
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
File: r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json)
Hash identifier: pqoR3huvwg2avqGz5396ptMfF43vDVxWLIGRGmhaMO0=
Subject key identifier: D5:38:CD:6B:E5:DB:7D:F3:96:68:05:91:D8:44:C6:31:DA:08:27:60
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Certificate issuer: /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
Manifest number: 0156
Signing time: Thu 10 Sep 2026 22:14:04 +0000
Manifest this update: Thu 10 Sep 2026 22:14:04 +0000
Manifest next update: Thu 17 Sep 2026 22:14:04 +0000
Files and hashes: 1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: r1RnHbmp0fpio2NuHRDH+tSCgJwyJQpjmoTMet8sgTQ=)
2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: +IqdnY0bu/tedBPSD8j29fV45Yb1kBQrsRNgm4wsYso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:14:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Validity
Not Before: Sep 10 22:14:04 2026 GMT
Not After : Sep 17 22:14:04 2026 GMT
Subject: CN=6aa32bac-86a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:ef:32:a4:72:c8:f0:cd:95:f7:62:64:2e:
78:49:8c:16:17:3f:18:86:52:53:0a:b7:e9:b3:79:
a1:51:cd:ec:00:72:f6:bd:c9:99:e9:47:4a:b4:1c:
f8:f5:92:78:ba:e1:57:c0:74:4e:97:4a:d1:c8:71:
2c:6b:ca:fa:91:2b:93:56:bc:0c:f1:91:90:0d:da:
4d:af:20:2f:be:80:19:da:50:22:70:49:c3:62:97:
6d:d3:b2:d2:44:72:82:d5:0a:36:4a:2e:7b:d8:6f:
61:82:7a:47:ea:50:d9:00:e5:67:e9:44:94:e2:07:
b0:10:9a:69:17:72:79:79:e1:54:c3:82:7e:86:f3:
0c:1f:81:83:69:92:a9:09:52:07:88:90:ca:a1:b0:
12:f8:71:f4:c2:8d:6d:db:df:0f:5a:05:11:46:85:
32:1d:54:24:84:04:79:e7:23:04:4b:d8:0a:3d:3b:
5f:68:ff:ac:96:72:d9:1e:cb:53:c6:43:6e:4c:eb:
3a:41:9a:29:18:c5:18:cb:55:53:ea:ab:d6:0d:fa:
9f:27:1a:4d:99:07:89:70:72:c4:ce:8a:ab:ca:fb:
19:a9:d8:fa:2d:e0:35:44:0a:4b:38:77:ae:b7:b3:
fe:5e:3f:da:b1:d9:51:ad:8f:07:9f:1d:78:8f:aa:
bb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:38:CD:6B:E5:DB:7D:F3:96:68:05:91:D8:44:C6:31:DA:08:27:60
X509v3 Authority Key Identifier:
keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:f0:a2:a9:79:38:b5:cf:cd:6c:64:e7:7e:18:45:56:5e:69:
6f:b1:ae:81:d8:4a:39:0e:88:6d:17:6d:38:14:cc:ba:79:3b:
b3:51:7e:3a:50:0a:49:fa:31:be:7f:aa:1c:69:f8:a6:1a:96:
3f:b4:17:72:e5:4c:1f:36:36:2b:40:71:11:9d:46:38:8b:4e:
75:c7:ca:90:9c:c5:aa:18:db:23:df:7f:54:c4:70:8d:62:f4:
b4:e4:dd:7a:ca:33:35:8a:5e:8e:e2:d2:66:25:73:03:ab:1b:
39:8b:1e:99:e3:9c:4d:0b:12:43:d5:34:f1:fb:0f:19:99:2a:
24:6f:67:19:8f:97:c4:12:e4:db:d0:c6:dc:b7:fa:d8:b1:32:
1f:bc:5e:6e:af:22:0f:b7:8f:27:7a:de:6d:19:9f:55:ea:92:
42:9a:86:93:00:ba:26:da:94:5b:00:67:f4:9c:55:b3:a7:b1:
fa:15:51:de:41:a0:99:5e:fc:26:0d:4d:d1:5e:5f:d9:3c:c8:
f6:2a:d5:e2:0c:07:67:cc:eb:ea:51:4e:36:16:a6:d8:91:1b:
60:63:21:a3:f9:c3:91:10:c4:f8:75:bf:da:5c:bb:66:00:f6:
ed:6e:ac:75:3c:63:d6:81:b7:69:59:a9:36:57:44:d9:65:56:
e4:59:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:29:17 2026 by rpki-client