
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
File: 2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json)
Hash identifier: +VmX//aMq4Xavf0cCuv+E90SR7Nmxx7PmAk0rJrvPWQ=
Subject key identifier: DC:24:01:75:E4:44:4C:49:4C:D7:C7:34:33:B1:1B:06:43:AA:F8:AA
Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Certificate serial: 1B0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
Manifest number: 1AEC
Signing time: Sat 16 May 2026 16:16:00 +0000
Manifest this update: Sat 16 May 2026 16:16:00 +0000
Manifest next update: Sat 23 May 2026 16:16:00 +0000
Files and hashes: 1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: XxhHp8LHyTYL/uCO/vp2zpguKqztZVFIqx9z1Hy2W28=)
2: C443D86A55A311E7896BED09C4F9AE02.roa (hash: fUG/ZYYnzDR6Zz8MPXkWB3U7KRWzJ6ve4ty+0m9uSLY=)
3: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: 6XEd0uCxQtA9wBbV+Q7/BBTxLNihLCwNHh1QPcQVifo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6924 (0x1b0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Validity
Not Before: May 16 16:16:00 2026 GMT
Not After : May 23 16:16:00 2026 GMT
Subject: CN=6a089840-18e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:20:9f:75:63:3a:07:97:13:a7:58:49:30:
df:45:76:3c:1e:9d:b4:e3:68:85:b5:5e:bd:28:20:
3e:04:91:ba:90:bf:86:8f:ac:c0:6c:db:5b:48:1f:
e7:b2:f6:d0:2f:5d:2c:6a:da:ea:82:fd:69:9b:e0:
ef:18:36:79:63:e0:e6:9e:8d:30:73:87:d0:1d:2b:
87:f8:23:b4:1f:a4:76:d3:5f:72:1b:39:95:30:9b:
ce:42:57:d0:32:59:d5:14:d6:0a:58:b6:f1:34:9a:
1f:dd:28:51:7c:66:af:18:46:da:74:48:28:99:b8:
a5:68:6f:24:5c:f4:c2:fc:a5:c3:4d:62:3f:c6:7a:
a3:9a:a4:fd:a1:67:a0:d4:47:6c:39:55:47:80:23:
bf:ea:30:63:3a:96:19:77:02:97:ce:9d:2b:e2:63:
cf:d8:e6:39:10:f7:c5:0f:87:d9:c0:0d:df:3a:10:
d5:7b:e5:93:6f:c9:6d:a2:bd:06:c9:aa:aa:4b:10:
4d:8a:aa:78:13:8c:16:41:5a:76:33:0c:5a:c1:a6:
ce:fa:26:ba:30:96:30:1a:66:a0:54:4d:e8:2a:d2:
4e:94:17:fd:3f:40:23:7f:79:22:58:e8:9e:15:34:
6d:46:d5:f8:8d:27:42:08:fc:13:79:fb:bb:b1:4b:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:24:01:75:E4:44:4C:49:4C:D7:C7:34:33:B1:1B:06:43:AA:F8:AA
X509v3 Authority Key Identifier:
keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:2b:15:c5:cf:0b:70:f7:d0:fc:29:e1:ad:4d:7a:b7:05:62:
cc:f4:b5:a2:1f:66:16:fb:13:90:1e:1f:e1:1d:db:4f:32:5a:
5e:9b:a6:8b:28:6b:1f:4d:7e:2b:eb:45:82:dc:08:66:99:ce:
6c:ae:5d:07:c8:6d:71:3d:d1:93:21:76:4e:d8:43:f0:e5:03:
fd:44:ba:91:d9:43:a5:1e:35:16:ff:ba:59:d6:3b:3c:92:ed:
7c:61:30:20:28:9c:6a:9c:56:4f:73:11:8f:b7:3c:08:10:b4:
bd:65:42:ff:bb:05:da:98:67:12:c9:1e:7a:26:7d:8f:e4:1f:
e5:88:93:88:fe:94:7a:01:87:39:dd:d3:8d:c1:e2:4a:06:34:
0f:06:84:e5:a8:12:33:ab:94:3b:e6:77:19:20:20:b3:40:25:
1c:25:d2:0a:04:e3:5a:20:c3:89:fc:96:a4:98:0d:8e:77:62:
c6:5b:cf:65:c8:3d:42:ef:d8:fc:db:a1:16:8f:bd:22:0e:65:
e5:13:8f:88:3e:8f:52:6d:89:38:bf:ce:2f:85:82:cc:c6:ab:
70:11:a0:23:8a:91:36:39:74:f3:10:67:78:c6:9e:e9:27:e9:
a0:d3:29:90:6e:ec:d5:56:f9:e9:e9:7d:50:42:25:65:9c:44:
ff:36:27:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw
OTU4QUEzMkYwHhcNMjYwNTE2MTYxNjAwWhcNMjYwNTIzMTYxNjAwWjAYMRYwFAYD
VQQDEw02YTA4OTg0MC0xOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFYgn3VjOgeXE6dYSTDfRXY8Hp2042iFtV69KCA+BJG6kL+Gj6zAbNtbSB/n
svbQL10satrqgv1pm+DvGDZ5Y+Dmno0wc4fQHSuH+CO0H6R2019yGzmVMJvOQlfQ
MlnVFNYKWLbxNJof3ShRfGavGEbadEgombilaG8kXPTC/KXDTWI/xnqjmqT9oWeg
1EdsOVVHgCO/6jBjOpYZdwKXzp0r4mPP2OY5EPfFD4fZwA3fOhDVe+WTb8ltor0G
yaqqSxBNiqp4E4wWQVp2MwxawabO+ia6MJYwGmagVE3oKtJOlBf9P0Ajf3kiWOie
FTRtRtX4jSdCCPwTefu7sUsxCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwkAXXk
RExJTNfHNDOxGwZDqviqMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC
NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv
eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTNBNS8yNTgwQThENjRCNjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVH
eHBtbGFiRWdPRWtKV0tveTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABCsVxc8LcPfQ/CnhrU16twVizPS1oh9mFvsTkB4f4R3bTzJaXpumiyhrH01+
K+tFgtwIZpnObK5dB8htcT3RkyF2TthD8OUD/US6kdlDpR41Fv+6WdY7PJLtfGEw
ICicapxWT3MRj7c8CBC0vWVC/7sF2phnEskeeiZ9j+Qf5YiTiP6UegGHOd3TjcHi
SgY0DwaE5agSM6uUO+Z3GSAgs0AlHCXSCgTjWiDDifyWpJgNjndixlvPZcg9Qu/Y
/NuhFo+9Ig5l5ROPiD6PUm2JOL/OL4WCzMarcBGgI4qRNjl08xBneMae6SfpoNMp
kG7s1Vb56el9UEIlZZxE/zYnvA==
-----END CERTIFICATE-----
Generated at Sat May 16 22:02:48 2026 by rpki-client