
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json)
Hash identifier: vk6fchOaYsukNyA4qRomAyNJ5WmOEgEJsNhF9NSE2lc=
Subject key identifier: F5:E8:28:C7:C2:05:32:2A:95:24:A3:E4:43:2E:4B:0A:02:F0:39:91
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
Manifest number: 0112
Signing time: Thu 29 Oct 2026 06:41:47 +0000
Manifest this update: Thu 29 Oct 2026 06:41:47 +0000
Manifest next update: Thu 05 Nov 2026 06:41:47 +0000
Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: QMwZgI6/J0Bl8Xw2iDvNhVmNXTDXGcasfiznSgeM2lg=)
2: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=)
3: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 06:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Validity
Not Before: Oct 29 06:41:47 2026 GMT
Not After : Nov 5 06:41:47 2026 GMT
Subject: CN=6ae2eaab-5801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:6d:79:aa:36:4a:8d:dd:4b:5f:5b:69:56:
c8:bf:4f:de:02:9e:03:0e:ac:c0:34:2d:7e:e6:a7:
53:92:d5:cb:fc:e9:69:28:98:4c:68:c6:d7:6d:d2:
3d:63:e6:9f:67:4d:a1:83:5f:be:53:ee:f0:13:eb:
ac:b3:cb:f5:9a:92:00:8e:eb:46:1b:99:94:9c:da:
fc:53:15:9e:e1:a5:e3:ca:e0:4a:bf:58:15:75:00:
22:e7:d7:c5:79:3c:b2:1a:bd:81:59:df:2e:62:70:
4a:d5:65:77:80:dc:02:8f:6d:18:e0:7e:6e:fd:1e:
2f:f9:eb:ce:e7:1a:5f:36:91:df:29:04:38:38:a3:
44:27:9d:72:4e:98:84:c4:cd:7f:e5:ab:87:d6:4a:
7c:d0:9b:0a:66:c7:dc:40:a2:41:e3:af:7d:72:57:
31:94:53:49:f2:ac:b6:5f:5c:2a:11:29:7f:7d:64:
f7:dd:21:db:9f:fa:a9:d7:f9:ed:97:c3:36:94:23:
4f:1e:6d:cb:4d:fd:d6:cd:43:fd:2d:fd:25:6d:ba:
aa:04:ee:23:64:49:da:0c:a2:8f:f9:48:ae:d1:0f:
51:45:5b:ad:4f:39:85:6d:df:3e:07:1e:c6:0a:1e:
7d:4f:dd:43:dc:ed:4c:9a:97:96:ad:30:2f:c8:b7:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E8:28:C7:C2:05:32:2A:95:24:A3:E4:43:2E:4B:0A:02:F0:39:91
X509v3 Authority Key Identifier:
keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:b2:18:41:df:85:5d:29:4d:e5:c4:07:e6:d4:6d:37:71:62:
f6:33:fe:4b:ae:71:5d:73:c9:83:61:36:6e:bb:54:4d:b4:84:
36:92:f9:e4:23:9d:61:c7:c0:eb:25:66:40:a9:a7:4e:02:85:
64:ca:e0:70:a3:62:9f:ff:f5:f0:c3:2f:f2:5e:05:98:e2:e4:
2a:46:65:22:18:13:01:d4:82:c4:8b:08:1b:d9:cb:16:55:86:
85:8a:91:8f:6c:e1:ca:8d:35:e8:21:85:cc:bc:4b:ec:7e:b8:
97:f7:d4:75:1f:45:1b:2a:07:7a:68:0a:48:7f:82:cf:16:43:
1f:11:fd:76:a1:16:7f:34:c7:63:59:68:03:e1:0a:9a:d3:15:
ec:77:e6:c0:f5:94:04:52:dd:50:57:7b:62:4c:97:45:e9:66:
0c:a3:9e:3b:9d:34:f1:87:f6:6c:19:02:9e:94:57:d2:95:ad:
31:a3:9c:e0:92:2c:d5:3c:08:fc:01:49:95:07:aa:16:8f:e8:
94:59:00:1f:b5:91:2f:30:f6:f7:48:b8:7e:26:a2:28:f7:f1:
2d:3f:d6:63:c6:3e:20:b8:b8:f2:10:09:4d:8b:66:06:cf:4d:
a0:b0:f4:0e:87:51:23:5c:80:e9:b9:36:37:02:64:de:3b:0c:
94:f9:a0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:35:48 2026 by rpki-client