
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json)
Hash identifier: Zcbb/TsHM0G+P2XTMjye0xunZxpUNFPuJBJKszyjLXQ=
Subject key identifier: AB:C5:0F:97:54:92:51:8A:37:6F:CF:9F:93:90:A4:47:25:B7:E4:68
Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Certificate serial: 02C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
Manifest number: 02BE
Signing time: Thu 29 Oct 2026 01:53:44 +0000
Manifest this update: Thu 29 Oct 2026 01:53:43 +0000
Manifest next update: Thu 05 Nov 2026 01:53:43 +0000
Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: gx7lq6TvgUA/Hz7ciwqhn6u5UmpIh8d1HIeQhgg2Qi4=)
2: 05BD1998108D11F197077311333D8C67.roa (hash: ZxF538zON35iTObIR2PUbabLdiG79qM6J447o9x0f0c=)
3: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 8ooMgmV7Ud+S1xspsx7qZBXNFAFm0OtpaMWTTHwLKP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 01:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712 (0x2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Validity
Not Before: Oct 29 01:53:43 2026 GMT
Not After : Nov 5 01:53:43 2026 GMT
Subject: CN=6ae2a728-a317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:e3:42:dd:23:15:61:96:1c:1f:82:3a:38:
35:3a:ad:92:d3:1a:a2:d1:98:c8:1b:91:7a:c4:b6:
76:d4:41:d0:1b:2f:b6:66:74:9b:83:88:5e:b9:32:
76:5b:e6:a4:44:b4:16:49:60:74:9d:b5:ba:ef:aa:
19:6d:90:a7:f7:fc:d0:30:b3:6c:2a:e1:7b:5b:ba:
a6:82:68:d9:0c:e6:07:aa:69:35:dd:a6:b5:1d:52:
0c:59:35:d3:36:90:38:6d:c0:8b:9e:f1:1d:c1:16:
35:62:93:f5:50:c6:bc:55:57:cc:06:98:88:18:6a:
a7:ed:b7:26:fa:33:76:fa:94:0c:ad:66:d1:a5:99:
f1:60:88:e7:0a:7c:b1:d7:eb:c9:15:ae:4e:bd:64:
80:46:4e:a8:18:5c:46:9c:a5:69:74:de:c2:b9:1a:
f7:fb:9e:24:bc:b4:91:c4:cb:17:ff:41:72:4b:e0:
54:b1:b0:db:e3:81:57:73:b3:5d:ba:64:f9:a1:14:
8c:3a:49:32:3f:aa:f7:2d:24:a0:bb:1a:f4:ec:7b:
42:a1:3c:24:a8:95:74:a7:e1:aa:54:29:2c:b6:fe:
2e:4b:84:98:11:20:8a:7b:64:f6:12:99:b3:18:83:
87:f8:c7:96:b9:0c:b7:2d:5d:43:ee:5d:85:4a:9c:
19:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C5:0F:97:54:92:51:8A:37:6F:CF:9F:93:90:A4:47:25:B7:E4:68
X509v3 Authority Key Identifier:
keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:54:ec:eb:7b:db:b6:24:86:b0:ba:3e:e1:d1:bd:87:0f:97:
36:18:01:f4:9d:f3:92:b6:b2:9a:c1:39:70:22:42:91:8a:f0:
0e:75:5d:fb:f0:b1:a2:91:b4:55:2b:70:97:09:af:0d:1f:85:
5e:42:f1:5c:97:8c:cd:f8:67:59:ae:69:3c:85:13:3b:2a:e4:
84:79:56:c4:36:dd:c5:e6:de:c9:2e:36:5f:73:c7:7f:58:22:
ff:78:60:90:7d:87:0f:5a:df:7d:f8:2a:cb:83:aa:cf:36:4e:
5c:d8:31:61:c4:84:cb:ee:01:81:c6:12:9d:be:c0:aa:fa:bb:
71:02:6e:f6:fc:54:c6:3b:b6:cd:a0:2c:72:91:08:16:76:9b:
3f:e3:42:e9:4a:42:83:d9:c9:d3:45:f6:39:3a:73:4c:29:ce:
16:1c:2b:f1:54:fb:58:17:1a:db:d3:1b:e6:1f:5d:1f:1f:35:
d9:64:96:69:c6:63:c4:11:04:a2:dd:f0:74:4c:68:43:0b:73:
0a:3d:79:36:42:2a:8b:70:b5:96:19:71:ce:78:12:74:43:ac:
9f:ff:1a:98:05:1f:1b:7e:f2:b7:57:32:c7:f9:98:17:12:e4:
e7:6c:62:be:41:87:67:47:a2:a3:4f:81:57:ba:bb:ac:de:e9:
db:ef:d5:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG
QTlBN0Q2QzgwHhcNMjYxMDI5MDE1MzQzWhcNMjYxMTA1MDE1MzQzWjAYMRYwFAYD
VQQDEw02YWUyYTcyOC1hMzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvOfjQt0jFWGWHB+COjg1Oq2S0xqi0ZjIG5F6xLZ21EHQGy+2ZnSbg4heuTJ2
W+akRLQWSWB0nbW676oZbZCn9/zQMLNsKuF7W7qmgmjZDOYHqmk13aa1HVIMWTXT
NpA4bcCLnvEdwRY1YpP1UMa8VVfMBpiIGGqn7bcm+jN2+pQMrWbRpZnxYIjnCnyx
1+vJFa5OvWSARk6oGFxGnKVpdN7CuRr3+54kvLSRxMsX/0FyS+BUsbDb44FXc7Nd
umT5oRSMOkkyP6r3LSSguxr07HtCoTwkqJV0p+GqVCkstv4uS4SYESCKe2T2Epmz
GIOH+MeWuQy3LV1D7l2FSpwZzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKvFD5dU
klGKN2/Pn5OQpEclt+RoMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz
MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh
ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZFTs63vbtiSGsLo+4dG9hw+XNhgB9J3zkraymsE5cCJCkYrwDnVd+/CxopG0
VStwlwmvDR+FXkLxXJeMzfhnWa5pPIUTOyrkhHlWxDbdxebeyS42X3PHf1gi/3hg
kH2HD1rfffgqy4OqzzZOXNgxYcSEy+4BgcYSnb7Aqvq7cQJu9vxUxju2zaAscpEI
FnabP+NC6UpCg9nJ00X2OTpzTCnOFhwr8VT7WBca29Mb5h9dHx812WSWacZjxBEE
ot3wdExoQwtzCj15NkIqi3C1lhlxzngSdEOsn/8amAUfG37yt1cyx/mYFxLk52xi
vkGHZ0eio0+BV7q7rN7p2+/VLw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 14:16:11 2026 by rpki-client