
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json)
Hash identifier: Ya5NGVoGCHnrVibcs/7mDmE43VlBpWl1Fe/5EJ8Aym8=
Subject key identifier: 3C:D5:AE:AC:5F:57:04:33:30:23:9F:68:79:26:7E:3E:4B:16:40:9B
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial: 035A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
Manifest number: 0351
Signing time: Thu 29 Oct 2026 01:08:13 +0000
Manifest this update: Thu 29 Oct 2026 01:08:12 +0000
Manifest next update: Thu 05 Nov 2026 01:08:12 +0000
Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: GY9eWkncMEoG4j1tML1c5s94T9yWFbXUhptNGdJ8EIA=)
2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: h9XZber2EyFddUowRYB4R36YQps0wInKux9nbzLj6gU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 01:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858 (0x35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Validity
Not Before: Oct 29 01:08:12 2026 GMT
Not After : Nov 5 01:08:12 2026 GMT
Subject: CN=6ae29c7c-eccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:df:26:49:43:19:99:34:f6:01:f0:62:77:
c5:3e:b4:b0:7c:43:50:d6:32:50:e9:34:0f:1b:58:
b1:1c:95:46:77:8b:51:0d:4d:95:0c:ff:4d:56:1b:
94:ed:28:48:2e:cb:3c:c3:1c:47:62:3e:80:97:75:
81:37:b2:70:bd:b6:e5:ae:d7:e7:a4:e7:0d:60:99:
2d:1b:d8:12:ff:78:f5:82:6d:3e:b2:8e:a8:84:91:
6e:24:22:57:f8:65:50:a8:8e:36:dc:4e:89:a4:73:
e4:74:10:6d:5b:f9:8e:a1:79:c6:fd:67:7c:ad:b6:
5f:66:72:e8:ed:3c:c7:75:db:fb:1c:89:63:74:35:
76:a1:6b:c7:cb:62:09:54:ac:a2:78:ab:ad:2c:f6:
d3:3b:96:e6:bb:e3:92:c1:73:90:89:c9:12:01:bf:
72:7f:6c:c0:82:2f:32:a3:7d:93:9f:f8:fa:78:26:
f3:00:fa:fd:27:2c:69:67:ab:fa:90:9d:42:8c:b7:
90:f2:82:0e:37:84:0e:6f:3a:d8:f7:6c:d6:39:9b:
ba:53:c9:f3:c9:d6:12:f9:f2:df:53:8d:12:e7:fa:
93:23:3d:28:c8:9e:fd:a5:3a:cd:d8:2f:1c:40:31:
08:20:60:ea:67:53:02:90:5b:14:94:bc:97:74:2f:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D5:AE:AC:5F:57:04:33:30:23:9F:68:79:26:7E:3E:4B:16:40:9B
X509v3 Authority Key Identifier:
keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:09:a1:54:c7:9b:e8:67:82:83:4c:2d:df:f1:22:15:6c:5a:
9f:02:18:19:df:89:dc:55:55:fc:cf:75:0e:03:36:33:10:d8:
77:02:c5:17:9d:51:8a:8a:1b:cc:f7:d8:6a:b7:f1:b9:ad:c3:
36:a3:0a:19:0e:3b:9a:16:77:fc:61:4b:1c:e2:40:aa:ac:8a:
a5:a7:50:95:8e:5d:40:7d:1c:17:f3:20:30:f0:5e:e7:72:3a:
0a:f5:cf:e7:36:98:c6:9d:ee:06:d2:d4:cf:ba:60:be:a0:18:
c6:4a:83:bb:e5:3a:dc:d0:b7:fe:a1:b2:ae:d0:30:40:96:a0:
6f:1a:05:1e:9d:fb:ab:c1:45:fe:3b:a5:4e:e9:a2:fe:0f:7f:
9b:75:a7:26:e6:aa:c6:6e:9e:06:e9:66:21:16:b6:b2:3b:33:
62:c2:61:06:cf:f2:ec:53:21:5d:33:3d:09:cf:19:03:05:f1:
d5:e6:a6:b8:af:e3:ff:5b:41:9e:f1:5e:66:bb:1d:58:7d:44:
58:f6:25:fa:ad:37:5d:ff:e9:2f:48:23:f0:b2:8f:e5:d7:e7:
30:01:af:dd:55:db:b7:c8:68:73:e1:30:af:5b:8c:52:d5:f8:
36:88:96:e2:99:fe:21:92:60:c2:3d:8a:36:b5:a3:40:c0:89:
7b:5a:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 12:54:01 2026 by rpki-client