
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
File: 2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json)
Hash identifier: HyGRq5H2+AnQdK3rBvPt9cvwHjRCmYt4FqiLuuZubn0=
Subject key identifier: 7A:48:AA:36:B2:11:AC:AB:D1:D4:97:1E:C4:40:65:93:0B:E4:65:C7
Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Certificate serial: 1B3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
Manifest number: 1B1C
Signing time: Fri 14 Aug 2026 16:16:07 +0000
Manifest this update: Fri 14 Aug 2026 16:16:06 +0000
Manifest next update: Fri 21 Aug 2026 16:16:06 +0000
Files and hashes: 1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: YEY98sS3pv8XtCb4xKgrb7SieNou8shnJk2MZXwrWz4=)
2: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: p4+NsJe4a3MSde9nMZiDmlNln2JEYVPGVaWpxC5fnk8=)
3: C443D86A55A311E7896BED09C4F9AE02.roa (hash: hkXxeNyW6zU7R/3tjUaDIgOzon4gIXx8opB7l3LzhSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 16:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6974 (0x1b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Validity
Not Before: Aug 14 16:16:06 2026 GMT
Not After : Aug 21 16:16:06 2026 GMT
Subject: CN=6a7f3f47-40ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:b7:9c:a6:c4:55:c8:35:b7:20:49:c3:9d:
88:e8:f3:4f:6d:fa:e6:7d:80:00:a4:05:4b:5c:e4:
3b:fa:8a:35:81:d5:dc:f0:10:77:cf:27:d0:a0:ad:
84:71:c5:3f:0e:4f:44:1c:1a:5f:1f:99:0d:48:85:
3f:13:9c:ab:a4:9b:9c:57:be:a9:8e:81:d4:6e:b3:
07:62:c0:7e:1d:6b:e6:71:69:08:85:58:9a:cf:f3:
2c:72:4c:e1:fc:a7:37:53:7b:c3:5b:31:ee:9c:6f:
dc:f9:a4:5f:aa:0f:30:8d:02:ea:c4:20:66:5e:11:
07:77:a7:90:9b:25:c3:00:4d:2c:1a:14:25:2d:21:
d2:54:1b:ca:f4:b0:46:0a:48:d1:8a:38:fd:18:04:
e3:0c:a0:67:4e:93:18:b4:e6:5d:e5:3a:b1:dc:9e:
6d:ae:ce:76:11:bb:2e:ee:cc:23:14:67:71:db:96:
76:14:5f:50:b0:9c:97:70:78:10:1e:47:0a:9a:db:
f7:54:5c:30:18:3d:8c:4e:c2:5f:81:bd:2a:98:5d:
57:18:fc:88:23:a2:c6:2d:2d:70:d9:eb:bf:dd:be:
54:f1:88:05:94:55:4d:21:c4:c8:44:aa:a6:1f:9f:
75:19:ab:08:79:14:f6:34:b3:1b:13:92:35:34:e9:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:48:AA:36:B2:11:AC:AB:D1:D4:97:1E:C4:40:65:93:0B:E4:65:C7
X509v3 Authority Key Identifier:
keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:6d:3d:69:c3:8e:ec:08:60:75:a0:e3:1a:fb:d6:e7:e8:ed:
bf:b3:b4:5f:9c:c3:e5:a2:12:35:b1:c2:f9:37:17:a5:58:7d:
3a:99:b5:3c:e0:f3:79:20:66:e6:95:47:c6:de:8a:ab:0e:5d:
18:97:25:7f:fa:72:56:de:95:21:45:7b:48:90:7e:8e:99:3a:
39:d0:f3:a8:1e:34:5b:6b:68:63:66:c5:ea:05:54:73:5e:98:
b1:ea:f6:e7:a2:a3:1e:27:8d:b3:da:93:fc:a4:c7:d7:dc:87:
93:d4:37:df:80:35:87:41:e1:f0:dc:ea:56:88:cf:ca:41:2e:
78:88:f2:3e:ca:cd:92:76:02:c4:e1:64:19:b8:fd:10:ab:e8:
37:ef:dc:e0:06:3e:8f:89:55:97:8f:76:22:ba:f3:c8:0c:24:
67:f5:42:65:c3:f6:5c:84:72:52:28:27:ff:c8:02:98:6f:31:
1f:33:2a:82:fb:1d:d6:47:29:31:ad:b1:72:1c:e6:8c:94:c8:
18:ed:fd:3d:68:0d:95:7d:e7:be:4b:ea:fb:a0:34:d8:e6:89:
7a:3e:b1:f0:95:a5:f1:dc:2e:43:00:c1:ab:a9:c4:ef:c7:fd:
22:97:71:30:30:ca:76:88:b2:4b:f4:8d:e7:f3:4b:ac:e3:b5:
7c:e7:f4:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw
OTU4QUEzMkYwHhcNMjYwODE0MTYxNjA2WhcNMjYwODIxMTYxNjA2WjAYMRYwFAYD
VQQDEw02YTdmM2Y0Ny00MGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3A23nKbEVcg1tyBJw52I6PNPbfrmfYAApAVLXOQ7+oo1gdXc8BB3zyfQoK2E
ccU/Dk9EHBpfH5kNSIU/E5yrpJucV76pjoHUbrMHYsB+HWvmcWkIhViaz/Msckzh
/Kc3U3vDWzHunG/c+aRfqg8wjQLqxCBmXhEHd6eQmyXDAE0sGhQlLSHSVBvK9LBG
CkjRijj9GATjDKBnTpMYtOZd5Tqx3J5trs52Ebsu7swjFGdx25Z2FF9QsJyXcHgQ
HkcKmtv3VFwwGD2MTsJfgb0qmF1XGPyII6LGLS1w2eu/3b5U8YgFlFVNIcTIRKqm
H591GasIeRT2NLMbE5I1NOmbRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHpIqjay
Eayr0dSXHsRAZZML5GXHMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC
NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv
eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTNBNS8yNTgwQThENjRCNjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVH
eHBtbGFiRWdPRWtKV0tveTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0G09acOO7AhgdaDjGvvW5+jtv7O0X5zD5aISNbHC+TcXpVh9Opm1PODzeSBm
5pVHxt6Kqw5dGJclf/pyVt6VIUV7SJB+jpk6OdDzqB40W2toY2bF6gVUc16Yser2
56KjHieNs9qT/KTH19yHk9Q334A1h0Hh8NzqVojPykEueIjyPsrNknYCxOFkGbj9
EKvoN+/c4AY+j4lVl492IrrzyAwkZ/VCZcP2XIRyUign/8gCmG8xHzMqgvsd1kcp
Ma2xchzmjJTIGO39PWgNlX3nvkvq+6A02OaJej6x8JWl8dwuQwDBq6nE78f9Ipdx
MDDKdoiyS/SN5/NLrOO1fOf0Gw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:06:42 2026 by rpki-client