
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json)
Hash identifier: 9WLU1hfpQSCuU+FzEHxMt+1OxViH0eR7jPrGuRYNauw=
Subject key identifier: 57:E8:4F:75:BF:CF:04:8D:21:89:74:74:61:B1:E8:EB:D6:BB:59:9A
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
Manifest number: 0101
Signing time: Fri 25 Sep 2026 06:14:23 +0000
Manifest this update: Fri 25 Sep 2026 06:14:23 +0000
Manifest next update: Fri 02 Oct 2026 06:14:23 +0000
Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: FBCIFv90sbqi6FlW7wkxHCKmXlRcEg0brzpwzRHxXrY=)
2: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=)
3: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Validity
Not Before: Sep 25 06:14:23 2026 GMT
Not After : Oct 2 06:14:23 2026 GMT
Subject: CN=6ab6113f-905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:7b:41:28:d1:fa:2e:76:e1:6c:94:0c:22:
ed:44:f1:b9:45:9a:c1:71:31:b7:2a:b9:e9:0b:e1:
8b:a4:bb:0b:e0:db:3c:ed:bf:8a:49:1f:51:ae:c6:
ab:8b:b7:e3:02:da:ec:20:e3:c9:31:dd:f8:57:02:
25:6d:32:73:80:ef:cf:46:41:3b:25:9b:aa:6d:a5:
38:60:26:88:34:e9:cf:f0:d6:33:2f:49:c8:0f:fc:
0e:3f:20:93:8c:a4:2e:61:33:e5:28:24:d9:30:8f:
2d:d4:74:06:3b:aa:81:d2:03:40:84:f2:92:26:ed:
e6:ca:83:13:5e:93:90:e9:d8:56:88:97:11:be:33:
d4:1a:93:ea:39:55:a4:f8:21:07:44:13:96:ed:6b:
51:ab:57:77:e8:a2:21:9d:1a:80:dc:68:50:8b:99:
1c:d1:30:e2:f5:8f:52:6b:25:94:20:b3:0c:ad:2b:
79:75:d0:1f:93:10:d8:6d:41:bb:cc:f5:0d:34:83:
a5:57:44:02:d1:ad:5f:9a:4d:1c:c2:ea:93:13:ce:
35:cf:e8:27:39:9f:42:51:6d:87:cd:51:62:4d:7c:
df:d5:b5:a8:2b:e9:67:0d:21:55:a5:e5:78:fa:d4:
5c:b9:6f:54:c8:60:78:fe:b1:eb:ac:b9:d9:3a:46:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E8:4F:75:BF:CF:04:8D:21:89:74:74:61:B1:E8:EB:D6:BB:59:9A
X509v3 Authority Key Identifier:
keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:54:68:83:50:53:15:6f:35:f5:cd:0f:79:1a:82:fa:d1:c1:
4a:28:b7:ed:f4:53:ff:5e:d9:b8:7f:12:77:17:f0:63:3d:01:
b1:06:4c:8b:12:f4:b0:d9:90:26:62:b0:d0:30:96:1c:88:c0:
71:d8:b5:24:f0:5b:52:2f:17:6e:1a:c1:fc:5f:fb:92:46:6e:
0d:f0:b4:47:e5:d5:a9:8d:0b:8d:ad:e8:5f:1f:91:43:82:12:
72:7d:1b:a6:e2:a6:96:d7:73:e1:0e:28:50:75:53:e6:78:98:
70:5f:c5:78:73:c5:ce:67:fd:0f:1d:43:b0:fc:be:90:41:4b:
69:cc:bf:c8:42:21:3f:89:35:fd:33:e0:74:3b:b4:af:49:41:
46:05:43:d9:44:be:7a:a6:81:aa:51:88:8e:5c:6d:b4:7a:06:
13:50:df:ac:3e:d3:f7:04:34:fc:56:0c:78:13:8f:13:15:7d:
05:20:21:30:9c:b0:d2:01:f7:51:44:cc:33:6a:62:2e:47:c8:
1e:56:ca:08:4a:8f:f1:16:a5:7e:19:f3:6e:58:ea:1a:b4:74:
52:a3:22:92:68:09:d8:ac:a1:bb:5a:ef:ab:62:2b:e2:e2:bc:
6d:2f:50:c4:a2:57:8b:5a:9b:7d:73:91:4e:3e:08:92:af:dc:
b7:0b:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:50:27 2026 by rpki-client