
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json)
Hash identifier: g+7NRz2sWzbjieNkCtRDcR5YufEYcDrwIG3kUxQuHzA=
Subject key identifier: 9D:22:A5:8B:33:E4:DA:C2:EA:7F:26:1B:4A:36:D0:D7:74:45:76:E0
Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Certificate serial: 03D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
Manifest number: 03C6
Signing time: Wed 07 Oct 2026 00:41:13 +0000
Manifest this update: Wed 07 Oct 2026 00:41:13 +0000
Manifest next update: Wed 14 Oct 2026 00:41:13 +0000
Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: uCD3tVsoJkG6P9Qz3wqUQGJojhSPjNizU+5l01By6CY=)
2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: wubF49eAoF9HZ7KRE24UNHtpS4tGrniQyZh1XIMV5HI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979 (0x3d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Validity
Not Before: Oct 7 00:41:13 2026 GMT
Not After : Oct 14 00:41:13 2026 GMT
Subject: CN=6ac59529-9ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:cc:6e:2b:a8:d7:46:6e:a9:73:6b:ec:3b:
b5:d3:0c:76:63:7b:37:0e:b2:2d:74:7a:5b:1a:3b:
08:7d:72:c6:30:94:db:b9:09:91:e6:f8:4d:35:48:
76:43:90:27:d8:cb:da:3d:c6:96:f8:d5:23:3e:69:
99:62:5e:4e:29:de:83:32:1c:10:b1:47:e2:ef:8c:
c0:6a:54:a0:87:fc:87:58:01:b8:e8:70:26:30:2e:
17:32:f9:9e:d3:1e:11:05:7e:68:52:12:9d:1b:7c:
f3:1d:82:0c:99:25:bd:b9:59:fe:f7:2a:07:41:b6:
23:e9:3c:0d:01:6a:60:9c:5f:d9:3d:54:3b:35:02:
31:84:dc:0e:fc:62:d9:d4:94:91:06:6d:0b:67:f5:
ed:4b:10:5d:2c:f4:b3:a1:85:93:97:6d:27:6c:80:
23:f5:30:67:b6:20:e5:f2:12:08:09:52:ce:f4:56:
20:93:14:4b:da:16:df:f7:d9:95:1f:31:c6:e3:0c:
ee:90:28:89:0d:b3:09:30:26:31:04:12:e4:a9:cd:
dd:c1:c1:6b:a3:9a:d0:af:d9:78:27:c6:c5:9a:8a:
a8:4a:7b:a5:5f:30:0e:eb:2a:cf:ad:ed:71:6c:51:
5f:69:ad:3f:28:3e:81:3f:e4:bb:fc:c0:d3:76:93:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:22:A5:8B:33:E4:DA:C2:EA:7F:26:1B:4A:36:D0:D7:74:45:76:E0
X509v3 Authority Key Identifier:
keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5e:ee:cb:4e:d2:b9:9c:0e:b1:57:f8:23:09:05:22:7e:5d:
5d:35:02:9f:09:0d:61:63:d0:97:21:2c:70:25:9c:7d:d3:fb:
ef:9c:fe:ba:1a:10:66:16:70:cc:64:22:09:64:48:4d:2b:8f:
5f:35:77:3f:d2:e5:06:d5:b9:1e:f4:3a:c6:64:7c:cc:9e:5e:
b2:4a:8a:7c:13:72:47:0d:6f:6e:2f:d0:e7:bc:10:ed:0b:90:
7f:6c:40:92:80:de:93:fb:8c:f7:c8:7a:f5:54:c9:06:c9:19:
0b:ef:71:69:8b:fb:aa:2c:42:da:ca:24:20:01:a5:ca:9e:50:
fd:f3:96:a1:1e:d8:b1:32:d5:71:d6:5d:01:70:62:87:5c:f0:
f8:2f:92:fc:e0:90:28:94:ba:71:ec:8f:85:29:15:98:d7:ac:
b0:c7:ea:1c:74:df:08:e0:dd:f6:15:f4:71:da:34:0a:af:25:
de:af:5b:e1:e1:bc:13:16:36:7f:a3:b9:49:57:78:3a:50:f2:
de:50:c7:9f:a2:f2:ad:4f:1d:ae:35:31:79:f1:8b:81:76:8b:
95:12:2e:65:2e:44:f2:a5:b9:3c:9a:05:8c:2b:78:59:9e:76:
6c:94:19:f8:c3:d2:c8:96:83:af:2c:2a:3c:a4:95:2e:75:b7:
25:9a:33:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEIyNDExMTAvBgNVBAUTKERBMDEyNTQyRUE1OTM1NUZFODg0NzhEMjFENzNFMzZD
RUJDREYzQ0IwHhcNMjYxMDA3MDA0MTEzWhcNMjYxMDE0MDA0MTEzWjAYMRYwFAYD
VQQDEw02YWM1OTUyOS05YWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkh3Mbiuo10ZuqXNr7Du10wx2Y3s3DrItdHpbGjsIfXLGMJTbuQmR5vhNNUh2
Q5An2MvaPcaW+NUjPmmZYl5OKd6DMhwQsUfi74zAalSgh/yHWAG46HAmMC4XMvme
0x4RBX5oUhKdG3zzHYIMmSW9uVn+9yoHQbYj6TwNAWpgnF/ZPVQ7NQIxhNwO/GLZ
1JSRBm0LZ/XtSxBdLPSzoYWTl20nbIAj9TBntiDl8hIICVLO9FYgkxRL2hbf99mV
HzHG4wzukCiJDbMJMCYxBBLkqc3dwcFro5rQr9l4J8bFmoqoSnulXzAO6yrPre1x
bFFfaa0/KD6BP+S7/MDTdpNmNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0ipYsz
5NrC6n8mG0o20Nd0RXbgMB8GA1UdIwQYMBaAFNoBJULqWTVf6IR40h1z42zrzfPL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjI0MS9CNjQ5Q0E5NkYw
NzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5WX29oSGpTSFhQamJPdk44
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJnRWxRdXBaTlZfb2hIalNIWFBqYk92Tjg4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjI0MS9CNjQ5Q0E5NkYwNzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5W
X29oSGpTSFhQamJPdk44OHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXF7uy07SuZwOsVf4IwkFIn5dXTUCnwkNYWPQlyEscCWcfdP775z+uhoQZhZw
zGQiCWRITSuPXzV3P9LlBtW5HvQ6xmR8zJ5eskqKfBNyRw1vbi/Q57wQ7QuQf2xA
koDek/uM98h69VTJBskZC+9xaYv7qixC2sokIAGlyp5Q/fOWoR7YsTLVcdZdAXBi
h1zw+C+S/OCQKJS6ceyPhSkVmNessMfqHHTfCODd9hX0cdo0Cq8l3q9b4eG8ExY2
f6O5SVd4OlDy3lDHn6LyrU8drjUxefGLgXaLlRIuZS5E8qW5PJoFjCt4WZ52bJQZ
+MPSyJaDrywqPKSVLnW3JZozug==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:07:46 2026 by rpki-client