
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft
File: 2UVIdZZlg2gUctzDnfIkqtSon6o.mft (raw, json)
Hash identifier: uFgwEepW9F7SJUAYVIrG8FMvFiK2n50CnTN3B5/29ds=
Subject key identifier: E9:AE:A9:FB:28:B8:62:D4:AE:10:44:2A:DF:A9:C0:44:29:50:3F:F0
Authority key identifier: D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA
Certificate issuer: /CN=A91352D1/serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft
Manifest number: AC
Signing time: Wed 07 Oct 2026 07:38:13 +0000
Manifest this update: Wed 07 Oct 2026 07:38:13 +0000
Manifest next update: Wed 14 Oct 2026 07:38:13 +0000
Files and hashes: 1: 2UVIdZZlg2gUctzDnfIkqtSon6o.crl (hash: ly3COPa2lw70RXOZTtw0osXyCUWtB8TZMMrZs18/jcM=)
2: 63AFC09EC10C11F08F1AFF7FC4F9AE02.roa (hash: qoQvhlZYfW1wf6kMzBPQtPbBr/Oim0Lh0bB1O4IEF6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl
rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91352D1, serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA
Validity
Not Before: Oct 7 07:38:13 2026 GMT
Not After : Oct 14 07:38:13 2026 GMT
Subject: CN=6ac5f6e5-b325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:02:aa:a6:0c:fd:35:ea:d0:d8:94:c4:fa:
48:53:1c:24:2c:7a:88:32:ea:87:e1:88:c2:0b:a7:
07:a0:87:68:f6:3e:3c:e6:04:48:da:00:0f:31:e5:
87:7c:53:ad:bb:d3:14:6e:a9:a2:37:6b:1d:10:27:
e1:7d:b8:65:1e:21:04:95:f3:03:ab:98:7b:13:8b:
fd:34:62:2c:7e:09:0e:87:55:6f:75:ab:c9:a1:33:
7a:64:1a:c0:6f:8d:9f:5f:9e:39:33:0f:09:b8:da:
a8:3a:84:73:dd:48:ca:13:80:ea:05:07:d7:17:27:
67:99:59:9f:b6:84:ac:ea:3d:d5:29:1e:77:29:b1:
c5:45:60:38:07:6a:dd:8b:9c:61:a4:13:23:1b:95:
e9:4e:f4:cf:46:49:18:f7:bb:d3:75:d9:51:75:28:
21:da:ac:59:be:30:c4:2f:b8:42:17:45:55:69:19:
11:44:3f:16:33:d5:bb:c0:f7:10:f4:62:97:cc:c4:
d0:07:64:27:28:ff:c1:86:25:94:d8:01:32:cc:97:
86:67:ba:27:4b:fa:69:cc:04:6e:eb:07:89:d7:14:
f9:e9:2c:48:71:37:ba:78:79:40:0f:89:c1:8a:06:
fd:a1:5f:8e:f2:e5:7e:74:87:ef:be:52:8e:93:45:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:A9:FB:28:B8:62:D4:AE:10:44:2A:DF:A9:C0:44:29:50:3F:F0
X509v3 Authority Key Identifier:
keyid:D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:a9:b3:ff:7f:94:f7:d3:7d:57:12:f4:aa:18:cc:b5:4f:e7:
4d:89:f9:52:a3:4f:b3:5b:e2:be:10:7b:fd:4f:ff:fd:e4:c2:
58:b3:3a:a1:3b:77:18:ff:cc:af:9b:9c:fc:13:d1:ce:1c:cf:
19:bf:c3:7e:b8:e3:8e:52:18:3d:2d:7d:d7:42:e2:0b:9f:29:
07:c0:3a:03:24:22:a9:89:7c:d5:0c:b3:54:13:b9:e1:d6:e1:
e1:ff:a2:dd:33:09:cb:84:ec:e5:f6:67:60:f1:31:a4:d7:40:
67:6a:11:d2:cf:f4:60:11:ef:73:12:c9:45:cc:b9:f0:e7:4a:
ba:7d:84:ad:54:26:9e:8e:95:84:20:4e:05:cf:3b:75:83:80:
43:e3:76:89:5c:f3:08:04:24:26:26:ca:25:3f:63:19:98:8e:
c3:be:37:45:68:e0:90:7b:10:c6:b5:fb:c5:19:5b:c1:2b:90:
c2:4b:f2:49:51:d8:95:8a:04:c5:eb:e7:dd:fd:71:02:8b:3e:
7b:62:da:8a:65:a2:01:15:ce:30:cf:f8:d2:39:66:8a:e4:d3:
c4:52:b2:59:29:1f:40:dc:ef:77:1c:91:73:04:47:bf:25:3f:
ad:c1:27:16:5a:42:5e:dd:9f:88:b2:5d:72:65:4d:78:ae:a8:
6c:64:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:05:21 2026 by rpki-client