
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
File: 2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json)
Hash identifier: MPuQu6KPxqoI6YQ+Nb39eyjgNrMM0oomzqSz7L4/mWQ=
Subject key identifier: 33:E1:F9:28:58:78:4B:D9:F2:CA:37:D6:6C:6E:E0:7D:99:26:DB:18
Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Certificate issuer: /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Certificate serial: 033A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
Manifest number: 0332
Signing time: Wed 09 Sep 2026 01:03:48 +0000
Manifest this update: Wed 09 Sep 2026 01:03:48 +0000
Manifest next update: Wed 16 Sep 2026 01:03:48 +0000
Files and hashes: 1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: 5hvuoPp/A3QDeYTeUKVLOzhi4tMfF5nE9oMEQ2ChlNg=)
2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: tluEXRfv1yfj6g2yuqwe5cSshlgt2BkkJs3C6pzFBNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 01:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826 (0x33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Validity
Not Before: Sep 9 01:03:48 2026 GMT
Not After : Sep 16 01:03:48 2026 GMT
Subject: CN=6aa0b074-782e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:38:fd:00:fe:15:94:03:01:9d:4f:52:64:
c6:ef:58:17:15:68:13:c5:e2:ce:01:50:ab:38:4f:
e8:e1:55:c8:70:77:e2:ce:c5:e2:6a:62:42:a1:96:
21:4f:69:f9:b7:00:59:34:d4:c5:0c:24:98:da:f6:
0b:8a:17:7a:cf:32:c7:1c:1e:66:c2:b2:96:f8:7c:
db:15:70:16:fa:d2:c1:ef:c4:56:39:70:b8:1c:21:
f3:6d:71:4e:66:29:b0:23:5a:e0:e0:7a:38:a1:2e:
5e:02:7b:e4:e2:bd:b5:26:1e:27:c8:42:a9:61:7f:
ed:f3:75:c9:bc:f9:e6:0a:87:fc:eb:ed:6a:a4:c8:
d5:30:7d:30:46:34:7f:cd:8a:9a:a7:c1:7d:d5:ed:
5b:15:37:1d:82:4a:ab:d6:37:1d:02:44:1a:b3:c7:
68:35:f2:c9:4b:8a:3d:6a:29:34:e2:20:86:61:64:
8d:6c:19:29:30:00:54:f9:7e:15:67:84:e9:87:38:
79:f0:50:07:9b:1b:f7:25:63:ed:75:e9:de:1f:76:
f7:d9:c0:7a:16:0d:53:cf:ee:d3:29:8e:c9:d3:d6:
31:a2:c5:5b:db:2a:88:05:cf:3f:e9:99:a8:11:10:
b2:9e:d9:b3:e2:26:62:7c:68:32:7f:7b:35:5c:4d:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E1:F9:28:58:78:4B:D9:F2:CA:37:D6:6C:6E:E0:7D:99:26:DB:18
X509v3 Authority Key Identifier:
keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:0b:61:a5:90:24:f5:99:24:cf:39:c5:84:91:af:c4:56:a4:
49:bd:aa:dd:d0:b9:c5:5c:f4:0b:37:f3:e2:8c:56:70:f9:71:
50:3b:24:b9:4a:45:dd:99:55:65:af:41:5f:07:a8:47:5f:76:
d3:85:1c:44:bd:17:e3:08:de:ed:ba:ca:e4:54:8b:e0:a4:6c:
47:d2:79:6c:06:6c:74:0f:06:57:cf:52:cc:f5:83:54:98:55:
e0:59:5e:0d:c5:16:41:b8:8d:7e:58:3b:8b:9f:d4:d5:48:82:
97:1d:e7:b2:b7:cd:92:c5:fa:5e:49:a7:56:05:d7:48:54:c6:
49:c9:2b:8e:bb:33:eb:0d:7f:93:97:40:98:22:08:8f:7a:13:
6d:bd:e1:b2:39:75:ef:99:46:ad:11:60:32:e4:dd:82:f8:2d:
24:2a:8f:fd:79:13:d4:df:57:4a:2d:97:b4:13:e7:8c:f4:77:
fd:75:f8:05:7d:d7:ed:cc:0f:94:a4:85:0b:20:e7:35:f7:4c:
ed:d0:77:40:ce:b3:63:fd:0a:28:26:26:1c:47:89:8f:70:fe:
bf:cf:03:fb:cf:c9:22:a0:f9:c6:bc:9e:fd:03:5b:fd:22:71:
bc:f0:09:6a:97:0e:ee:dc:53:a4:22:3d:00:6d:07:28:5c:02:
36:a2:2a:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc3QTYxMTAvBgNVBAUTKERBNDc1NDAxNDEyMUQzMjY4N0Q5N0QzOTJEOTA2MDQ5
QTgxNEZDQzMwHhcNMjYwOTA5MDEwMzQ4WhcNMjYwOTE2MDEwMzQ4WjAYMRYwFAYD
VQQDEw02YWEwYjA3NC03ODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1vQ4/QD+FZQDAZ1PUmTG71gXFWgTxeLOAVCrOE/o4VXIcHfizsXiamJCoZYh
T2n5twBZNNTFDCSY2vYLihd6zzLHHB5mwrKW+HzbFXAW+tLB78RWOXC4HCHzbXFO
ZimwI1rg4Ho4oS5eAnvk4r21Jh4nyEKpYX/t83XJvPnmCof86+1qpMjVMH0wRjR/
zYqap8F91e1bFTcdgkqr1jcdAkQas8doNfLJS4o9aik04iCGYWSNbBkpMABU+X4V
Z4Tphzh58FAHmxv3JWPtdeneH3b32cB6Fg1Tz+7TKY7J09YxosVb2yqIBc8/6Zmo
ERCyntmz4iZifGgyf3s1XE0jTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPh+ShY
eEvZ8so31mxu4H2ZJtsYMB8GA1UdIwQYMBaAFNpHVAFBIdMmh9l9OS2QYEmoFPzD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdBNi9DOEE3OTlEMjI0
NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5YUgyWDA1TFpCZ1NhZ1Vf
TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrZFVBVUVoMHlhSDJYMDVMWkJnU2FnVV9NTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzdBNi9DOEE3OTlEMjI0NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5
YUgyWDA1TFpCZ1NhZ1VfTU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFAthpZAk9ZkkzznFhJGvxFakSb2q3dC5xVz0Czfz4oxWcPlxUDskuUpF3ZlV
Za9BXweoR19204UcRL0X4wje7brK5FSL4KRsR9J5bAZsdA8GV89SzPWDVJhV4Fle
DcUWQbiNflg7i5/U1UiClx3nsrfNksX6XkmnVgXXSFTGSckrjrsz6w1/k5dAmCII
j3oTbb3hsjl175lGrRFgMuTdgvgtJCqP/XkT1N9XSi2XtBPnjPR3/XX4BX3X7cwP
lKSFCyDnNfdM7dB3QM6zY/0KKCYmHEeJj3D+v88D+8/JIqD5xrye/QNb/SJxvPAJ
apcO7txTpCI9AG0HKFwCNqIqlQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:20:03 2026 by rpki-client