41:7e:d4:a9:5e:ba:1c:7b:40:
22:4b:cc:4a:11:cd:e4:8e:be:c4:ed:7b:d0:e3:04:2d:de:ef:
56:60:15:1e:96:78:82:17:25:aa:a5:81:92:c9:d5:7f:3f:42:
6c:c6:51:83:b6:6d:68:47:32:4b:ad:c5:86:be:09:c0:13:8f:
70:92:cb:bc:8e:a4:9e:53:e9:0e:7c:ee:69:61:fd:2b:6c:60:
df:67:cc:37:b1:49:45:a7:6c:53:a1:25:9f:82:e8:d4:26:4b:
f7:f4:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:12:25 2026 by rpki-client