
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
File: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json)
Hash identifier: ZMX8qpbg7kiMHSwDT51NNzXIRVdrL8oaAPMolbmBob8=
Subject key identifier: D5:D9:CA:B8:38:1F:0B:75:B2:11:C5:50:0B:9B:FF:32:73:A4:92:2A
Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Certificate issuer: /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Certificate serial: 0768
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
Manifest number: 0740
Signing time: Sat 26 Sep 2026 22:01:11 +0000
Manifest this update: Sat 26 Sep 2026 22:01:11 +0000
Manifest next update: Sat 03 Oct 2026 22:01:11 +0000
Files and hashes: 1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: KbjQHLlXisY18g/tcCctKx5mwob4SXwHcx4fkedMFp0=)
2: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: EIzNMKDFWXT+xpDDB3WLdazu32oeLTAqnJXbS3MPXsE=)
3: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: kK1XQ5Qi/71Yzi7I23BLNly3sjDmgPxSxXxrn5KrS+k=)
4: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: Axv4ofsSe90yP+Tj74eBTq7TDNPSfa7eV4MAl8BctRE=)
5: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: mIm/bbZcQkFrDlz9RJ874pUYBEB1ADCrlxMEBQ9UkoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1896 (0x768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Validity
Not Before: Sep 26 22:01:11 2026 GMT
Not After : Oct 3 22:01:11 2026 GMT
Subject: CN=6ab840a7-ea9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:e8:61:5f:54:d7:b1:ff:90:e6:4c:a1:39:
5d:3e:6a:59:4e:c6:33:8f:d2:af:cd:f2:b0:23:0e:
53:5b:ab:76:90:86:9d:f7:bb:79:cb:63:dc:0d:d7:
3b:7d:78:14:bd:80:e5:7c:88:83:95:63:b0:5d:3a:
e1:1a:00:e7:d1:cb:ed:fe:8b:42:e1:93:61:bf:6b:
48:c2:d7:cf:64:7b:4d:e2:40:90:ad:30:0c:94:ab:
0e:3a:3e:8f:c6:4e:7a:f8:df:1c:ad:e4:69:79:6a:
54:41:43:73:da:86:6f:a2:53:6c:fc:f8:66:25:dd:
cc:7c:b9:2a:2a:a8:54:68:25:33:53:83:c6:06:65:
b1:20:26:5b:7f:c6:1a:31:bf:70:ee:b3:e2:0b:c4:
b6:57:94:21:1b:4d:cd:1a:55:77:0d:b6:44:8b:ab:
6e:c7:10:2c:a8:d0:e5:b2:60:56:41:3d:a6:e2:4d:
85:65:d2:1d:ad:e1:91:56:15:18:f0:58:60:b2:50:
46:fd:17:18:02:2a:d6:72:7b:40:f2:d2:13:f8:9a:
47:38:e4:d3:70:71:f9:db:af:55:08:85:9d:ea:df:
ae:f5:60:10:80:75:e3:df:63:fe:03:c4:d5:d3:0c:
e3:a9:c9:8d:9b:38:33:82:86:5d:98:56:de:ac:bc:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D9:CA:B8:38:1F:0B:75:B2:11:C5:50:0B:9B:FF:32:73:A4:92:2A
X509v3 Authority Key Identifier:
keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2a:20:19:52:e9:35:8a:ca:b3:e9:39:ee:bc:0b:ef:fd:87:
cc:d2:89:72:de:c7:10:b6:19:a8:b8:4e:74:15:57:af:e2:da:
6f:ca:b3:b2:c5:ed:82:cb:4f:46:57:bc:65:f9:81:c4:39:1a:
34:d8:bc:9f:03:3e:2c:46:fe:32:05:7e:8a:66:59:3c:55:16:
71:fb:b5:52:12:e6:8c:08:e4:3e:a5:37:eb:8c:73:6b:ad:e0:
e1:cc:47:e8:74:3d:12:6d:ce:c2:65:8d:07:98:9f:61:d0:84:
21:aa:17:0d:73:43:c2:df:eb:06:80:de:a3:9c:3a:ef:73:6c:
8e:b9:9e:cc:0e:a7:bb:29:35:1a:c1:84:9e:8e:6a:fa:28:9e:
94:98:3c:1a:74:81:9d:05:d1:f2:2f:14:ca:1b:8b:6a:c3:9d:
2b:98:d4:b8:10:51:f5:9a:2b:44:1f:89:77:f3:29:6e:70:de:
14:d9:eb:83:98:2c:51:11:54:69:57:32:68:87:4b:2b:ab:3a:
79:e4:ef:8f:07:4e:92:f8:29:08:1d:30:97:5c:c3:ab:c1:82:
92:c4:ff:1a:dd:e2:bc:7f:7d:f9:78:d6:28:6a:07:7f:b6:81:
05:0e:6f:f2:42:a5:19:54:40:cf:09:d5:56:b4:c2:71:9f:df:
04:06:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:02:27 2026 by rpki-client