
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json)
Hash identifier: 7B2xT2AVI6J/J8jUBDeUsJBURT4SmkaEpyTx/exKcVw=
Subject key identifier: 5D:3A:57:0B:41:49:F7:52:D0:09:89:F8:DF:CA:53:8E:8C:4E:33:09
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial: 0340
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
Manifest number: 0337
Signing time: Wed 09 Sep 2026 01:02:24 +0000
Manifest this update: Wed 09 Sep 2026 01:02:24 +0000
Manifest next update: Wed 16 Sep 2026 01:02:24 +0000
Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: RjNR3Wf3V27FLZyv5Mwp1QpEtPexAkig5EvkmjuksvY=)
2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: h9XZber2EyFddUowRYB4R36YQps0wInKux9nbzLj6gU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 01:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Validity
Not Before: Sep 9 01:02:24 2026 GMT
Not After : Sep 16 01:02:24 2026 GMT
Subject: CN=6aa0b020-a7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:25:78:31:e1:35:72:1f:c6:9f:b9:3a:b7:
96:d7:3e:9d:6d:dc:e8:2c:9a:11:03:83:95:85:83:
2b:bc:01:db:6d:0b:00:d1:2f:ca:a5:fd:6d:16:cc:
98:e4:c2:cb:7f:e9:01:a8:76:b8:5c:3f:64:fe:d7:
9c:93:32:14:da:a1:fe:1a:f2:71:34:f6:bc:55:60:
5b:dd:20:5a:0b:13:e0:bb:30:c5:b6:e6:7a:de:38:
21:d8:8d:bd:ee:6f:bf:1d:52:20:22:ab:f1:32:7f:
8c:97:a6:16:86:e0:62:e4:95:6f:46:1f:6d:3d:0f:
d2:33:96:94:a2:0b:52:f7:ac:4b:d4:d3:5d:20:cd:
6e:3c:2b:b4:31:a6:96:db:ff:9c:13:29:4d:2c:ea:
b9:71:4f:b3:ee:94:ed:25:6a:91:58:9d:07:f8:18:
94:0c:8c:bd:72:4c:b3:76:3d:f1:ec:4d:7c:05:a7:
f9:c0:a7:78:36:d1:18:c4:94:90:6e:dd:80:6e:f0:
0d:59:c0:ed:0c:c4:c9:02:11:91:b8:c4:37:c6:10:
2e:5d:8e:ea:06:01:97:60:ea:36:e7:ab:a2:29:3b:
de:b2:ff:09:d8:7a:1e:91:8b:57:bc:37:6b:80:23:
54:4d:70:12:dc:98:07:ea:1e:6d:78:a8:27:53:65:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:57:0B:41:49:F7:52:D0:09:89:F8:DF:CA:53:8E:8C:4E:33:09
X509v3 Authority Key Identifier:
keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:82:a6:4e:c2:bd:16:86:80:8e:5f:56:0e:d9:e3:65:5a:0c:
81:6d:1a:5a:b5:67:d4:9c:dc:61:07:1c:61:04:10:bd:cf:17:
7e:d1:54:0f:83:8b:f7:1d:83:f5:76:3b:77:5d:95:e8:6f:6f:
2a:e1:26:2e:36:f9:dd:bd:90:ed:48:3d:d2:52:91:f8:8b:e5:
3b:32:6f:32:9f:e2:b6:97:b4:e1:4c:d1:f8:e1:02:b3:a6:82:
62:85:53:6c:82:41:d4:f4:e4:29:8f:da:2c:5f:c1:56:36:f2:
32:13:6d:3d:ba:52:c6:a5:2a:79:2f:e0:8a:36:79:6f:5a:36:
d3:d9:ef:c2:11:1c:5a:b4:f0:a8:0f:40:03:29:48:39:22:03:
58:e3:55:07:eb:64:8f:c5:5a:41:14:77:15:ae:24:1b:1b:bd:
51:2d:74:bc:3d:39:2b:f7:dc:2b:10:b8:76:90:92:3c:eb:d0:
a6:1a:cd:a6:43:6d:d1:ab:0b:c5:ee:55:75:5f:54:9a:87:6c:
e7:a3:79:50:a7:3d:03:0b:d3:f8:6d:ac:56:2b:2b:0e:fa:a0:
7d:fc:01:cf:e5:ec:c9:c4:5d:77:da:6e:4b:ec:3b:9b:8b:7b:
b4:f9:cb:5f:35:bd:b9:76:65:f7:38:46:0b:a5:05:0e:e0:25:
fa:60:fb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:34:25 2026 by rpki-client