
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/t2w1jO-Yw2qJZnoHXjjK36cosew.mft
File: t2w1jO-Yw2qJZnoHXjjK36cosew.mft (raw, json)
Hash identifier: Bw9F6hKj0A0+mTlRXcYo60hqMfK6eiMhsN4cwiwq2Ow=
Subject key identifier: F8:4C:C2:44:10:71:06:3A:CC:5E:AC:52:AF:7B:DC:CF:F4:F5:64:E5
Authority key identifier: B7:6C:35:8C:EF:98:C3:6A:89:66:7A:07:5E:38:CA:DF:A7:28:B1:EC
Certificate issuer: /CN=A91C8A07/serialNumber=B76C358CEF98C36A89667A075E38CADFA728B1EC
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/t2w1jO-Yw2qJZnoHXjjK36cosew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/t2w1jO-Yw2qJZnoHXjjK36cosew.mft
Manifest number: 2E
Signing time: Thu 03 Sep 2026 08:56:00 +0000
Manifest this update: Thu 03 Sep 2026 08:55:59 +0000
Manifest next update: Thu 10 Sep 2026 08:55:59 +0000
Files and hashes: 1: t2w1jO-Yw2qJZnoHXjjK36cosew.crl (hash: oRmYtA3rlfbHWwse6EQrew6S+HmfTKT3fG5EIdP1h7c=)
2: 4540F274621811F18288576E6E47A888.roa (hash: 7iqxVD+kSjgqfWsBGi87KUrgaPlk08Xl21lUjyM4sDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/t2w1jO-Yw2qJZnoHXjjK36cosew.crl
rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/t2w1jO-Yw2qJZnoHXjjK36cosew.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/t2w1jO-Yw2qJZnoHXjjK36cosew.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8A07, serialNumber=B76C358CEF98C36A89667A075E38CADFA728B1EC
Validity
Not Before: Sep 3 08:55:59 2026 GMT
Not After : Sep 10 08:55:59 2026 GMT
Subject: CN=6a993620-b224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:06:42:23:bb:1f:3d:9f:2c:95:1f:93:db:
16:3a:eb:44:0c:0a:7b:d6:07:c6:88:a3:df:ae:2b:
2f:f0:02:3d:9c:e7:42:0f:97:02:94:d3:60:ef:0a:
9b:78:a9:69:38:91:a8:f1:5c:2f:47:d4:0a:2e:d0:
7b:0a:85:4f:96:a6:b8:20:64:4a:e9:2c:5b:f8:01:
5a:54:7b:c3:e3:b2:1c:ce:6b:c8:65:03:74:c9:ec:
00:38:3f:c7:5d:48:25:3a:df:4e:70:34:4e:f6:d6:
2a:89:54:f6:47:27:c1:3d:d6:b8:9a:d4:af:87:48:
ec:d8:ee:27:32:50:50:7f:6e:23:43:80:f0:65:11:
5b:ac:0f:8e:e3:34:0d:1f:a7:01:d0:af:3c:c0:53:
b9:59:c5:eb:f2:ff:44:e5:f3:32:4a:a9:05:14:ad:
19:c2:99:dd:3a:09:ed:33:bd:7f:c8:cf:d6:15:8a:
b5:dd:0f:c1:83:2a:da:4f:1c:c0:37:ac:b8:97:5c:
c9:ee:e1:7f:8e:17:e3:68:0e:58:cc:64:a5:53:f9:
f2:67:bf:e9:ea:dc:43:22:5b:ba:0f:45:c6:0f:7d:
f4:60:b4:7a:91:0b:51:f4:13:72:41:fb:31:4b:96:
e8:d3:2f:63:02:9c:b4:7f:8c:fa:f4:37:0c:fa:f0:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4C:C2:44:10:71:06:3A:CC:5E:AC:52:AF:7B:DC:CF:F4:F5:64:E5
X509v3 Authority Key Identifier:
keyid:B7:6C:35:8C:EF:98:C3:6A:89:66:7A:07:5E:38:CA:DF:A7:28:B1:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/t2w1jO-Yw2qJZnoHXjjK36cosew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/t2w1jO-Yw2qJZnoHXjjK36cosew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/t2w1jO-Yw2qJZnoHXjjK36cosew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0d:3b:08:8d:fc:35:4c:60:7d:50:fb:45:5f:63:2a:61:05:
31:f3:fc:f7:df:f4:fe:98:29:34:32:21:69:dc:aa:3d:3f:93:
39:01:83:50:be:b5:e5:5c:cd:f6:8d:19:c4:69:67:31:7d:b9:
5d:7b:34:9e:25:5f:58:df:05:b3:f9:74:a5:72:7f:c4:f9:38:
d0:c7:be:5b:e4:59:20:08:ef:2e:db:ee:3f:61:9b:b9:6b:43:
a2:9d:9b:c7:b0:e5:ca:06:b2:dc:9b:15:64:27:b6:a8:11:84:
45:89:03:fa:45:03:27:92:d0:27:68:25:7a:3f:41:52:26:a2:
5b:c9:33:a1:7b:c9:e6:64:ad:ba:32:3a:91:36:32:7e:96:a8:
8b:4a:eb:0a:ba:55:a6:fa:01:db:63:aa:54:3b:02:40:d5:e7:
a9:72:49:a4:b3:8c:e0:ee:46:ce:1a:50:bb:e6:69:86:57:e9:
7c:1e:dd:a6:d0:13:91:ff:cc:f6:4e:52:e6:44:e5:bc:75:5b:
62:d9:9d:fa:cc:6d:4c:3b:91:b0:c9:7a:f9:b0:e5:f5:13:dc:
1f:10:c6:49:93:e3:23:eb:a6:c3:f3:1e:5f:bd:1d:50:2a:3e:
8c:ee:ea:c5:e8:3c:c3:f4:ff:4c:25:0d:5f:3c:96:ea:12:a0:
ef:00:11:87
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OEEwNzExMC8GA1UEBRMoQjc2QzM1OENFRjk4QzM2QTg5NjY3QTA3NUUzOENBREZB
NzI4QjFFQzAeFw0yNjA5MDMwODU1NTlaFw0yNjA5MTAwODU1NTlaMBgxFjAUBgNV
BAMTDTZhOTkzNjIwLWIyMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCO7gZCI7sfPZ8slR+T2xY660QMCnvWB8aIo9+uKy/wAj2c50IPlwKU02DvCpt4
qWk4kajxXC9H1Aou0HsKhU+WprggZErpLFv4AVpUe8PjshzOa8hlA3TJ7AA4P8dd
SCU6305wNE721iqJVPZHJ8E91ria1K+HSOzY7icyUFB/biNDgPBlEVusD47jNA0f
pwHQrzzAU7lZxevy/0Tl8zJKqQUUrRnCmd06Ce0zvX/Iz9YVirXdD8GDKtpPHMA3
rLiXXMnu4X+OF+NoDljMZKVT+fJnv+nq3EMiW7oPRcYPffRgtHqRC1H0E3JB+zFL
lujTL2MCnLR/jPr0Nwz68H3/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+EzCRBBx
BjrMXqxSr3vcz/T1ZOUwHwYDVR0jBBgwFoAUt2w1jO+Yw2qJZnoHXjjK36coseww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4QTA3LzI2NzFCMEZFNjIx
ODExRjE4QkZDN0I0MjZENDdBODg4L3QydzFqTy1ZdzJxSlpub0hYampLMzZjb3Nl
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvdDJ3MWpPLVl3MnFKWm5vSFhqakszNmNvc2V3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4
QTA3LzI2NzFCMEZFNjIxODExRjE4QkZDN0I0MjZENDdBODg4L3QydzFqTy1ZdzJx
Slpub0hYampLMzZjb3Nldy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBtDTsIjfw1TGB9UPtFX2MqYQUx8/z33/T+mCk0MiFp3Ko9P5M5AYNQvrXlXM32
jRnEaWcxfbldezSeJV9Y3wWz+XSlcn/E+TjQx75b5FkgCO8u2+4/YZu5a0OinZvH
sOXKBrLcmxVkJ7aoEYRFiQP6RQMnktAnaCV6P0FSJqJbyTOhe8nmZK26MjqRNjJ+
lqiLSusKulWm+gHbY6pUOwJA1eepckmks4zg7kbOGlC75mmGV+l8Ht2m0BOR/8z2
TlLmROW8dVti2Z36zG1MO5GwyXr5sOX1E9wfEMZJk+Mj66bD8x5fvR1QKj6M7urF
6DzD9P9MJQ1fPJbqEqDvABGH
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:42:21 2026 by rpki-client