
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json)
Hash identifier: Cxe7dD8RSYwFYGOYFzBRhxubpiuVBM57R8s6c17/sEw=
Subject key identifier: 43:B0:98:21:93:6E:4A:4A:90:53:5C:CE:95:D1:5F:6F:1C:08:50:49
Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Certificate serial: 0829
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
Manifest number: 0821
Signing time: Tue 22 Sep 2026 20:55:36 +0000
Manifest this update: Tue 22 Sep 2026 20:55:35 +0000
Manifest next update: Tue 29 Sep 2026 20:55:35 +0000
Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: mTvLxAZ2jK9UJFxHgsiwIyEDMuyhSs4RDiaUK039mU0=)
2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: zq6YsHOFAkCUjOwvFtu/Gf7IKiFUQhFU7rExUxXP4/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2089 (0x829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Validity
Not Before: Sep 22 20:55:35 2026 GMT
Not After : Sep 29 20:55:35 2026 GMT
Subject: CN=6ab2eb48-83c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:f5:23:f8:c8:3d:23:e9:29:e7:28:e8:c7:
f1:24:7c:6d:f3:90:8f:2d:be:9d:30:aa:34:fc:c1:
27:d7:0a:0d:18:92:e1:19:5a:46:0c:4d:91:3a:5f:
76:ca:f6:ea:6e:94:0c:67:c5:6e:81:04:f7:13:39:
4e:fa:b0:ae:71:7e:eb:3b:c2:34:d9:5f:89:76:0a:
09:14:1b:01:0f:eb:53:8d:1a:f8:4e:2c:10:8c:dd:
c4:34:55:26:63:33:d7:4d:1b:39:68:fa:05:e7:8b:
f7:86:1f:9f:0b:9f:a9:6a:f4:96:f7:77:c4:1b:43:
61:0a:e0:69:e5:09:22:3b:d9:01:e0:da:82:36:ce:
b5:45:36:e7:14:ee:05:3e:e4:3c:46:46:95:4f:65:
40:4f:91:5b:7b:aa:db:83:e3:3d:fd:bb:47:0f:6d:
cb:98:85:37:f9:16:d5:91:42:64:4e:8c:7a:d9:f9:
41:ca:16:76:6b:f7:77:b0:42:91:e7:e4:58:67:f5:
e3:c8:c0:01:41:4c:cc:7d:52:c1:ca:cb:81:4b:6b:
7d:13:80:7e:d4:9c:dc:6b:6a:35:b2:8a:00:7a:bc:
84:ea:c8:a8:ee:bf:e5:ff:61:70:21:51:58:7d:ba:
34:b5:89:95:4d:ff:2f:a2:f1:0b:04:f1:3e:86:55:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:98:21:93:6E:4A:4A:90:53:5C:CE:95:D1:5F:6F:1C:08:50:49
X509v3 Authority Key Identifier:
keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:5b:31:f5:2b:c1:02:42:51:12:46:c8:44:85:d1:8a:97:33:
09:b3:12:8d:e6:c4:ba:bf:0b:52:0b:60:93:63:7a:aa:40:d7:
d0:59:2b:f2:f6:f1:eb:1d:ae:89:0e:3b:40:68:0a:37:99:dd:
d7:0b:3c:63:ce:c4:67:de:09:3f:f5:b9:d9:e1:00:d3:b1:b4:
f7:aa:7d:6b:92:7c:ce:67:f6:e2:3e:e7:97:22:94:83:b2:67:
89:33:b0:fe:08:83:e2:67:93:7e:57:37:4d:41:70:8c:fc:f1:
d7:e9:4f:78:be:8e:8e:ce:66:f0:59:8f:63:08:89:ef:b2:e5:
82:c9:91:12:a3:5a:ad:17:99:81:8b:63:bd:33:77:25:2b:65:
d6:1a:54:3c:aa:3a:1e:ee:8e:8b:1e:b5:54:e2:23:4f:01:4b:
a0:95:44:aa:a5:87:d7:4d:0d:b2:b7:de:51:99:e2:54:3e:16:
01:35:f9:ad:8e:63:0a:1c:73:f7:d8:6b:8c:e3:a4:de:64:75:
c5:de:81:9c:03:eb:13:8a:a7:13:65:88:d1:13:23:8a:32:0f:
d5:71:8c:9c:7f:2a:22:98:04:8c:18:a5:0a:2d:10:71:1c:a3:
a8:41:ba:21:f7:65:2b:16:16:b9:85:ee:de:22:c0:02:9f:a9:
45:8a:f0:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE
ODEwMjQzRUUwHhcNMjYwOTIyMjA1NTM1WhcNMjYwOTI5MjA1NTM1WjAYMRYwFAYD
VQQDEw02YWIyZWI0OC04M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsan1I/jIPSPpKeco6MfxJHxt85CPLb6dMKo0/MEn1woNGJLhGVpGDE2ROl92
yvbqbpQMZ8VugQT3EzlO+rCucX7rO8I02V+JdgoJFBsBD+tTjRr4TiwQjN3ENFUm
YzPXTRs5aPoF54v3hh+fC5+pavSW93fEG0NhCuBp5QkiO9kB4NqCNs61RTbnFO4F
PuQ8RkaVT2VAT5Fbe6rbg+M9/btHD23LmIU3+RbVkUJkTox62flByhZ2a/d3sEKR
5+RYZ/XjyMABQUzMfVLBysuBS2t9E4B+1Jzca2o1sooAeryE6sio7r/l/2FwIVFY
fbo0tYmVTf8vovELBPE+hlVUnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOwmCGT
bkpKkFNczpXRX28cCFBJMB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0
NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR
LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx
RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyFsx9SvBAkJREkbIRIXRipczCbMSjebEur8LUgtgk2N6qkDX0Fkr8vbx6x2u
iQ47QGgKN5nd1ws8Y87EZ94JP/W52eEA07G096p9a5J8zmf24j7nlyKUg7JniTOw
/giD4meTflc3TUFwjPzx1+lPeL6Ojs5m8FmPYwiJ77LlgsmREqNarReZgYtjvTN3
JStl1hpUPKo6Hu6Oix61VOIjTwFLoJVEqqWH100NsrfeUZniVD4WATX5rY5jChxz
99hrjOOk3mR1xd6BnAPrE4qnE2WI0RMjijIP1XGMnH8qIpgEjBilCi0QcRyjqEG6
IfdlKxYWuYXu3iLAAp+pRYrwZw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:56:52 2026 by rpki-client