
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json)
Hash identifier: wCtziRzKTNTs9bW4fR+tnm0ZUEzPBJiWFeuVLCm9v6o=
Subject key identifier: 9B:E5:76:0E:C4:77:C4:C0:EF:17:9E:7D:EE:EE:9A:A6:22:31:57:9A
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
Manifest number: 0247
Signing time: Sat 05 Sep 2026 02:28:12 +0000
Manifest this update: Sat 05 Sep 2026 02:28:11 +0000
Manifest next update: Sat 12 Sep 2026 02:28:11 +0000
Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: GDCdi8XQL3iEOcm++VCNPH7Y1JQEAFM6mr3256LmF6A=)
2: 585745526BC111EEA163E774C4F9AE02.roa (hash: jWFAA3hjLn4/pUtGRdYAlT0inc3UozSJNCSTFiimgaQ=)
3: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: k/wrk+71dTC2xpAfXzlheReLA9aT4ZuDhkK6xEFQumE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Validity
Not Before: Sep 5 02:28:11 2026 GMT
Not After : Sep 12 02:28:11 2026 GMT
Subject: CN=6a9b7e3c-0520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:1d:79:3a:c3:a3:12:71:09:36:2e:b2:d0:
68:07:4e:bb:eb:99:25:71:62:8a:e8:97:9c:aa:d3:
43:5c:8b:29:8e:a0:2f:46:f7:cc:c8:1a:b2:28:d1:
6b:ef:e2:f4:a9:d7:87:e3:d1:8f:87:3a:dc:13:f4:
ae:c9:8e:47:5d:6e:cf:d6:76:ae:97:65:52:86:01:
44:ea:3b:30:59:74:44:4a:95:d0:03:b7:ce:09:12:
8b:8c:80:80:10:95:20:07:ed:3b:81:36:8d:b2:6e:
94:0c:6d:b3:ff:63:b1:d8:9e:73:9c:96:ef:25:f7:
dc:ac:fb:ba:3d:c9:95:64:a4:c1:05:70:cb:23:de:
e4:9d:90:36:68:24:2d:43:57:d0:78:c2:ab:21:1a:
f2:cd:cd:d5:97:eb:32:c4:cf:26:f6:09:2a:ed:f3:
8a:5b:ec:7c:c9:0d:a0:c4:7f:d9:05:63:36:c6:92:
db:f5:3f:a2:b9:33:34:71:6c:7a:c8:50:25:f1:f2:
90:c0:c1:c5:ff:0c:60:de:da:6d:bb:5e:da:3b:78:
2c:f6:f5:c7:44:e1:59:7e:2f:73:01:51:ec:2a:88:
0b:65:a4:73:f5:af:6f:05:f5:a3:0a:29:cc:c7:e0:
4f:b7:3a:30:0d:29:1c:4c:5b:b3:1c:e2:69:0d:66:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E5:76:0E:C4:77:C4:C0:EF:17:9E:7D:EE:EE:9A:A6:22:31:57:9A
X509v3 Authority Key Identifier:
keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1b:91:d9:b0:63:ba:9f:2f:d8:74:d7:68:69:7e:09:f5:3d:
09:cd:c9:33:6a:11:0d:db:b2:02:c3:bd:64:fc:99:cc:6b:92:
a8:6f:76:a2:4a:06:2f:9b:44:4f:20:73:27:16:29:b1:b1:d7:
4e:86:53:35:39:2b:9b:a2:12:5d:2d:c6:7e:35:55:d9:c4:98:
f0:c0:ce:54:c9:73:5d:51:ec:44:62:25:4b:87:d0:77:d1:15:
c7:a7:75:cf:8a:56:5b:02:af:8f:e4:48:8e:43:9c:1a:d2:87:
ea:a7:43:bf:12:2e:75:83:01:9c:79:02:d8:d0:85:99:4a:1e:
8c:ce:2b:53:a8:4f:60:5a:12:6f:8c:19:9d:73:f6:d6:a4:66:
a3:86:50:31:43:f4:43:32:be:45:ed:b4:a8:d1:29:87:d0:0e:
69:30:5b:23:09:0d:d1:56:88:9d:32:b9:19:45:57:c7:a4:76:
c4:aa:06:5f:53:ed:8b:04:dd:c6:2a:cc:72:9a:f1:f5:32:b4:
ac:2f:81:e3:b0:66:26:be:01:be:49:26:39:1d:22:42:d8:4a:
80:25:11:4d:c3:e2:7d:6c:3b:88:dc:43:ee:92:22:dd:63:79:
b7:e8:43:6a:f2:47:19:a6:34:8e:8c:b2:0f:73:16:fb:44:db:
bf:77:20:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC
REJCMzVGM0QwHhcNMjYwOTA1MDIyODExWhcNMjYwOTEyMDIyODExWjAYMRYwFAYD
VQQDEw02YTliN2UzYy0wNTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAokkdeTrDoxJxCTYustBoB06765klcWKK6JecqtNDXIspjqAvRvfMyBqyKNFr
7+L0qdeH49GPhzrcE/SuyY5HXW7P1naul2VShgFE6jswWXRESpXQA7fOCRKLjICA
EJUgB+07gTaNsm6UDG2z/2Ox2J5znJbvJffcrPu6PcmVZKTBBXDLI97knZA2aCQt
Q1fQeMKrIRryzc3Vl+syxM8m9gkq7fOKW+x8yQ2gxH/ZBWM2xpLb9T+iuTM0cWx6
yFAl8fKQwMHF/wxg3tptu17aO3gs9vXHROFZfi9zAVHsKogLZaRz9a9vBfWjCinM
x+BPtzowDSkcTFuzHOJpDWZPRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvldg7E
d8TA7xeefe7umqYiMVeaMB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw
NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVo
T2JlMkR6bklpMG05dXpYejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoBuR2bBjup8v2HTXaGl+CfU9Cc3JM2oRDduyAsO9ZPyZzGuSqG92okoGL5tE
TyBzJxYpsbHXToZTNTkrm6ISXS3GfjVV2cSY8MDOVMlzXVHsRGIlS4fQd9EVx6d1
z4pWWwKvj+RIjkOcGtKH6qdDvxIudYMBnHkC2NCFmUoejM4rU6hPYFoSb4wZnXP2
1qRmo4ZQMUP0QzK+Re20qNEph9AOaTBbIwkN0VaInTK5GUVXx6R2xKoGX1PtiwTd
xirMcprx9TK0rC+B47BmJr4BvkkmOR0iQthKgCURTcPifWw7iNxD7pIi3WN5t+hD
avJHGaY0joyyD3MW+0Tbv3cgMQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:17:20 2026 by rpki-client