
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
File: 2-mhAMSp66SyzRomcTKN73j-duE.mft (raw, json)
Hash identifier: nGa9aGMLZEH0yQUr590xEdcsUkbdql07tf0JDDn3wao=
Subject key identifier: 44:CB:EA:E3:41:60:8F:FD:E4:74:09:4C:72:DB:D0:13:C5:38:6F:AE
Authority key identifier: DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1
Certificate issuer: /CN=A91AB74D/serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
Certificate serial: 071A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
Manifest number: 0713
Signing time: Tue 06 Oct 2026 22:15:29 +0000
Manifest this update: Tue 06 Oct 2026 22:15:29 +0000
Manifest next update: Tue 13 Oct 2026 22:15:29 +0000
Files and hashes: 1: 2-mhAMSp66SyzRomcTKN73j-duE.crl (hash: xi6aZ1fcQsXdogz63G7dMsdbxAnopQEj8x+h4UCWQhs=)
2: A0D57302A33D11EBA479491CC4F9AE02.roa (hash: u5ce3mhL9MTgfMANLqmHFxu4YGZmlzL+s2cu4dHRCdc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl
rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB74D, serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
Validity
Not Before: Oct 6 22:15:29 2026 GMT
Not After : Oct 13 22:15:29 2026 GMT
Subject: CN=6ac57301-f116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:c5:4c:1d:89:33:61:16:00:a2:fb:ef:d7:
8c:04:68:0f:d1:c3:13:fb:08:3e:56:6f:3e:6a:e1:
77:23:07:8d:e3:01:fb:72:6c:40:d7:d5:b0:3f:39:
ec:d0:8e:4f:78:e6:75:de:61:42:bd:b4:23:f2:d1:
b2:10:04:ef:35:cd:40:76:06:92:c1:17:6e:d3:cd:
44:ff:44:71:ab:a3:18:98:82:a6:79:27:61:b0:95:
72:65:e9:66:52:15:4d:a7:bb:88:01:b0:e6:b5:41:
2a:8e:b1:be:43:31:d3:6c:7a:b6:88:d9:24:39:7e:
7e:c2:a4:4b:ab:3e:1f:93:ff:c5:58:d7:86:c8:f8:
65:27:f6:2f:c7:06:3c:8a:42:41:e9:c3:19:b0:c6:
32:9c:18:f9:49:01:c0:0e:6a:85:57:87:d8:1b:31:
4c:84:e3:a9:04:04:e8:59:07:8e:7f:98:35:c6:c7:
07:aa:a5:64:df:13:f5:58:29:18:6b:b8:38:6f:5e:
e7:91:c6:94:e0:46:b6:8c:e9:b7:be:b0:a9:3e:62:
00:4a:1f:42:f9:fb:e6:ae:d3:95:47:99:a2:36:30:
a1:7d:72:16:2b:fa:cf:1a:08:2f:6c:82:8f:cc:09:
5a:4c:86:69:86:30:5e:b8:29:91:e9:f1:40:49:75:
5d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CB:EA:E3:41:60:8F:FD:E4:74:09:4C:72:DB:D0:13:C5:38:6F:AE
X509v3 Authority Key Identifier:
keyid:DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:16:f0:67:82:df:17:84:b0:18:e4:85:47:96:45:dc:cc:f8:
7e:d4:c8:fa:a4:a8:71:e6:9f:ee:ea:34:ed:b0:7a:29:67:11:
5a:0b:89:11:14:3a:f0:ea:ce:d7:19:a1:94:11:62:9c:46:14:
0f:48:f2:56:76:c8:8c:63:ae:50:32:90:2d:4e:55:09:43:97:
d1:0c:ae:6f:93:46:8a:33:48:50:a1:f5:ab:4d:ed:13:74:1e:
38:a4:0c:92:da:1b:da:06:66:f8:af:4f:aa:12:06:aa:44:3f:
37:1c:4b:20:b6:f8:1b:40:a5:09:59:ec:1c:3b:e4:4f:7d:a2:
db:29:96:5b:62:e0:e5:27:b3:3c:5b:42:42:1d:a0:a2:53:a8:
28:e7:f8:9d:e5:cd:ef:32:73:1d:c8:03:96:37:3d:83:a4:bf:
b9:f3:d5:f7:fd:66:f8:96:5f:af:2b:87:51:7e:c7:12:19:8c:
d3:1b:2e:ed:63:ec:73:da:c6:48:f9:e9:bd:9b:b7:39:50:39:
d0:66:21:8b:66:04:9d:ac:2c:9d:aa:10:62:c8:07:05:e2:9b:
62:e0:96:43:41:80:2a:92:cb:89:0d:e1:5b:9d:94:db:15:57:
6b:e8:ac:d6:44:70:e9:4a:4b:00:fc:29:96:50:7a:7b:44:c7:
89:31:43:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI3NEQxMTAvBgNVBAUTKERCRTlBMTAwQzRBOUVCQTRCMkNEMUEyNjcxMzI4REVG
NzhGRTc2RTEwHhcNMjYxMDA2MjIxNTI5WhcNMjYxMDEzMjIxNTI5WjAYMRYwFAYD
VQQDEw02YWM1NzMwMS1mMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsK/FTB2JM2EWAKL779eMBGgP0cMT+wg+Vm8+auF3IweN4wH7cmxA19WwPzns
0I5PeOZ13mFCvbQj8tGyEATvNc1AdgaSwRdu081E/0Rxq6MYmIKmeSdhsJVyZelm
UhVNp7uIAbDmtUEqjrG+QzHTbHq2iNkkOX5+wqRLqz4fk//FWNeGyPhlJ/YvxwY8
ikJB6cMZsMYynBj5SQHADmqFV4fYGzFMhOOpBAToWQeOf5g1xscHqqVk3xP1WCkY
a7g4b17nkcaU4Ea2jOm3vrCpPmIASh9C+fvmrtOVR5miNjChfXIWK/rPGggvbIKP
zAlaTIZphjBeuCmR6fFASXVdTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETL6uNB
YI/95HQJTHLb0BPFOG+uMB8GA1UdIwQYMBaAFNvpoQDEqeukss0aJnEyje94/nbh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0RC8xRDcxM0QwOEEz
M0MxMUVCQjEyQ0VEMUFDNEY5QUUwMi8yLW1oQU1TcDY2U3l6Um9tY1RLTjczai1k
dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzItbWhBTVNwNjZTeXpSb21jVEtONzNqLWR1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Qjc0RC8xRDcxM0QwOEEzM0MxMUVCQjEyQ0VEMUFDNEY5QUUwMi8yLW1oQU1TcDY2
U3l6Um9tY1RLTjczai1kdUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKBbwZ4LfF4SwGOSFR5ZF3Mz4ftTI+qSoceaf7uo07bB6KWcRWguJERQ68OrO
1xmhlBFinEYUD0jyVnbIjGOuUDKQLU5VCUOX0Qyub5NGijNIUKH1q03tE3QeOKQM
ktob2gZm+K9PqhIGqkQ/NxxLILb4G0ClCVnsHDvkT32i2ymWW2Lg5SezPFtCQh2g
olOoKOf4neXN7zJzHcgDljc9g6S/ufPV9/1m+JZfryuHUX7HEhmM0xsu7WPsc9rG
SPnpvZu3OVA50GYhi2YEnawsnaoQYsgHBeKbYuCWQ0GAKpLLiQ3hW52U2xVXa+is
1kRw6UpLAPwpllB6e0THiTFDMQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 23:29:03 2026 by rpki-client