
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json)
Hash identifier: n9oDlHtvskKKxg98S41nT5iMMexn3uLVUyjju/++S28=
Subject key identifier: 5A:F5:C1:61:B0:DF:9D:13:A8:E1:BA:3D:60:2F:FE:EB:0D:EE:AB:59
Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
Manifest number: 0190
Signing time: Wed 23 Sep 2026 04:13:33 +0000
Manifest this update: Wed 23 Sep 2026 04:13:33 +0000
Manifest next update: Wed 30 Sep 2026 04:13:33 +0000
Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: kRfZZNScuSYg/v3+yNjEemtIRhBPi4eb1kiVMdcQmMs=)
2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: a57NdJ1gk+iJiRBW3C9KSb5FNlrBpcnk273JBCCOK0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Validity
Not Before: Sep 23 04:13:33 2026 GMT
Not After : Sep 30 04:13:33 2026 GMT
Subject: CN=6ab351ed-1f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:a5:bc:b6:cb:0f:b7:8b:83:a5:a8:04:d1:
35:63:6e:80:03:35:af:59:08:a3:0f:53:d8:e1:15:
aa:3c:6a:e9:1b:12:b0:e3:16:52:1c:85:85:6a:10:
db:ee:23:ec:8d:16:28:f0:86:bf:63:52:95:f9:62:
1e:7b:e6:ac:dc:51:70:58:b8:44:ce:0c:40:70:ae:
a8:95:ed:d4:4e:9c:1a:9b:d2:d0:5a:9d:1b:e0:d2:
74:85:58:14:9c:df:db:7c:ce:b4:80:d2:41:7c:b4:
31:b9:1f:bf:1e:db:8e:a7:7e:29:ee:ae:35:a8:c4:
0f:c9:cc:04:3e:56:91:e8:96:a1:48:af:e5:ae:4c:
c4:da:d7:b6:4f:82:90:a6:8e:59:2b:80:fd:06:c7:
7e:36:06:d9:00:fc:ec:a1:47:1d:c0:a9:99:d9:31:
34:25:b9:96:3a:46:5e:29:01:dc:bf:ec:17:4f:63:
63:6e:ac:10:8c:06:84:37:7c:4f:80:e1:a1:c3:52:
5d:3a:9d:18:86:36:48:38:8e:51:c9:c1:a3:d6:b3:
9c:51:b0:c4:55:2e:8c:c0:c5:8a:c5:5f:63:81:32:
d6:2e:7d:93:45:23:77:f9:58:70:89:89:c9:a7:28:
19:77:2f:a5:b2:b7:3d:d3:3a:0c:79:6a:37:ae:ba:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:C1:61:B0:DF:9D:13:A8:E1:BA:3D:60:2F:FE:EB:0D:EE:AB:59
X509v3 Authority Key Identifier:
keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:c6:aa:7a:aa:6b:5a:6d:f6:ea:80:fd:16:86:c3:e2:04:64:
86:58:7d:a7:16:bd:12:f8:1d:03:7d:f1:0e:52:a5:c6:46:ac:
66:69:0c:05:ff:37:0b:ac:2a:7e:73:0e:ed:d7:cf:d1:72:d2:
88:7a:cf:74:93:2e:e1:df:64:e4:37:75:18:97:e2:6f:71:a3:
2d:96:be:f8:af:75:07:95:d2:25:1e:0a:cb:8b:b8:e8:9b:6a:
b6:6b:95:ca:de:a9:55:6b:65:d7:f5:f9:59:d4:8b:c4:b5:47:
43:62:47:d6:f8:e9:c7:5e:f9:c3:de:af:9b:f8:35:d4:c4:b5:
63:20:a2:07:a4:8a:19:8d:35:08:05:8a:bf:f6:87:21:03:f6:
46:8c:f1:3c:b8:f2:37:f7:b8:a4:6b:38:70:51:7b:45:d0:8e:
33:6f:e2:46:c1:55:c3:6a:b6:91:cb:5f:42:08:cb:d4:1e:3f:
38:57:44:91:6d:73:fc:39:6c:87:a7:3e:06:17:a8:c0:13:f7:
80:79:12:64:ca:4a:28:2d:92:3a:e2:17:4b:19:bb:24:b8:ad:
67:22:01:d7:1e:be:f6:92:c9:1c:64:ed:37:02:53:63:86:20:
9d:f3:f0:07:e6:25:8c:ea:09:2b:97:57:83:15:64:66:c9:4c:
62:2a:f2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:43:54 2026 by rpki-client