
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
File: _2UQNIiSuqqxtzMf9wTDQbiaGHY.mft (raw, json)
Hash identifier: bFZM3IsHztxV1nyzFagyz8Yc6v+x2kJTpOZKLCuMKqQ=
Subject key identifier: C6:43:43:70:01:CC:2A:15:14:92:7F:3E:F2:01:83:C9:64:D6:E6:E5
Authority key identifier: FF:65:10:34:88:92:BA:AA:B1:B7:33:1F:F7:04:C3:41:B8:9A:18:76
Certificate issuer: /CN=A9189C03/serialNumber=FF6510348892BAAAB1B7331FF704C341B89A1876
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
Manifest number: 82
Signing time: Fri 09 Oct 2026 08:24:02 +0000
Manifest this update: Fri 09 Oct 2026 08:24:02 +0000
Manifest next update: Fri 16 Oct 2026 08:24:02 +0000
Files and hashes: 1: _2UQNIiSuqqxtzMf9wTDQbiaGHY.crl (hash: z7lPPcRd4u/5rzzMZeWEKHegUhQOKk2QDbuonnP/wJI=)
2: C0B4841002B011F19551BA913E3D8C67.roa (hash: mlBDMtNCdtUEDeCgXegQmevuYhexij5GGyJcwWWK/bM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.crl
rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189C03, serialNumber=FF6510348892BAAAB1B7331FF704C341B89A1876
Validity
Not Before: Oct 9 08:24:02 2026 GMT
Not After : Oct 16 08:24:02 2026 GMT
Subject: CN=6ac8a4a2-a832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:3a:a2:2a:69:51:82:45:7f:85:35:0c:a8:
50:bf:a4:d8:71:7a:79:18:e4:d9:dc:6e:c3:0a:68:
09:d9:7e:19:06:82:45:1c:b2:f1:1d:66:0b:5c:2f:
08:4a:dc:66:93:c6:5e:30:87:f6:56:49:b7:79:24:
2f:04:dd:a6:1e:a7:b2:22:92:1c:73:4d:a9:67:df:
09:26:60:12:d7:cb:fd:8e:a9:a5:0b:15:ca:3f:31:
8e:16:7b:8c:79:0a:4e:20:6c:69:ce:a5:de:ca:dc:
77:49:85:e0:75:7c:0c:55:70:5e:2b:aa:f7:8a:45:
33:72:c9:c4:ae:2a:78:94:3e:fe:9e:4e:d7:ef:b5:
13:80:2b:a0:03:13:8a:18:2f:56:21:bf:46:bd:8c:
62:81:80:79:46:99:34:27:35:45:74:ce:68:4c:10:
5b:cd:72:61:98:02:b7:0d:fe:1b:20:32:2f:bd:68:
6b:5b:8a:61:fa:31:c3:5e:b6:e5:bb:47:25:e3:cd:
2b:e1:91:1d:1a:e9:1d:d5:d5:e1:be:83:58:3d:b5:
76:16:d9:da:cc:a8:1b:47:2f:a1:a3:00:a3:27:65:
a1:35:03:b1:22:eb:bc:ea:b6:c1:98:d8:03:e0:87:
82:92:c4:31:00:b9:57:65:33:88:9d:cb:62:9b:42:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:43:43:70:01:CC:2A:15:14:92:7F:3E:F2:01:83:C9:64:D6:E6:E5
X509v3 Authority Key Identifier:
keyid:FF:65:10:34:88:92:BA:AA:B1:B7:33:1F:F7:04:C3:41:B8:9A:18:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:4b:33:5f:91:0f:d4:6c:3a:cd:fa:a6:c2:54:35:56:d3:fd:
9b:04:dd:92:19:c0:d2:77:99:bf:a0:f7:89:f2:24:08:f1:0f:
a0:52:73:61:2f:45:da:72:8d:89:24:91:5a:44:a8:93:6e:ff:
67:a6:f3:08:f9:5b:53:3a:dc:7b:e6:08:c7:58:ab:fd:5b:b4:
3f:5f:5a:67:af:29:8c:92:ba:98:0a:13:57:47:0c:d0:e7:fb:
45:d4:65:49:36:c7:1a:a8:01:b4:64:eb:b7:4b:ad:d2:57:46:
b1:68:5a:55:e9:49:e3:c3:38:fe:b9:08:d0:cc:e5:21:97:29:
4f:4e:30:4a:44:65:28:48:1e:ea:ab:0a:6f:c6:40:fc:06:3f:
5d:4b:f4:94:c0:09:45:0a:2a:ad:a1:90:20:9a:6d:78:ef:2d:
d0:a1:88:09:c4:8b:82:cc:c9:0c:7e:9a:b7:2f:68:36:8a:54:
1f:ab:93:c3:d4:16:95:4f:ca:a9:1c:46:08:61:97:cb:6c:e7:
c4:f8:08:bd:4f:96:30:47:82:93:e5:f0:89:d6:a0:e7:34:66:
9b:11:a2:54:0d:10:c1:44:74:78:a3:df:69:64:8a:4b:f4:7c:
4f:3f:d2:ca:4a:b6:2b:0b:1d:46:43:ef:b0:66:ff:fe:ed:0a:
28:5e:38:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlDMDMxMTAvBgNVBAUTKEZGNjUxMDM0ODg5MkJBQUFCMUI3MzMxRkY3MDRDMzQx
Qjg5QTE4NzYwHhcNMjYxMDA5MDgyNDAyWhcNMjYxMDE2MDgyNDAyWjAYMRYwFAYD
VQQDEw02YWM4YTRhMi1hODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqxU6oippUYJFf4U1DKhQv6TYcXp5GOTZ3G7DCmgJ2X4ZBoJFHLLxHWYLXC8I
Stxmk8ZeMIf2Vkm3eSQvBN2mHqeyIpIcc02pZ98JJmAS18v9jqmlCxXKPzGOFnuM
eQpOIGxpzqXeytx3SYXgdXwMVXBeK6r3ikUzcsnErip4lD7+nk7X77UTgCugAxOK
GC9WIb9GvYxigYB5Rpk0JzVFdM5oTBBbzXJhmAK3Df4bIDIvvWhrW4ph+jHDXrbl
u0cl480r4ZEdGukd1dXhvoNYPbV2FtnazKgbRy+howCjJ2WhNQOxIuu86rbBmNgD
4IeCksQxALlXZTOInctim0KKmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMZDQ3AB
zCoVFJJ/PvIBg8lk1ublMB8GA1UdIwQYMBaAFP9lEDSIkrqqsbczH/cEw0G4mhh2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUMwMy9EQjY5MUQwQTAx
NjgxMUYxODBFMzhGRDM1OTZGNTZCQy9fMlVRTklpU3VxcXh0ek1mOXdURFFiaWFH
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL18yVVFOSWlTdXFxeHR6TWY5d1REUWJpYUdIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUMwMy9EQjY5MUQwQTAxNjgxMUYxODBFMzhGRDM1OTZGNTZCQy9fMlVRTklpU3Vx
cXh0ek1mOXdURFFiaWFHSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMUszX5EP1Gw6zfqmwlQ1VtP9mwTdkhnA0neZv6D3ifIkCPEPoFJzYS9F2nKN
iSSRWkSok27/Z6bzCPlbUzrce+YIx1ir/Vu0P19aZ68pjJK6mAoTV0cM0Of7RdRl
STbHGqgBtGTrt0ut0ldGsWhaVelJ48M4/rkI0MzlIZcpT04wSkRlKEge6qsKb8ZA
/AY/XUv0lMAJRQoqraGQIJpteO8t0KGICcSLgszJDH6aty9oNopUH6uTw9QWlU/K
qRxGCGGXy2znxPgIvU+WMEeCk+Xwidag5zRmmxGiVA0QwUR0eKPfaWSKS/R8Tz/S
ykq2KwsdRkPvsGb//u0KKF446g==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:21:42 2026 by rpki-client