
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.mft
File: 2Fj3A4iS6EHZxtId9VCm6FJYufM.mft (raw, json)
Hash identifier: n3CvmJQqtL8OaocApM2ladanWAlIfyf8akfqEQUAEsg=
Subject key identifier: 7E:3B:DC:A0:E8:B7:D4:04:89:86:E1:6C:39:6D:23:00:5D:CF:29:BA
Authority key identifier: D8:58:F7:03:88:92:E8:41:D9:C6:D2:1D:F5:50:A6:E8:52:58:B9:F3
Certificate issuer: /CN=A91ABD41/serialNumber=D858F7038892E841D9C6D21DF550A6E85258B9F3
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Fj3A4iS6EHZxtId9VCm6FJYufM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.mft
Manifest number: 2E
Signing time: Sat 03 Oct 2026 09:26:44 +0000
Manifest this update: Sat 03 Oct 2026 09:26:43 +0000
Manifest next update: Sat 10 Oct 2026 09:26:43 +0000
Files and hashes: 1: 2Fj3A4iS6EHZxtId9VCm6FJYufM.crl (hash: ctRjW/0W8YOMMX+hAPmb4P3mROaJg6wmix0nUHeyPhQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.crl
rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Fj3A4iS6EHZxtId9VCm6FJYufM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABD41, serialNumber=D858F7038892E841D9C6D21DF550A6E85258B9F3
Validity
Not Before: Oct 3 09:26:43 2026 GMT
Not After : Oct 10 09:26:43 2026 GMT
Subject: CN=6ac0ca54-3e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:11:32:3d:94:34:07:02:6c:db:ae:54:2d:
ed:85:56:49:6a:8a:9b:ae:a5:b3:5d:d1:9f:de:19:
ce:d8:03:68:35:00:ba:d2:98:d8:a1:12:72:73:d2:
7a:6a:40:c4:da:f4:40:9e:e2:cd:4e:33:ca:9a:99:
c7:9d:e0:60:ed:6b:aa:ce:e2:27:ea:c5:4a:b5:e9:
5a:41:57:96:dd:c9:a9:8d:71:f2:86:98:b6:ca:ec:
6f:67:26:b7:9d:44:5c:23:44:36:27:ff:79:30:09:
e6:ae:bb:b0:a0:d2:91:ad:ee:cd:73:84:8b:7f:67:
bb:6c:98:a8:75:d4:21:8b:f2:c9:c2:f9:cd:30:3f:
1e:4f:8b:de:48:d9:f4:f0:90:99:12:1d:cc:8f:c0:
2b:ee:74:79:14:1a:9d:cf:57:54:53:81:09:6a:81:
53:c0:0e:c0:79:70:ff:b4:40:be:68:ab:99:29:67:
9e:33:b5:ce:8f:c6:7f:fc:1d:41:1c:84:5c:49:f2:
ab:ef:25:72:2a:9e:f5:44:fc:5e:7f:dc:d1:29:03:
0c:6d:87:af:9f:36:04:b4:4f:7b:6f:8a:37:10:3a:
dd:2c:ed:3f:a2:43:ac:77:25:1a:54:4c:1d:ed:55:
43:4a:f1:dc:57:99:bb:79:7f:bf:f8:e3:e8:0b:80:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3B:DC:A0:E8:B7:D4:04:89:86:E1:6C:39:6D:23:00:5D:CF:29:BA
X509v3 Authority Key Identifier:
keyid:D8:58:F7:03:88:92:E8:41:D9:C6:D2:1D:F5:50:A6:E8:52:58:B9:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Fj3A4iS6EHZxtId9VCm6FJYufM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7a:72:05:d1:57:b0:0e:60:ce:0e:bd:fc:8a:5e:a4:a3:cf:
c8:5c:29:b2:82:0e:cb:34:3f:84:ee:ec:fc:30:b1:15:16:8c:
c1:ee:70:3a:79:a9:06:cf:4a:1a:d9:4f:10:43:6b:94:42:96:
d0:3b:e4:ca:4c:84:e9:e9:5b:ed:a7:37:5f:5c:24:50:53:a2:
a9:06:9b:8e:cf:07:ea:5c:7c:b6:e0:3d:ce:e9:1c:24:95:f7:
d3:35:64:94:7f:ef:d4:97:b4:f7:cd:3c:54:dd:a6:25:e6:e2:
c0:91:94:6b:97:95:1c:44:df:2d:46:39:97:75:5e:c2:06:ad:
e7:46:cb:c0:1f:67:83:46:15:5c:23:f0:2f:39:d8:a0:44:5d:
de:71:38:23:99:13:82:9d:18:a8:cd:66:c5:e4:77:7f:7c:f8:
01:68:01:87:a8:ba:3c:ec:c6:2c:f0:08:d9:ed:3d:95:53:69:
33:20:a2:05:94:77:33:f6:fb:10:38:58:7a:df:19:91:e1:b6:
2a:ce:e2:92:cd:aa:e1:85:2f:6b:62:3e:c8:b5:14:c5:e5:81:
f4:4b:ab:2e:79:ad:43:57:28:ff:30:35:d9:be:1d:3a:25:69:
13:ae:ae:bb:36:49:35:77:f3:49:f7:5b:00:b0:59:61:03:83:
53:88:26:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:17:59 2026 by rpki-client