
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft
File: 2gE-F4NYyzWot2XJvAkK6c8cT74.mft (raw, json)
Hash identifier: LI9FOmzPZFSu2CtiDcUekezoFuzghluYN52+7+CWc98=
Subject key identifier: 50:C7:39:EE:D7:7C:F3:F3:28:A0:EB:FD:6C:4B:2C:2D:C6:58:C3:1E
Authority key identifier: DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE
Certificate issuer: /CN=A91B2C88/serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE
Certificate serial: 073F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft
Manifest number: 0733
Signing time: Wed 30 Sep 2026 22:17:47 +0000
Manifest this update: Wed 30 Sep 2026 22:17:47 +0000
Manifest next update: Wed 07 Oct 2026 22:17:47 +0000
Files and hashes: 1: 2gE-F4NYyzWot2XJvAkK6c8cT74.crl (hash: EIAK8dMaNCkNbGRkzxHiQ6Mo4HbdmVBv815c+HGszY4=)
2: 3C5E55F041A411ECA73C8C0EC4F9AE02.roa (hash: w5l5bzdUBbOiymqqgIFAis/HyOoUZwKfNyUgPTXlOrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl
rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 22:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855 (0x73f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2C88, serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE
Validity
Not Before: Sep 30 22:17:47 2026 GMT
Not After : Oct 7 22:17:47 2026 GMT
Subject: CN=6abd8a8b-1b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:97:70:78:80:76:77:e3:cf:df:61:52:e6:
53:58:4f:35:a9:44:6b:31:78:ba:f1:38:15:00:1b:
fd:69:59:94:8f:33:6a:18:c4:74:e5:03:8c:af:23:
08:b1:4e:a7:66:74:73:71:c6:37:f1:84:74:81:fb:
e3:42:a2:bd:70:b4:1c:b6:6f:08:91:08:6a:e4:41:
23:e9:af:50:c8:73:a5:f8:56:84:7b:39:62:31:00:
25:b1:ea:01:52:1a:10:8c:cc:e8:04:55:d3:db:b9:
41:2d:90:2a:d7:a3:33:2f:89:76:1e:c4:9c:51:f5:
3d:e0:f5:78:fc:73:85:0d:26:39:5d:a3:9d:16:86:
25:5a:22:63:32:95:17:b5:a2:f4:be:9a:54:8a:8c:
91:9b:b1:97:53:b7:91:bc:57:04:cf:60:8d:a1:60:
5d:93:dc:b7:e9:47:55:c4:67:1b:18:c5:8d:ad:b3:
eb:13:d1:3a:07:7a:4d:6e:a6:c4:dc:77:6b:19:c1:
89:2f:b6:86:b7:cb:68:d3:93:64:69:22:b7:40:03:
6d:bf:17:86:f2:83:04:59:a1:75:6d:22:1b:b3:00:
95:1c:7c:28:f8:5c:1b:e4:4f:93:09:38:e9:f2:38:
5b:7d:91:ad:f5:0f:3c:a4:81:19:2e:27:af:c9:3d:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C7:39:EE:D7:7C:F3:F3:28:A0:EB:FD:6C:4B:2C:2D:C6:58:C3:1E
X509v3 Authority Key Identifier:
keyid:DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:9c:0a:ba:ec:18:e7:17:97:1a:de:3d:a3:16:a6:ac:c8:6d:
0d:6c:50:8c:8b:4c:f2:f3:f7:db:28:03:7d:a4:7c:94:f1:8f:
24:65:2f:f3:f0:95:65:7f:42:5f:95:06:60:c2:f9:9d:68:2c:
8a:c4:01:e0:42:22:64:35:c2:cc:4c:7e:3d:c5:fe:e1:21:34:
5c:d7:20:74:43:47:a7:7f:b9:bc:8b:9f:cc:76:f8:e6:08:28:
36:6b:37:c2:34:75:27:61:08:ec:63:4c:b9:ec:66:a5:f0:f9:
59:a5:cc:54:9d:cf:5e:1d:f2:4e:8c:50:b9:91:30:20:b8:2b:
8f:cd:42:ab:4d:92:81:49:88:79:2d:36:ca:70:c2:e8:d6:0b:
90:eb:b0:03:a0:42:1c:f3:65:9b:8e:ae:c0:38:13:4a:ea:90:
5a:de:35:c1:01:70:f4:7d:a3:61:15:d5:45:ce:fa:98:aa:ac:
8a:02:90:8b:35:da:e8:82:23:bb:bd:47:33:e5:60:1e:58:98:
2c:8b:06:33:c4:c4:98:8b:ea:e7:9c:22:56:35:28:fc:ae:f5:
0c:20:0d:72:57:bf:a9:1e:c6:1d:58:72:63:32:73:9c:96:d8:
42:9c:2a:ca:47:55:9e:b8:d3:7b:54:75:56:35:a7:a1:72:c3:
ef:40:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 02:17:05 2026 by rpki-client