
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json)
Hash identifier: eYwbPHU5QS+GHhBw1RIrEguSYPIEdRpFr0DEkTE1kH4=
Subject key identifier: 5D:E1:92:19:77:6D:FA:B2:91:AC:C8:27:3C:F3:C1:D0:BD:1F:10:E1
Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
Manifest number: 0137
Signing time: Wed 09 Sep 2026 05:57:37 +0000
Manifest this update: Wed 09 Sep 2026 05:57:37 +0000
Manifest next update: Wed 16 Sep 2026 05:57:37 +0000
Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: o+NY27guAPc6QePfUfb3+5TEvG8zcWl9yXHIW5iDGNQ=)
2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: 8qLxul8XuxEVwOeqRrW614nwBywey9BFtI58Up/eWgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 05:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Validity
Not Before: Sep 9 05:57:37 2026 GMT
Not After : Sep 16 05:57:37 2026 GMT
Subject: CN=6aa0f551-09f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:37:8d:61:40:89:b6:49:f0:45:a3:9a:fd:
ae:c9:df:a6:03:90:97:b3:18:fb:9a:7e:2a:f7:54:
bb:34:03:24:a6:75:44:8b:44:f6:7f:a8:a0:46:90:
7a:66:ea:da:41:ac:42:6e:04:3f:85:8a:73:ec:f4:
3f:dd:6a:5a:52:99:30:78:32:92:b9:c5:bd:43:8c:
e6:55:68:b2:72:51:21:19:72:1b:11:91:e1:b5:0c:
34:2b:8f:dc:d1:bf:30:66:ea:d8:b8:b6:5e:a6:20:
4c:81:2b:83:72:bc:0d:26:20:5d:d9:df:cd:ab:25:
cc:c0:c5:a2:07:c5:14:3a:6b:33:7d:07:50:02:4d:
9d:57:71:3e:41:ec:a1:f3:e6:4b:4c:6d:90:42:1a:
e7:09:42:21:a5:c5:12:34:88:58:b5:ea:1c:d7:ce:
10:d7:af:f8:11:4f:a1:ce:e8:f6:44:9d:d0:ad:eb:
86:06:18:55:e3:7f:b3:d4:d3:b6:4c:8c:b2:f1:0a:
11:a6:fc:c3:1d:2a:7a:59:fc:f1:b1:5e:92:45:ac:
c9:1a:16:84:a6:05:4b:1e:53:bf:3a:4a:45:08:20:
6b:14:3f:56:fb:3e:c9:2f:7a:47:c2:67:ca:6b:8b:
21:05:85:ee:1d:8f:bf:02:e4:c8:cb:52:8a:fb:d2:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E1:92:19:77:6D:FA:B2:91:AC:C8:27:3C:F3:C1:D0:BD:1F:10:E1
X509v3 Authority Key Identifier:
keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:67:bc:0d:d7:42:37:98:8a:e3:36:ca:c2:a4:1c:0f:c1:c2:
bd:23:b5:77:52:7a:19:f6:a4:db:f8:e8:d4:df:65:8d:94:0f:
43:85:bc:1e:99:da:42:0d:a3:2e:47:25:b0:09:18:54:aa:72:
06:84:60:9d:c9:b2:3c:c8:d1:a3:39:7e:aa:45:d4:74:9b:d8:
14:9d:d5:69:4b:85:a4:6e:b4:d7:43:91:26:a9:9f:7c:28:44:
54:f9:c6:d0:f3:95:6b:81:19:8e:08:d4:3f:a5:02:a6:34:f3:
55:84:29:18:75:e8:9d:33:47:42:d4:ac:a9:d7:4c:88:00:e1:
e3:de:66:9a:ce:ae:52:91:0c:84:af:70:6d:c1:ba:c3:a0:eb:
56:dc:9a:04:aa:40:b1:06:ba:81:7d:c5:79:60:84:99:54:9e:
84:62:0a:81:e4:ee:b7:c0:44:5f:3b:f1:31:7e:8c:1c:d7:dd:
95:dd:59:5c:65:42:36:aa:63:a5:6e:db:96:96:8c:60:68:1e:
a9:df:38:e5:3b:d7:c3:00:20:47:b2:b9:9f:1d:60:43:76:70:
39:2f:24:dc:79:0a:35:70:b6:3d:fe:2e:af:93:85:ab:9b:9e:
15:ee:14:47:2e:bb:73:a8:c3:d5:00:58:fb:d4:f1:23:5e:44:
df:d5:d7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:53:49 2026 by rpki-client