
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json)
Hash identifier: I/VCfc4OClUVCeCZT/c71p+gn5EHxao8hVRCvYCRn60=
Subject key identifier: 55:72:5E:B2:61:9A:1A:28:76:26:06:EA:BF:91:42:56:8A:FF:16:1D
Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
Manifest number: 01A6
Signing time: Thu 23 Jul 2026 05:33:18 +0000
Manifest this update: Thu 23 Jul 2026 05:33:17 +0000
Manifest next update: Thu 30 Jul 2026 05:33:17 +0000
Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: avlHy5kTt7JiSVKz2GZXQjxM0NFrESyCBBUC85RD+OY=)
2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: EFBskJYMHfJRXujHupPsFrdh1ToDlvL0xJdWDE7eAo8=)
3: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: i2+AU5JC1CnIuV2WebgbR1MhXzhp17jyG1HTb2dIKP0=)
4: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: EOqSQLbOPrsjZ56mAXCzCp42zP2pW/1hVyLkMumCHLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Validity
Not Before: Jul 23 05:33:17 2026 GMT
Not After : Jul 30 05:33:17 2026 GMT
Subject: CN=6a61a79e-9288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:64:fa:ef:b3:3b:dd:9c:b1:cb:54:e8:57:
a9:89:2a:5c:17:ed:26:f7:11:59:b9:a3:06:e6:3f:
7a:20:64:e9:c5:54:d4:7d:f0:68:6e:fb:db:53:ec:
f0:a5:69:10:36:3e:66:da:f4:ae:36:06:18:35:de:
f1:00:f4:dd:ca:bd:f6:ba:b0:3d:fc:62:c8:a3:75:
15:79:ee:d2:8f:f6:7d:96:c1:65:78:ba:4c:ad:a6:
c2:a0:b3:27:ce:c9:27:8f:e2:96:45:fe:b5:5b:66:
e3:ee:80:a6:fc:78:a2:19:69:d9:69:ae:82:5b:64:
ff:35:68:e9:57:f4:9f:84:7b:34:32:30:0f:18:80:
c6:83:5d:e7:d9:d9:65:da:ea:12:d9:b0:c7:44:bf:
fd:88:9d:9d:06:bb:90:8e:90:f0:7e:f4:3d:d7:e6:
5c:0c:62:f7:fb:81:b9:b1:ed:eb:46:b4:80:e4:f3:
84:37:63:57:2c:cf:bc:58:fa:ef:52:cf:d8:34:c1:
cc:4c:3f:77:bf:21:7a:c0:95:2b:19:e8:5e:98:dd:
0a:1b:bd:bd:86:5e:18:0a:84:c7:6b:17:00:38:ed:
02:11:37:2b:0d:64:7e:f9:f7:23:13:e4:84:58:ac:
ad:e4:90:eb:d3:b9:2c:5c:57:60:ed:0e:8a:f1:ea:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:5E:B2:61:9A:1A:28:76:26:06:EA:BF:91:42:56:8A:FF:16:1D
X509v3 Authority Key Identifier:
keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0a:75:46:3d:a6:99:7d:33:90:13:05:70:b6:19:26:a8:f8:
8c:db:18:34:9a:34:10:12:00:6a:9d:f5:cc:a8:f7:46:8e:f9:
17:0d:d7:26:d5:fa:38:44:77:83:44:ff:50:e4:10:4f:a5:2d:
d9:0c:5e:c1:2b:e7:82:bb:02:54:ca:ca:af:0e:42:83:93:a8:
7d:c4:5a:01:c5:d7:fd:05:80:86:48:e6:ea:00:6a:a7:34:d1:
fc:6a:5c:7c:98:0c:9e:18:af:62:da:db:dc:a9:cf:59:50:31:
b5:3a:3f:66:5b:ac:e7:f1:6c:a9:88:af:91:35:32:67:dc:e9:
d1:4b:a0:97:b9:8c:32:30:ec:6b:53:44:97:a9:0c:b1:dc:ce:
cf:ba:e6:c8:96:a5:8e:7a:6c:6c:71:e1:35:a6:27:bc:52:a7:
01:b6:50:f2:5e:30:7f:dc:59:b4:e0:f0:02:03:f8:57:5d:0e:
db:a9:90:3b:a4:8b:6f:31:6f:1b:41:ec:09:57:10:41:21:c3:
c5:77:fc:fc:59:f6:f1:4f:1e:5a:df:ad:74:70:cd:ce:3e:bd:
01:f5:de:0a:77:fb:bb:7a:d5:22:94:20:e5:20:23:fc:f7:ed:
f3:a6:8a:3e:58:e2:e2:dd:fa:69:b2:21:43:a3:6b:fb:9b:21:
c4:98:62:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG
MERDNTkzM0QwHhcNMjYwNzIzMDUzMzE3WhcNMjYwNzMwMDUzMzE3WjAYMRYwFAYD
VQQDEw02YTYxYTc5ZS05Mjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtGJk+u+zO92csctU6FepiSpcF+0m9xFZuaMG5j96IGTpxVTUffBobvvbU+zw
pWkQNj5m2vSuNgYYNd7xAPTdyr32urA9/GLIo3UVee7Sj/Z9lsFleLpMrabCoLMn
zsknj+KWRf61W2bj7oCm/HiiGWnZaa6CW2T/NWjpV/SfhHs0MjAPGIDGg13n2dll
2uoS2bDHRL/9iJ2dBruQjpDwfvQ91+ZcDGL3+4G5se3rRrSA5POEN2NXLM+8WPrv
Us/YNMHMTD93vyF6wJUrGehemN0KG729hl4YCoTHaxcAOO0CETcrDWR++fcjE+SE
WKyt5JDr07ksXFdg7Q6K8epkTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFVyXrJh
mhoodiYG6r+RQlaK/xYdMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx
NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF
QWJ6eURVdklERVB3M0ZrejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApgp1Rj2mmX0zkBMFcLYZJqj4jNsYNJo0EBIAap31zKj3Ro75Fw3XJtX6OER3
g0T/UOQQT6Ut2QxewSvngrsCVMrKrw5Cg5OofcRaAcXX/QWAhkjm6gBqpzTR/Gpc
fJgMnhivYtrb3KnPWVAxtTo/Zlus5/FsqYivkTUyZ9zp0Uugl7mMMjDsa1NEl6kM
sdzOz7rmyJaljnpsbHHhNaYnvFKnAbZQ8l4wf9xZtODwAgP4V10O26mQO6SLbzFv
G0HsCVcQQSHDxXf8/Fn28U8eWt+tdHDNzj69AfXeCnf7u3rVIpQg5SAj/Pft86aK
Plji4t36abIhQ6Nr+5shxJhiXg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:07 2026 by rpki-client