
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
File: 2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json)
Hash identifier: ZJY42fFnLJzAncXv0uxI4P9pkBNNE/6FGW1T9tjAomQ=
Subject key identifier: 34:6F:0F:75:6B:E5:7D:4C:B2:8C:49:F0:53:4B:6B:E3:F3:AD:91:B0
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Certificate issuer: /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial: 1843
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
Manifest number: 181D
Signing time: Thu 10 Sep 2026 16:31:16 +0000
Manifest this update: Thu 10 Sep 2026 16:31:15 +0000
Manifest next update: Thu 17 Sep 2026 16:31:15 +0000
Files and hashes: 1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: jjrd9GhIEuraY8YzwebJa1v2B51u4m3po+dsnKEDBLQ=)
2: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: axL4DxRLdN4w1oidCM91AwY0+Ml6Zzq4wlYIpZ72Alw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6211 (0x1843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Validity
Not Before: Sep 10 16:31:15 2026 GMT
Not After : Sep 17 16:31:15 2026 GMT
Subject: CN=6aa2db53-e907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:e9:a6:8c:b4:6a:ae:97:c8:6a:19:19:ee:
a1:e1:35:5e:72:30:21:b2:92:52:2b:87:a6:d2:d2:
5b:58:c3:a1:ef:9a:42:36:00:07:3b:82:f7:ac:28:
e6:d3:36:40:5f:6a:b0:9d:18:8a:4e:d7:6c:e6:cc:
4e:d3:40:70:9e:5e:2b:88:c8:5d:2e:96:c6:9f:40:
c3:cc:59:5d:21:23:00:75:6a:6b:f8:b1:35:16:52:
cb:78:ab:00:56:43:51:93:71:44:a8:49:ca:1d:6f:
ec:03:33:c3:e1:d2:c5:a7:17:93:db:12:fe:d9:cc:
0d:1a:41:be:b7:b3:03:46:ca:c8:98:5e:d5:d8:b5:
93:5a:64:8a:c9:75:47:e3:cb:fb:0d:6a:b3:9c:f1:
80:ad:50:4b:c7:8c:dd:c5:f0:52:18:7f:31:4d:83:
e0:bf:04:5b:8c:06:87:38:45:d4:53:5f:f6:1b:57:
ec:34:fa:38:8c:06:c0:f3:cb:db:19:01:ec:3c:79:
b6:f5:55:1e:81:39:bf:fe:d0:94:41:d2:90:e9:14:
69:60:ba:5a:79:54:e3:92:51:be:54:1c:05:14:ae:
54:cc:63:2d:68:27:a3:2c:7e:a2:96:ca:93:78:6d:
07:b1:c8:dc:b2:f5:44:01:68:c7:8b:bd:cf:f2:62:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6F:0F:75:6B:E5:7D:4C:B2:8C:49:F0:53:4B:6B:E3:F3:AD:91:B0
X509v3 Authority Key Identifier:
keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a0:36:d5:3a:9c:21:4a:c3:a8:9f:65:b0:03:9d:16:99:9b:
61:6d:69:03:77:c7:08:94:e2:b5:76:95:53:ef:8d:e7:fd:20:
44:1e:62:0d:94:7c:8a:2e:b2:e6:52:6f:41:24:ee:e4:c6:ae:
e2:d7:17:db:cf:86:26:17:10:08:e8:ed:ea:49:e6:36:01:d1:
19:c7:35:fa:ee:0f:aa:17:53:18:da:9a:48:43:0d:59:65:8a:
60:10:f9:55:87:ef:b4:ec:d9:7e:31:de:f1:5b:61:d2:9d:b5:
fc:e7:27:0c:a9:f4:0a:25:cf:7a:86:28:89:41:db:57:e1:88:
a4:02:9d:d3:e7:56:20:ab:ac:73:bf:61:0b:a2:31:74:9e:86:
8e:bd:d5:4d:50:f7:e6:4a:75:ce:07:72:28:19:60:9a:37:38:
7a:84:8b:ad:c6:8d:c5:b2:3a:e3:3b:19:15:60:1c:74:54:41:
cf:3b:56:cd:32:aa:37:e4:86:23:8a:ac:23:06:4d:47:3a:77:
78:53:f7:3b:25:91:de:0c:3a:e3:19:bc:2a:0c:be:fa:f5:c7:
7c:98:d1:b3:36:e8:a7:eb:90:24:b3:39:80:1b:6f:80:df:d8:
8e:47:17:4f:b4:f7:97:05:16:aa:a0:85:d1:94:6d:5a:73:96:
3c:60:43:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg2MkQxMTAvBgNVBAUTKEQ4QzY3MzA5NUU4MkE5QjdFN0RGQ0Q0NjU4MEY3ODMx
QThEMThBQ0EwHhcNMjYwOTEwMTYzMTE1WhcNMjYwOTE3MTYzMTE1WjAYMRYwFAYD
VQQDEw02YWEyZGI1My1lOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAunjppoy0aq6XyGoZGe6h4TVecjAhspJSK4em0tJbWMOh75pCNgAHO4L3rCjm
0zZAX2qwnRiKTtds5sxO00Bwnl4riMhdLpbGn0DDzFldISMAdWpr+LE1FlLLeKsA
VkNRk3FEqEnKHW/sAzPD4dLFpxeT2xL+2cwNGkG+t7MDRsrImF7V2LWTWmSKyXVH
48v7DWqznPGArVBLx4zdxfBSGH8xTYPgvwRbjAaHOEXUU1/2G1fsNPo4jAbA88vb
GQHsPHm29VUegTm//tCUQdKQ6RRpYLpaeVTjklG+VBwFFK5UzGMtaCejLH6ilsqT
eG0HscjcsvVEAWjHi73P8mJbCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDRvD3Vr
5X1MsoxJ8FNLa+PzrZGwMB8GA1UdIwQYMBaAFNjGcwlegqm359/NRlgPeDGo0YrK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODYyRC8zMjg3OUQzQUU4
QkExMUU3OEE2QTcwNDJDNEY5QUUwMi8yTVp6Q1Y2Q3FiZm4zODFHV0E5NE1halJp
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJNWnpDVjZDcWJmbjM4MUdXQTk0TWFqUmlzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODYyRC8zMjg3OUQzQUU4QkExMUU3OEE2QTcwNDJDNEY5QUUwMi8yTVp6Q1Y2Q3Fi
Zm4zODFHV0E5NE1halJpc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe6A21TqcIUrDqJ9lsAOdFpmbYW1pA3fHCJTitXaVU++N5/0gRB5iDZR8ii6y
5lJvQSTu5Mau4tcX28+GJhcQCOjt6knmNgHRGcc1+u4PqhdTGNqaSEMNWWWKYBD5
VYfvtOzZfjHe8Vth0p21/OcnDKn0CiXPeoYoiUHbV+GIpAKd0+dWIKusc79hC6Ix
dJ6Gjr3VTVD35kp1zgdyKBlgmjc4eoSLrcaNxbI64zsZFWAcdFRBzztWzTKqN+SG
I4qsIwZNRzp3eFP3OyWR3gw64xm8Kgy++vXHfJjRszbop+uQJLM5gBtvgN/YjkcX
T7T3lwUWqqCF0ZRtWnOWPGBDAA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 12:29:19 2026 by rpki-client