
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json)
Hash identifier: T22EvXQcSEm/Rds0w+FJ1u1IOqcesPCxyFwbMG7oOYI=
Subject key identifier: 7A:1C:AE:2A:AE:9E:15:C0:A3:80:7A:A6:F9:FF:B5:2A:BD:07:B0:CB
Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
Certificate serial: 075E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
Manifest number: 0749
Signing time: Fri 04 Sep 2026 21:43:31 +0000
Manifest this update: Fri 04 Sep 2026 21:43:30 +0000
Manifest next update: Fri 11 Sep 2026 21:43:30 +0000
Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: xIAo4uJ+0C1jJq5/19AKMC9cCvlQYI15KNbH5kI39Lo=)
2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: yNT65s+ZHoPIL3JOL1s/li7Ld0/LZuMqDxYj04bLRnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl
rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 21:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886 (0x75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91293E9, serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
Validity
Not Before: Sep 4 21:43:30 2026 GMT
Not After : Sep 11 21:43:30 2026 GMT
Subject: CN=6a9b3b83-1947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:19:1d:65:26:93:31:85:32:f9:35:af:d7:
af:bd:a3:a0:4f:0a:c0:3f:59:ab:df:a9:70:f1:6b:
57:7b:a7:4b:67:99:da:50:6a:a7:4a:00:a1:bb:b2:
c4:85:08:eb:34:ba:61:4a:31:73:c5:87:76:28:be:
49:6a:18:c7:2b:38:8e:80:3d:23:f6:a3:1b:ed:b4:
04:08:6f:75:5a:ab:e8:f2:5d:04:cd:4d:26:9e:a0:
f4:8a:52:81:78:c3:ee:66:aa:e4:ea:20:b0:71:dd:
20:cd:02:5d:81:26:a9:2c:d5:98:9b:10:90:8d:8c:
91:50:fe:6d:b9:d8:2a:2e:42:87:96:7a:cb:a6:bb:
02:45:5a:97:3c:19:03:ce:66:a7:64:01:4d:0b:8b:
38:2d:c9:be:d8:6b:44:3a:83:c0:c0:96:7d:f4:a9:
d4:d9:3b:84:94:70:2c:74:5b:de:90:36:bc:27:22:
56:19:19:5b:da:11:e3:45:9b:6e:35:63:57:c9:ac:
4f:59:9c:2d:68:80:0d:11:db:5e:4e:8b:27:09:61:
3b:ff:1e:79:0f:bb:9e:d3:28:da:75:85:20:34:87:
2c:b4:85:48:4e:01:7d:bc:47:61:d3:6f:9b:db:05:
ee:4c:2a:c8:10:2d:db:ea:bb:bc:40:71:bb:ea:28:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1C:AE:2A:AE:9E:15:C0:A3:80:7A:A6:F9:FF:B5:2A:BD:07:B0:CB
X509v3 Authority Key Identifier:
keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:21:30:b9:b7:c8:4a:3f:fe:5c:5b:6c:9e:5c:2d:ef:3a:28:
84:f4:b6:18:6f:fa:35:84:14:58:4a:5b:95:63:25:2f:50:ef:
b9:d8:7c:e7:92:ce:24:fd:a8:99:8f:af:ed:4a:a5:62:74:0c:
07:6a:4a:ee:54:52:e5:4b:9e:5a:80:65:ac:9e:fc:49:b4:d9:
13:71:49:d9:ad:8d:8b:27:d4:47:54:b2:a5:7c:9f:cc:b0:83:
c6:25:68:99:f5:83:84:f7:71:5b:ef:9e:3f:0d:2a:00:9f:af:
54:75:4b:8b:83:a3:a2:0b:c6:e6:1f:bc:3c:d7:d3:3f:32:c1:
19:f1:a8:39:31:19:94:41:87:74:b3:2b:5f:b4:bf:50:62:73:
66:10:d3:de:cd:3b:35:07:97:47:92:96:eb:61:89:90:54:cc:
de:44:a8:01:62:d7:6f:25:17:cd:68:1d:18:31:4e:39:90:39:
3b:93:32:7a:49:dd:79:7c:6e:d6:9e:c1:95:80:98:b1:44:7e:
b6:bb:9d:86:c2:4d:0f:db:da:0d:2b:a9:68:cd:ad:3b:39:df:
27:ae:07:a0:3f:fd:de:77:3f:ee:41:54:99:ae:95:d6:11:5f:
12:7d:ec:47:18:04:44:5f:51:4b:ea:f3:63:3f:f9:f8:78:e2:
58:bf:25:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:16:58 2026 by rpki-client