
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json)
Hash identifier: lJOKOFgKBAXiolBiR060ruHaLdvHJA/3qj0owq2efuE=
Subject key identifier: E8:50:F3:D1:B2:3A:5A:7A:D0:3C:0C:94:AA:95:C2:19:19:56:30:B2
Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
Manifest number: 0199
Signing time: Sun 11 Oct 2026 04:52:05 +0000
Manifest this update: Sun 11 Oct 2026 04:52:05 +0000
Manifest next update: Sun 18 Oct 2026 04:52:05 +0000
Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: k5Hayyq+wBPkD3Tr0t/hNcOJKU1cMDq43bpBcO4pe6U=)
2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: a57NdJ1gk+iJiRBW3C9KSb5FNlrBpcnk273JBCCOK0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 04:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Validity
Not Before: Oct 11 04:52:05 2026 GMT
Not After : Oct 18 04:52:05 2026 GMT
Subject: CN=6acb15f5-82c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:3b:36:f9:14:7f:70:26:97:10:bf:1f:4c:
16:58:20:3b:24:91:61:89:d0:fc:7e:a9:f9:69:1e:
58:2b:34:e8:23:22:01:37:bb:71:4c:f0:e9:10:c5:
14:1f:b0:14:a3:ea:c9:fd:72:5c:67:30:88:af:14:
25:6f:66:72:ae:42:a6:f6:86:8e:8e:da:31:49:6c:
9a:31:4b:f6:f8:9a:df:59:7b:80:73:85:47:d0:5a:
07:ea:9d:f3:0c:6e:d4:08:53:09:59:10:2c:91:62:
f9:1a:2c:0d:10:eb:49:96:56:a7:e9:09:49:20:22:
d9:d6:d8:23:17:a0:52:41:d1:4d:c6:f0:92:6b:45:
a0:f9:b5:52:1c:37:05:f6:c3:28:55:58:d6:db:c5:
86:9e:f6:d1:31:ac:71:af:ee:de:08:c0:7e:58:ab:
63:97:de:a7:20:c2:df:40:47:88:77:03:64:58:7a:
ab:17:20:25:6a:ee:12:42:06:fe:15:cb:be:c5:a5:
9f:4b:20:9d:f9:40:e8:c9:06:71:37:35:c6:ee:03:
ff:a4:88:0e:c2:93:7a:7a:49:83:62:b3:04:ff:d2:
4c:de:0e:b5:49:48:4c:96:1a:e0:a2:58:aa:3e:72:
01:8f:5d:77:df:91:92:71:dd:b4:b7:7f:56:4b:c9:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:50:F3:D1:B2:3A:5A:7A:D0:3C:0C:94:AA:95:C2:19:19:56:30:B2
X509v3 Authority Key Identifier:
keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:09:0b:e5:2f:3e:1f:04:11:2f:94:1a:50:52:77:03:1c:a4:
55:40:72:69:75:e4:f6:20:79:32:0d:a5:bd:fd:4f:3c:d0:df:
6e:5e:35:a7:45:ff:40:64:54:ea:c8:fe:59:00:6f:51:d6:e1:
01:90:d3:0a:f9:21:c1:9a:00:44:bb:08:9f:f8:07:c9:3f:07:
60:11:ce:e5:30:75:1c:d0:09:29:ba:de:eb:57:64:43:39:4b:
7d:11:41:2c:73:e1:bf:03:d7:4d:30:a2:10:70:74:64:42:c5:
d2:c3:2c:d4:c7:a4:33:66:54:e6:f1:f0:c2:05:74:94:93:34:
cf:93:68:3e:d1:bf:af:78:ce:7c:98:88:fd:2c:89:c3:20:a0:
f4:e8:0f:dd:59:d4:e7:5e:ed:bb:fb:7e:be:db:38:88:f0:61:
f2:c9:0a:cb:71:fc:83:ae:52:dd:b1:cd:14:89:8e:98:37:7d:
af:d1:b0:45:e2:ba:38:2d:2c:33:d4:5c:0e:0c:6c:0a:33:e4:
15:de:6d:1c:61:12:8e:cd:4e:61:a2:fe:3b:f9:81:14:c7:e4:
5e:3c:e1:51:93:8f:ba:d1:a7:20:2f:7c:37:f7:e3:a4:cd:b0:
ab:4e:74:82:98:bf:ea:43:21:05:35:f1:77:28:fe:45:d6:3b:
1f:1b:6c:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE
QjA3Njk1NkIwHhcNMjYxMDExMDQ1MjA1WhcNMjYxMDE4MDQ1MjA1WjAYMRYwFAYD
VQQDEw02YWNiMTVmNS04MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArrk7NvkUf3AmlxC/H0wWWCA7JJFhidD8fqn5aR5YKzToIyIBN7txTPDpEMUU
H7AUo+rJ/XJcZzCIrxQlb2ZyrkKm9oaOjtoxSWyaMUv2+JrfWXuAc4VH0FoH6p3z
DG7UCFMJWRAskWL5GiwNEOtJllan6QlJICLZ1tgjF6BSQdFNxvCSa0Wg+bVSHDcF
9sMoVVjW28WGnvbRMaxxr+7eCMB+WKtjl96nIMLfQEeIdwNkWHqrFyAlau4SQgb+
Fcu+xaWfSyCd+UDoyQZxNzXG7gP/pIgOwpN6ekmDYrME/9JM3g61SUhMlhrgoliq
PnIBj11335GScd20t39WS8kGMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhQ89Gy
Olp60DwMlKqVwhkZVjCyMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2
RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k
SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZwkL5S8+HwQRL5QaUFJ3AxykVUByaXXk9iB5Mg2lvf1PPNDfbl41p0X/QGRU
6sj+WQBvUdbhAZDTCvkhwZoARLsIn/gHyT8HYBHO5TB1HNAJKbre61dkQzlLfRFB
LHPhvwPXTTCiEHB0ZELF0sMs1MekM2ZU5vHwwgV0lJM0z5NoPtG/r3jOfJiI/SyJ
wyCg9OgP3VnU517tu/t+vts4iPBh8skKy3H8g65S3bHNFImOmDd9r9GwReK6OC0s
M9RcDgxsCjPkFd5tHGESjs1OYaL+O/mBFMfkXjzhUZOPutGnIC98N/fjpM2wq050
gpi/6kMhBTXxdyj+RdY7Hxts6w==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:19:39 2026 by rpki-client