
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json)
Hash identifier: /0AmJHexen53qxs3so46+9nh6yWyuvqjlnIx2HQA2aE=
Subject key identifier: 4E:A0:FF:6A:CC:01:79:69:E4:47:19:D0:F5:C2:E7:1D:7C:62:FF:1A
Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Certificate serial: 0524
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
Manifest number: 0515
Signing time: Fri 02 Oct 2026 23:55:53 +0000
Manifest this update: Fri 02 Oct 2026 23:55:52 +0000
Manifest next update: Fri 09 Oct 2026 23:55:52 +0000
Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: JIueZgDEtV6yfD2n3QdTG9XqyoNKE/8+7cE6LEM1uxI=)
2: 996419B6627D11F1B70F09038E47A888.roa (hash: 6fwP2rsJ1aYLnM+RF5A41SVQIk30a/xQCKjUg+QU10c=)
3: hi6XFGG7lg3zKMm4tIJacD3ClQg.asa (hash: nD16c1SaImd5jIeliiej27leO49yQYLvEwXAU3d5DJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1316 (0x524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Validity
Not Before: Oct 2 23:55:52 2026 GMT
Not After : Oct 9 23:55:52 2026 GMT
Subject: CN=6ac04489-2f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:60:0f:59:45:ab:71:57:32:dc:3e:69:7c:
a7:f7:7d:10:f6:46:0e:21:8f:9d:c6:6e:8e:04:9a:
53:ee:76:8c:c7:80:4c:b7:9c:ec:1f:6c:a4:a2:40:
1d:ac:be:44:c3:26:75:ae:92:65:17:e0:dc:89:7d:
92:7f:d5:aa:f5:c2:a2:3b:9f:15:ff:f2:ac:83:ff:
56:b0:d1:9e:78:ba:18:7d:90:b9:04:54:60:e0:95:
a3:a5:07:91:18:30:fa:03:c9:7f:93:62:d3:25:0b:
29:07:d2:59:43:e6:ac:ca:0d:1b:d2:ed:5d:19:35:
13:52:f9:4d:e2:43:83:74:20:e8:f2:ac:85:5c:54:
fe:a3:34:62:a4:ac:6a:ae:26:0d:85:17:65:09:64:
a6:f8:10:85:ed:21:95:9a:0b:dd:a3:62:8f:71:cc:
36:37:05:cb:1e:09:4e:42:96:95:28:15:9d:51:01:
06:22:36:0e:1f:24:77:75:07:c1:71:0d:ae:e3:19:
c6:af:46:68:43:f2:8b:b2:11:04:9c:ef:b2:55:46:
34:32:ae:d0:18:de:8b:74:d6:52:e6:bd:bd:29:d2:
da:b0:fe:a5:64:3d:c0:b4:01:dc:09:a6:47:fb:31:
a1:93:75:68:79:1e:80:22:5f:7b:69:6f:28:52:da:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A0:FF:6A:CC:01:79:69:E4:47:19:D0:F5:C2:E7:1D:7C:62:FF:1A
X509v3 Authority Key Identifier:
keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:64:7c:a9:5f:df:52:35:9b:38:3a:dd:59:4a:00:91:e3:d1:
79:68:8d:74:04:c5:4b:6d:f2:20:8b:ae:e5:16:bc:b9:f1:08:
3e:32:5a:24:f5:9b:e9:cf:c0:0b:8a:d8:8e:18:66:8e:97:7f:
08:79:4f:a9:db:55:3b:05:89:da:52:b4:56:27:c4:ff:85:29:
80:28:15:49:25:bc:f4:1d:2d:dd:6d:ad:9a:1a:d7:d7:ee:6c:
bf:9c:c2:2c:a3:21:6b:6e:8a:62:f9:f3:34:ee:cb:29:5f:1f:
55:81:94:73:34:cc:7d:2d:b6:c5:aa:46:c2:32:42:44:2e:6b:
11:57:92:20:10:f1:3b:d6:77:66:37:07:88:44:ac:8f:23:ec:
e5:be:e6:6a:18:1a:8f:0e:a0:54:a3:85:41:cf:02:3f:4e:7f:
dd:e6:68:2e:47:58:3f:25:18:37:8c:e1:17:cc:d7:d4:ec:02:
b5:9e:4d:fa:4d:97:dd:cb:d1:e7:f9:b6:1b:ee:07:31:9f:f1:
ff:d3:af:a6:71:0b:65:bb:4a:aa:c1:0f:86:97:e7:af:85:38:
e6:bb:93:44:f5:d8:1a:27:c5:21:54:06:3f:26:e6:a1:c3:af:
96:7f:2d:10:ee:c3:cf:97:d2:d1:3f:dd:6f:06:41:8f:8e:3d:
ab:8b:31:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2
QTJDMzc4NzcwHhcNMjYxMDAyMjM1NTUyWhcNMjYxMDA5MjM1NTUyWjAYMRYwFAYD
VQQDEw02YWMwNDQ4OS0yZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAms5gD1lFq3FXMtw+aXyn930Q9kYOIY+dxm6OBJpT7naMx4BMt5zsH2ykokAd
rL5EwyZ1rpJlF+DciX2Sf9Wq9cKiO58V//Ksg/9WsNGeeLoYfZC5BFRg4JWjpQeR
GDD6A8l/k2LTJQspB9JZQ+asyg0b0u1dGTUTUvlN4kODdCDo8qyFXFT+ozRipKxq
riYNhRdlCWSm+BCF7SGVmgvdo2KPccw2NwXLHglOQpaVKBWdUQEGIjYOHyR3dQfB
cQ2u4xnGr0ZoQ/KLshEEnO+yVUY0Mq7QGN6LdNZS5r29KdLasP6lZD3AtAHcCaZH
+zGhk3VoeR6AIl97aW8oUtolNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6g/2rM
AXlp5EcZ0PXC5x18Yv8aMB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF
RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1
QkR3ZzdxOHI1R2xxTERlSGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe2R8qV/fUjWbODrdWUoAkePReWiNdATFS23yIIuu5Ra8ufEIPjJaJPWb6c/A
C4rYjhhmjpd/CHlPqdtVOwWJ2lK0VifE/4UpgCgVSSW89B0t3W2tmhrX1+5sv5zC
LKMha26KYvnzNO7LKV8fVYGUczTMfS22xapGwjJCRC5rEVeSIBDxO9Z3ZjcHiESs
jyPs5b7mahgajw6gVKOFQc8CP05/3eZoLkdYPyUYN4zhF8zX1OwCtZ5N+k2X3cvR
5/m2G+4HMZ/x/9OvpnELZbtKqsEPhpfnr4U45ruTRPXYGifFIVQGPybmocOvln8t
EO7Dz5fS0T/dbwZBj449q4sxAA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 09:03:14 2026 by rpki-client