
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft
File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json)
Hash identifier: NnhY4i7TAr8QH57aXw/vB3ciRO/4O2uc3MAd6kkpUD0=
Subject key identifier: E5:CE:98:AA:FF:83:47:EB:2D:9B:7A:02:94:E9:39:38:21:70:DB:5E
Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7
Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
Certificate serial: 076E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft
Manifest number: 0719
Signing time: Wed 16 Sep 2026 22:21:46 +0000
Manifest this update: Wed 16 Sep 2026 22:21:45 +0000
Manifest next update: Wed 23 Sep 2026 22:21:45 +0000
Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: P2rQV/1Heu1ugbgRm6DwtsBy6ODn+uB3sLEtPBuQ/GE=)
2: 617AEF02C0A211F0834F0B2EC4F9AE02.roa (hash: KgeNZjOBJ42HpJACCb711eHire6fiDgLEF/Xo0eMJeA=)
3: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: 2brVbLcxFpkOdqJzW7e08UEC0cEZEhN9mp+0lEZR2Nc=)
4: 845606CEC0A211F08C07402EC4F9AE02.roa (hash: lKlHcPk4OtOc4NS/UdbE4j0ub1XPeST9dptNnvXi284=)
5: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: JTbKsHFx+JSM84iW9xko9N7Okk/mqyrOefd13JgYJNw=)
6: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: LsZss9o8fjCvnbyvSBibOl6q+s/uuecXP0U4tl/bNBg=)
7: A19BECB47DC011F0907B9458C4F9AE02.roa (hash: mPpc2gVSiIA4mhoDYgTXEf2CYWV9o2k7934LA3uchfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl
rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 22:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
Validity
Not Before: Sep 16 22:21:45 2026 GMT
Not After : Sep 23 22:21:45 2026 GMT
Subject: CN=6aab167a-3588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:16:ed:1e:cb:12:da:62:70:31:60:e9:c4:
e1:2f:3c:90:51:fb:e2:e8:e3:f6:95:b5:39:ee:56:
61:19:56:fa:e7:a7:b9:d4:09:c7:26:91:65:f2:65:
7a:29:0a:d0:7d:83:90:07:60:b9:fc:cc:23:b6:d4:
c7:a3:ab:b8:a4:d3:0f:67:2e:d4:6f:b7:cb:b6:4c:
86:07:88:ce:6d:17:b8:9b:dd:11:b9:dc:0e:fa:cb:
fe:d5:8d:8b:82:66:0b:68:d6:51:54:c3:ef:d3:7b:
04:5c:1a:0e:1a:11:47:93:86:34:d6:4f:af:bc:06:
34:39:9f:81:f2:46:61:b1:a1:fe:a4:0b:e2:8b:30:
79:e6:3b:b9:e4:12:6b:5d:84:5b:83:60:7a:42:1d:
c7:be:c3:f2:bc:75:eb:db:b9:cb:e9:d9:89:75:b8:
fd:f8:20:9a:3b:72:5a:f6:4c:21:43:7c:e4:15:cb:
3a:b1:df:af:c7:f9:62:7f:df:8d:46:72:5f:4a:8d:
ba:5b:69:ad:37:30:2d:f3:d8:4e:07:6f:17:9d:14:
89:7e:ca:ce:99:09:c8:70:8e:5d:d0:9d:48:4f:8f:
cb:f8:0c:51:5a:ea:06:34:83:04:96:b3:cf:a1:0a:
88:d8:35:fd:6a:f1:08:4d:8f:05:97:ff:3d:15:fe:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:98:AA:FF:83:47:EB:2D:9B:7A:02:94:E9:39:38:21:70:DB:5E
X509v3 Authority Key Identifier:
keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:be:cf:59:91:66:c2:88:e1:26:8c:59:a4:e0:e6:df:fb:9d:
99:d3:52:bd:dc:3a:f4:2f:4d:80:0f:ef:fc:d1:1c:61:7b:ea:
c3:c1:f9:b1:7e:a0:8e:17:f0:f2:e7:fc:d4:33:90:0c:50:15:
5a:f6:67:42:60:4e:14:44:27:7a:23:ac:9b:a0:21:fc:5b:c7:
5e:a4:86:79:19:c7:d2:ed:4d:f8:a8:7e:4e:26:eb:6d:5b:e6:
75:2a:aa:52:a1:d0:2f:e4:e4:e2:f4:a7:75:e4:4b:19:52:f9:
12:63:09:1d:20:f1:af:35:ee:cd:ed:95:be:7c:7b:85:98:f0:
d0:4d:9e:f7:67:15:55:95:0f:8e:c2:f0:64:b3:60:66:71:cf:
aa:4a:18:2e:ac:aa:4c:82:f9:a6:be:08:71:df:63:9b:40:af:
d3:18:b7:da:83:91:26:9d:16:f3:56:50:4c:1c:2f:76:70:75:
5e:11:a3:32:85:e0:ce:0f:d5:18:1c:95:84:11:5d:a1:13:15:
49:f9:47:25:7e:4a:86:01:40:8d:f5:4d:55:f2:d1:aa:91:4f:
f7:32:bc:04:38:7b:31:b6:fb:0b:d4:42:9c:b8:bc:73:34:4a:
0e:0e:b9:49:2d:7b:e9:54:cb:5e:80:73:d1:78:35:c0:db:8a:
0f:df:ef:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:10:32 2026 by rpki-client