
$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
File: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json)
Hash identifier: zDm/ZCjfIEMFhsSIbEdg/ossHHTUHxbwIU/n86PBgOM=
Subject key identifier: 2E:D2:FF:C1:E1:3C:7F:16:8F:86:5E:73:E5:11:2D:D4:9D:CC:B1:AE
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial: 0277
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
Manifest number: 0261
Signing time: Sun 05 Jul 2026 02:46:19 +0000
Manifest this update: Sun 05 Jul 2026 02:46:19 +0000
Manifest next update: Sun 12 Jul 2026 02:46:19 +0000
Files and hashes: 1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: 2WeKEmqinMf3G8jk3dKrikvIrbiEI4oIxHbaOndK1J0=)
2: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: oTWb+bgInuA40lVE9MU0fw0Ps1nvcZEIkiY5rAEAf1M=)
3: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: didvJhI7x6rWco2OGYAbxDlObbw/3Pq6tRwgusbYWYA=)
4: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: uq6cUAp8aWstgVcfNAAsf2DmlkVgoELMDbHxDJXHEOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 02:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Validity
Not Before: Jul 5 02:46:19 2026 GMT
Not After : Jul 12 02:46:19 2026 GMT
Subject: CN=6a49c57b-5f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c8:02:a7:0e:d8:5a:0e:4c:e2:9b:96:5b:3d:
b0:9b:fe:28:ec:c4:0e:d0:88:b7:5a:7e:87:c5:1f:
65:8c:11:9b:80:bc:44:77:af:3c:64:2c:b4:4a:49:
42:0f:98:bf:e6:15:ca:50:b3:af:cd:c8:5d:5d:27:
6a:96:b6:03:9d:b6:e5:3d:82:0a:a4:cc:9a:79:0d:
4e:02:2c:3c:5b:e0:c8:bf:93:82:df:0c:af:94:f2:
b7:c8:ae:13:1b:46:76:1f:76:9f:55:77:f2:60:08:
cf:9d:b5:e6:b6:c3:a6:3c:17:b8:7e:9e:b7:8f:85:
c4:b6:9d:8a:da:3a:c4:a1:ba:bd:83:58:ad:5d:4d:
b4:7b:7a:80:ab:12:49:7d:28:49:4e:30:b2:f3:69:
35:5b:b6:90:5f:3b:7b:3e:7b:c1:61:5e:85:1f:82:
9b:c6:6c:55:a3:0c:8c:97:c6:9d:05:eb:c8:71:54:
f4:c2:87:14:8e:dd:72:ef:7c:29:ca:96:23:25:e0:
1a:9e:ea:ef:bd:02:9c:a3:7c:5f:6c:97:8b:57:b3:
39:cd:8d:9e:7c:fb:92:e9:b4:e4:90:1d:7c:da:ec:
8c:9b:46:dd:46:88:90:fe:83:bc:3b:8e:23:98:e2:
ad:76:06:39:55:19:95:88:4b:1e:d0:26:25:d4:0a:
6a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D2:FF:C1:E1:3C:7F:16:8F:86:5E:73:E5:11:2D:D4:9D:CC:B1:AE
X509v3 Authority Key Identifier:
keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:69:18:ac:b1:cd:7d:b3:dc:bd:25:b9:0a:55:83:37:7a:e9:
97:2c:27:43:e6:f2:d0:03:67:55:dd:5c:b3:91:f4:c8:98:86:
5e:fd:60:77:5a:fc:11:c3:2e:03:e3:a9:04:14:b2:23:c9:27:
2b:a9:8a:fa:69:7e:07:13:60:77:98:c4:6f:04:d7:01:7b:1c:
2b:bd:52:a3:72:f7:46:5f:8d:a7:21:42:ae:05:41:41:ed:15:
49:b4:ba:04:fd:48:ff:41:8f:a2:44:cf:33:89:da:8f:d4:fe:
84:b9:3d:d1:f9:5b:82:ac:dd:90:e2:57:9a:d5:89:53:ce:9a:
0b:7a:1f:de:17:29:e3:03:4b:70:d1:1d:91:62:65:64:8d:48:
a9:44:fe:bd:86:26:3d:7c:15:55:c3:72:17:6a:67:6b:d8:2a:
28:a2:05:10:b7:b6:46:14:56:43:9c:39:28:16:f6:3d:f6:a2:
f0:c1:b8:d3:ae:5f:bc:a0:d7:c2:b9:56:f4:22:a2:81:a7:6a:
a8:5f:51:4f:a7:4d:e5:ac:a9:f3:51:2d:e1:23:af:31:2e:8f:
80:0f:24:b2:50:ab:cb:bc:16:87:c1:1d:c3:c0:f9:8f:b3:75:
df:e3:06:8b:31:c3:22:1e:76:a5:8e:bc:25:26:68:b3:d4:35:
1f:ba:97:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY2NEYxMTAvBgNVBAUTKEQ5OTAyQzRFOTQ3MkM3QUQ1MDgyODEyRkE3RDA3NzE0
NkFCN0NCOUMwHhcNMjYwNzA1MDI0NjE5WhcNMjYwNzEyMDI0NjE5WjAYMRYwFAYD
VQQDEw02YTQ5YzU3Yi01ZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhcgCpw7YWg5M4puWWz2wm/4o7MQO0Ii3Wn6HxR9ljBGbgLxEd688ZCy0SklC
D5i/5hXKULOvzchdXSdqlrYDnbblPYIKpMyaeQ1OAiw8W+DIv5OC3wyvlPK3yK4T
G0Z2H3afVXfyYAjPnbXmtsOmPBe4fp63j4XEtp2K2jrEobq9g1itXU20e3qAqxJJ
fShJTjCy82k1W7aQXzt7PnvBYV6FH4KbxmxVowyMl8adBevIcVT0wocUjt1y73wp
ypYjJeAanurvvQKco3xfbJeLV7M5zY2efPuS6bTkkB182uyMm0bdRoiQ/oO8O44j
mOKtdgY5VRmViEse0CYl1ApqNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7S/8Hh
PH8Wj4Zec+URLdSdzLGuMB8GA1UdIwQYMBaAFNmQLE6UcsetUIKBL6fQdxRqt8uc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY0Ri8xRTA4NTRBRURE
N0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2MVFnb0V2cDlCM0ZHcTN5
NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJaQXNUcFJ5eDYxUWdvRXZwOUIzRkdxM3k1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjY0Ri8xRTA4NTRBRUREN0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2
MVFnb0V2cDlCM0ZHcTN5NXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQWkYrLHNfbPcvSW5ClWDN3rplywnQ+by0ANnVd1cs5H0yJiGXv1gd1r8EcMu
A+OpBBSyI8knK6mK+ml+BxNgd5jEbwTXAXscK71So3L3Rl+NpyFCrgVBQe0VSbS6
BP1I/0GPokTPM4naj9T+hLk90flbgqzdkOJXmtWJU86aC3of3hcp4wNLcNEdkWJl
ZI1IqUT+vYYmPXwVVcNyF2pna9gqKKIFELe2RhRWQ5w5KBb2Pfai8MG4065fvKDX
wrlW9CKigadqqF9RT6dN5ayp81Et4SOvMS6PgA8kslCry7wWh8Edw8D5j7N13+MG
izHDIh52pY68JSZos9Q1H7qXew==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:17:38 2026 by rpki-client