
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
File: US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json)
Hash identifier: FHuhWe1b8K2m23ZUoSnEaU3smfylzTJwQswJFeJ11CE=
Subject key identifier: E3:2A:DF:A3:2F:63:AF:45:69:33:2F:A1:13:19:B6:53:B0:F2:BB:11
Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Certificate serial: 061B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
Manifest number: 0609
Signing time: Sat 26 Sep 2026 22:58:52 +0000
Manifest this update: Sat 26 Sep 2026 22:58:52 +0000
Manifest next update: Sat 03 Oct 2026 22:58:52 +0000
Files and hashes: 1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: w3qk5jfVzjNwrmgWemUgUh5Gr5m9TNiWU2bfiyfy0kk=)
2: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (hash: u3v0nvDMzptv0Bv0++6upWHNRBc+BH3ns60gSH838+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl
rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1563 (0x61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Validity
Not Before: Sep 26 22:58:52 2026 GMT
Not After : Oct 3 22:58:52 2026 GMT
Subject: CN=6ab84e2c-6641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:8a:9d:9a:b1:86:97:6b:3a:22:6e:db:27:
1e:c8:8d:8b:89:5a:d1:2c:0b:75:6e:6f:49:61:8f:
c5:54:c2:f0:a5:23:f9:a3:a0:e3:1a:b7:c8:0e:d0:
42:7d:96:6b:25:93:6b:e6:11:9a:f2:60:ef:b9:38:
b9:a7:01:9d:b5:fc:ec:17:24:5a:4a:79:66:a6:27:
f5:9c:ec:2d:b2:41:c8:a3:de:38:76:c1:fc:52:f8:
f0:e3:ad:1d:9d:14:fd:3f:95:ab:12:e7:fd:14:e1:
bc:b3:53:c4:22:96:e6:07:b2:dc:49:43:f1:ab:a1:
24:17:0f:78:a5:67:66:19:1f:8d:05:c4:cc:13:d3:
c2:08:46:f0:f8:c2:41:9a:c8:21:54:94:cc:d3:28:
1e:ea:1c:65:db:c7:a9:68:46:79:da:45:ee:83:4e:
24:ca:76:e7:3a:38:b7:53:4d:ab:b6:b6:89:fe:e0:
ac:c7:f8:8f:b0:b9:20:2e:9c:82:8a:4c:06:08:d1:
40:5d:8f:89:50:de:dd:8b:4a:eb:89:30:ef:16:97:
54:7e:78:f7:d4:5a:0d:61:cf:24:d3:8f:d2:04:4b:
f4:d6:88:f3:7d:f2:64:39:6c:e9:76:55:d3:14:d9:
53:85:a7:67:3c:48:92:35:c1:0d:fd:4c:e8:1c:8e:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2A:DF:A3:2F:63:AF:45:69:33:2F:A1:13:19:B6:53:B0:F2:BB:11
X509v3 Authority Key Identifier:
keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c7:63:b4:97:41:2b:6e:0b:17:1b:32:69:74:18:5f:61:a5:
2b:a8:11:16:a3:39:a6:00:d0:bc:22:1e:05:e5:78:5c:c2:c0:
bb:59:fb:08:a9:35:ca:45:b7:33:db:d7:d4:ba:96:5a:bb:be:
14:51:4f:9c:ae:ad:1b:91:dd:f9:3a:2a:cb:4e:af:b3:63:74:
91:3a:37:cd:73:c1:9c:64:ce:cb:00:0d:a4:d2:e5:c8:13:38:
32:12:7a:4d:ce:63:a4:e4:fd:43:f2:d2:42:df:86:31:0c:a4:
5e:b0:b6:af:f0:b5:72:39:a7:17:5a:8e:50:c9:93:82:de:23:
8d:fd:f1:c0:43:98:c7:ff:9f:84:7c:58:4e:a5:c6:50:e1:71:
2c:fb:06:ac:36:d2:87:49:b3:70:f0:01:29:c5:39:2f:8b:57:
bb:0b:12:8d:e9:5e:73:62:a0:27:e4:b3:89:6e:79:97:a3:b6:
9c:4e:e8:75:e8:9b:91:d2:1f:27:a2:a3:4f:5f:49:94:6c:26:
7f:f2:2b:25:bc:cf:a6:69:f3:3a:0f:99:3e:3d:e4:23:e8:c6:
d2:58:b0:23:4a:22:3e:c1:45:6b:46:5f:dc:4d:af:52:31:b4:
61:ac:9a:ed:e9:71:b1:c5:be:4d:88:84:92:96:9c:17:46:9a:
9f:c6:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:12:26 2026 by rpki-client