
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
File: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft (raw, json)
Hash identifier: V5eY8SC62lAO4RMyW64uyjVCxxdsb4aKmvF3uJV2kxQ=
Subject key identifier: BC:D9:71:26:7B:72:BD:8B:84:73:1B:78:3D:3F:02:2A:71:75:E0:3D
Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B
Certificate issuer: /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
Certificate serial: 0470
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
Manifest number: 0460
Signing time: Tue 22 Sep 2026 23:46:43 +0000
Manifest this update: Tue 22 Sep 2026 23:46:42 +0000
Manifest next update: Tue 29 Sep 2026 23:46:42 +0000
Files and hashes: 1: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl (hash: nz3lnSU1YzttphWXHdsA5WY2OPnZo3bF2ufhRx+7J/A=)
2: E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (hash: 8/zGP160nh2DZMDYJOe8sBKWHlHcrlutomFPHyVw0oU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl
rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1136 (0x470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C7F, serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
Validity
Not Before: Sep 22 23:46:42 2026 GMT
Not After : Sep 29 23:46:42 2026 GMT
Subject: CN=6ab31362-1966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:ca:a5:e2:76:0b:a5:21:ef:49:11:28:7a:
21:21:85:e7:ba:54:f8:42:8d:dd:c1:d2:2c:83:7a:
0f:b8:c7:c4:3e:00:33:ce:4a:c6:f8:92:ed:7e:f0:
c5:c0:82:94:96:7e:dc:3e:4d:5e:03:d5:fe:85:3b:
9b:4d:f3:00:f9:15:14:8c:38:aa:03:3e:59:99:f0:
3d:b6:0f:86:12:24:f1:ac:f4:a7:16:31:c4:c5:68:
ab:bb:19:4f:2d:4c:25:5d:2a:ef:5b:9b:24:3d:07:
d1:d8:9d:41:16:be:07:11:40:6c:46:8e:23:5b:7f:
26:ce:ea:9c:3c:cc:74:03:4f:a1:bb:cb:ac:33:1a:
b5:60:b3:2f:7e:c1:f1:90:b6:b6:d1:21:b4:af:b2:
24:94:12:af:87:14:0d:d2:45:0c:0e:25:ce:e5:34:
34:12:14:37:5e:d8:b3:ff:b9:16:a7:a6:b8:99:41:
22:7d:76:a6:54:64:c1:84:0d:8f:29:a7:8b:4c:97:
71:d6:c0:12:cf:16:7a:60:aa:2e:b5:93:47:c1:00:
c4:2c:fd:e2:da:3a:52:2f:19:42:c2:55:53:fb:f9:
fd:c8:47:e9:e0:77:4b:89:e8:8b:a8:91:5b:45:f7:
92:27:43:4d:c2:5c:b1:81:3a:f2:f6:02:21:5c:d6:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D9:71:26:7B:72:BD:8B:84:73:1B:78:3D:3F:02:2A:71:75:E0:3D
X509v3 Authority Key Identifier:
keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bc:35:d4:d6:4b:31:17:9d:a2:3e:0c:eb:a0:6c:d6:b4:43:
57:65:7e:e3:aa:81:3a:40:cb:89:09:cf:0a:12:91:d0:62:62:
bf:74:9e:df:83:c5:1e:22:4e:79:9a:2f:7c:9f:bc:a1:17:37:
50:b3:a0:a1:f1:96:ac:f2:02:86:af:dd:d0:a8:98:d1:a7:1b:
56:2d:b9:70:6a:bb:f5:93:d8:98:44:0c:e2:3b:f6:4a:17:19:
b9:a0:86:98:8a:61:1b:bf:a8:66:59:e1:df:db:ca:13:22:74:
8d:ab:15:2d:13:e5:60:3d:3e:0d:4f:b3:33:be:cd:ae:88:42:
8a:25:4a:66:0b:65:6a:8e:27:10:11:7c:81:de:c9:20:e8:e7:
a2:e7:94:9c:a9:29:12:57:77:32:bf:3f:75:81:8b:b8:39:12:
53:54:aa:35:ac:28:bf:35:e3:2a:d9:78:75:1b:b0:5d:64:b8:
ed:86:95:1e:4a:85:fc:a1:d4:47:2b:b2:96:10:69:54:ff:ff:
22:a6:12:a4:e1:d9:25:89:c2:a7:39:90:0b:f8:1b:8b:c8:10:
40:1b:f6:09:7e:76:ae:67:03:33:5e:a6:63:e1:61:f0:75:ac:
06:f9:6e:25:eb:f9:2f:2d:4f:e7:c1:23:19:70:39:d6:62:84:
20:26:db:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFDN0YxMTAvBgNVBAUTKERBQjRBNTJBOEVDMUFBRDZDOTI1MkVFQTRENUQxNTY5
RDI3QUY0NkIwHhcNMjYwOTIyMjM0NjQyWhcNMjYwOTI5MjM0NjQyWjAYMRYwFAYD
VQQDEw02YWIzMTM2Mi0xOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv9HKpeJ2C6Uh70kRKHohIYXnulT4Qo3dwdIsg3oPuMfEPgAzzkrG+JLtfvDF
wIKUln7cPk1eA9X+hTubTfMA+RUUjDiqAz5ZmfA9tg+GEiTxrPSnFjHExWiruxlP
LUwlXSrvW5skPQfR2J1BFr4HEUBsRo4jW38mzuqcPMx0A0+hu8usMxq1YLMvfsHx
kLa20SG0r7IklBKvhxQN0kUMDiXO5TQ0EhQ3Xtiz/7kWp6a4mUEifXamVGTBhA2P
KaeLTJdx1sASzxZ6YKoutZNHwQDELP3i2jpSLxlCwlVT+/n9yEfp4HdLieiLqJFb
RfeSJ0NNwlyxgTry9gIhXNbBJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLzZcSZ7
cr2LhHMbeD0/AipxdeA9MB8GA1UdIwQYMBaAFNq0pSqOwarWySUu6k1dFWnSevRr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUM3Ri8wOTFFMUVBQUIw
RDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0YkpKUzdxVFYwVmFkSjY5
R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJyU2xLbzdCcXRiSkpTN3FUVjBWYWRKNjlHcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUM3Ri8wOTFFMUVBQUIwRDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0
YkpKUzdxVFYwVmFkSjY5R3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADbw11NZLMRedoj4M66Bs1rRDV2V+46qBOkDLiQnPChKR0GJiv3Se34PFHiJO
eZovfJ+8oRc3ULOgofGWrPIChq/d0KiY0acbVi25cGq79ZPYmEQM4jv2ShcZuaCG
mIphG7+oZlnh39vKEyJ0jasVLRPlYD0+DU+zM77NrohCiiVKZgtlao4nEBF8gd7J
IOjnoueUnKkpEld3Mr8/dYGLuDkSU1SqNawovzXjKtl4dRuwXWS47YaVHkqF/KHU
RyuylhBpVP//IqYSpOHZJYnCpzmQC/gbi8gQQBv2CX52rmcDM16mY+Fh8HWsBvlu
Jev5Ly1P58EjGXA51mKEICbbFA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:26:56 2026 by rpki-client