
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json)
Hash identifier: v7vyADd6+Zf2VEOul66wO2aFcJD3SYFi52a4qGX88Ac=
Subject key identifier: 22:29:65:BB:67:C8:FE:8F:9D:A8:6A:99:64:AC:AA:58:FB:DA:9F:78
Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17
Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
Certificate serial: 02BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
Manifest number: 02A3
Signing time: Fri 25 Sep 2026 02:02:09 +0000
Manifest this update: Fri 25 Sep 2026 02:02:08 +0000
Manifest next update: Fri 02 Oct 2026 02:02:08 +0000
Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: eyQgad3PvuEMosWDLNZhEfGX5vnVQEmBDM+p6aPRuNw=)
2: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: 8KKDSMBlMVX3WIkFvdZMkpRJGKyqonScIIf8lT6mmuA=)
3: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: TG2ohJNYEaDsDYNDfYYhx+nUq/BWPbtnOzSvkzV8QmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl
rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
Validity
Not Before: Sep 25 02:02:08 2026 GMT
Not After : Oct 2 02:02:08 2026 GMT
Subject: CN=6ab5d621-5eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:ea:b5:65:ac:d4:00:32:45:4b:82:05:46:
47:0f:28:bc:a6:00:e5:2e:28:89:32:b8:19:6a:58:
4d:12:09:12:9f:77:41:68:07:46:8f:cf:18:d8:22:
43:0e:fe:7d:38:fa:e7:b8:3f:64:d9:8b:25:aa:5b:
69:73:ad:39:25:1d:2d:27:bd:d8:6e:98:b9:73:4e:
3b:8b:41:81:c6:71:c8:07:e5:6c:81:ff:f5:eb:95:
4b:6d:d0:26:3e:ab:d0:46:33:7f:26:62:a2:00:3e:
ee:94:63:91:6d:d7:82:7e:4f:0d:2e:84:fe:ff:59:
d9:a5:fd:59:9c:b9:e0:77:1b:7f:40:e7:1c:8d:51:
1c:dd:ef:9e:34:95:22:28:84:f8:d3:b8:e5:84:1f:
8f:5a:a2:8f:12:e2:b9:5d:fc:09:2d:b3:03:05:3d:
08:e4:c6:f4:cc:bb:67:90:7b:2a:85:40:a5:c8:c9:
27:83:11:05:eb:07:bf:8a:14:1b:1d:e8:0a:0b:3f:
6a:84:4d:7e:e9:7a:b8:c8:9c:14:63:3f:08:d8:75:
00:fe:04:3d:7e:81:51:fc:2b:df:ef:f8:fe:df:d8:
5a:17:75:db:0d:66:1d:91:7e:63:b9:0a:8a:13:0c:
d7:05:e1:28:98:11:5c:5b:26:e3:ba:eb:08:08:e8:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:29:65:BB:67:C8:FE:8F:9D:A8:6A:99:64:AC:AA:58:FB:DA:9F:78
X509v3 Authority Key Identifier:
keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:9d:c7:bd:25:d0:e3:4d:e5:28:80:37:ac:81:a4:5a:a9:79:
fa:bf:d0:b9:4a:1c:0e:2d:70:39:78:69:7c:19:97:a2:c5:e0:
28:c3:33:a9:eb:0c:4c:ca:7b:9d:2d:14:1e:23:0d:ca:42:98:
f2:da:4e:19:dd:85:a1:6f:10:68:0f:99:1a:36:2b:9d:69:63:
e5:8f:e3:0f:6c:4e:cf:b8:cd:43:cb:4d:0f:88:1f:dd:d7:1b:
4a:71:86:9f:9a:da:6c:84:4c:c0:96:22:47:14:b2:fb:1e:d3:
b5:ae:cd:6d:35:45:8e:ec:1b:0a:e3:b1:d9:45:d8:9e:94:16:
1a:cf:7e:07:93:ea:b1:ca:79:ad:82:2c:4d:66:7c:cf:3a:f5:
96:41:83:7e:73:52:69:55:39:f1:d5:87:a6:14:6e:49:dd:30:
6c:83:07:8b:94:79:e1:de:35:be:39:14:04:5c:e2:05:87:31:
8e:64:41:76:61:c2:2e:38:11:36:6c:41:d6:b5:d0:96:c0:cf:
81:9e:1b:5e:26:85:12:48:ac:ea:ed:65:ab:66:6b:4d:3c:07:
5a:b3:3c:0e:86:fd:7d:79:2d:1e:05:65:09:bd:c7:2f:ae:2a:
84:5b:32:ef:98:26:6c:60:4b:ab:3d:c7:21:0e:df:c9:42:4c:
eb:f7:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:37:05 2026 by rpki-client