
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
File: US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json)
Hash identifier: x8LPytRwIlCoURyNayUfspjBagEBf5DNt0ntAH9ZpX0=
Subject key identifier: 23:4B:4B:0E:6A:51:10:F3:E9:FC:FC:76:A6:2E:45:11:2C:3D:0A:F6
Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Certificate serial: 060D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
Manifest number: 05FB
Signing time: Sun 30 Aug 2026 23:04:06 +0000
Manifest this update: Sun 30 Aug 2026 23:04:05 +0000
Manifest next update: Sun 06 Sep 2026 23:04:05 +0000
Files and hashes: 1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: T6wbM1KhxjVzNSH07Obov0RotO8Zc/5KTYV+LbYVB8Y=)
2: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (hash: u3v0nvDMzptv0Bv0++6upWHNRBc+BH3ns60gSH838+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl
rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 23:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1549 (0x60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Validity
Not Before: Aug 30 23:04:05 2026 GMT
Not After : Sep 6 23:04:05 2026 GMT
Subject: CN=6a94b6e6-a047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:3b:48:27:9b:8c:8d:19:81:d3:15:50:15:
d7:8d:1b:94:89:80:9c:0b:f7:bb:7d:e6:90:5b:73:
34:cd:b7:49:66:80:6f:2a:17:f5:14:a4:6f:99:0e:
87:c7:b2:fa:d7:27:3c:97:68:f0:06:9a:ac:49:f7:
fe:26:5b:89:16:be:75:14:e2:1b:b5:fd:9b:b2:50:
3c:5e:2c:de:80:3b:7f:21:d9:f0:51:bb:06:2d:4c:
e2:e0:ae:c3:c3:ff:d1:cd:d1:93:14:e3:b1:0f:8a:
66:ef:a3:7a:e6:e1:ec:68:13:86:44:51:21:5c:40:
2f:ef:aa:60:65:92:c5:c0:30:7b:6b:f5:54:2f:24:
ea:2b:ca:90:77:5d:27:6c:b1:73:90:42:74:cd:a1:
db:1a:a9:61:82:08:be:bd:6c:e0:9d:49:d3:8a:87:
4b:69:7d:cc:47:31:6a:39:c9:f3:6a:54:b8:ee:7c:
0a:6e:a0:4c:ea:c6:f6:6d:b3:65:4a:57:4f:26:eb:
89:62:78:3f:99:c1:94:00:06:e0:8e:53:90:6b:d1:
af:ba:34:4c:cf:a8:ef:16:88:85:85:96:5c:c6:52:
51:b4:f3:34:36:f0:0c:40:08:14:be:51:3b:74:63:
a8:32:c1:57:34:95:46:8d:e2:f8:0c:bc:b1:77:6c:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4B:4B:0E:6A:51:10:F3:E9:FC:FC:76:A6:2E:45:11:2C:3D:0A:F6
X509v3 Authority Key Identifier:
keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:f5:87:a8:76:fd:d4:ce:b0:f0:c8:f0:9c:ec:d5:4d:bf:2f:
0e:3c:e9:a6:ce:15:01:94:4f:2a:58:5a:a4:41:4b:2a:0b:14:
20:dc:22:3d:9f:95:a8:f2:49:b5:61:a2:01:53:5e:f4:dd:d9:
02:8c:08:5b:de:d0:d3:b9:46:47:ef:89:9f:1a:ac:fd:3c:cd:
ba:f4:6a:11:d8:6a:b0:a3:97:6b:21:01:fd:d3:1a:e1:11:98:
aa:82:4c:dd:ff:23:47:54:10:05:67:04:3d:03:fd:7d:d1:42:
5d:55:b2:7f:b4:ce:3a:2b:2a:46:0a:42:e2:cf:12:85:81:9f:
02:28:8d:b6:f6:f2:3b:09:8c:33:a1:a4:e5:f7:04:c5:03:92:
2e:99:0c:c3:0e:3c:d9:8d:1a:8a:aa:2f:ca:6a:c1:03:86:7e:
48:6a:07:0a:29:13:bb:7e:cd:6a:83:6c:d7:45:c5:6b:9e:cb:
f8:3b:27:f0:1f:0e:32:cd:a7:c7:bc:18:e7:df:47:83:fe:90:
1a:3f:54:09:ab:be:c2:41:7e:16:0f:b5:db:17:6e:b4:95:9e:
72:a4:51:34:92:01:7a:5b:34:de:61:da:c5:1e:d1:c0:0f:fe:
72:db:31:1d:fb:55:3a:b8:c0:42:ce:6f:cd:df:5b:e1:de:8a:
7c:35:cf:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4
RUI0RTIyNUYwHhcNMjYwODMwMjMwNDA1WhcNMjYwOTA2MjMwNDA1WjAYMRYwFAYD
VQQDEw02YTk0YjZlNi1hMDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZg7SCebjI0ZgdMVUBXXjRuUiYCcC/e7feaQW3M0zbdJZoBvKhf1FKRvmQ6H
x7L61yc8l2jwBpqsSff+JluJFr51FOIbtf2bslA8XizegDt/IdnwUbsGLUzi4K7D
w//RzdGTFOOxD4pm76N65uHsaBOGRFEhXEAv76pgZZLFwDB7a/VULyTqK8qQd10n
bLFzkEJ0zaHbGqlhggi+vWzgnUnTiodLaX3MRzFqOcnzalS47nwKbqBM6sb2bbNl
SldPJuuJYng/mcGUAAbgjlOQa9GvujRMz6jvFoiFhZZcxlJRtPM0NvAMQAgUvlE7
dGOoMsFXNJVGjeL4DLyxd2yDfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNLSw5q
URDz6fz8dqYuRREsPQr2MB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD
OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTU2Qy9GQjMwNUE1RTBDOEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3
eDNHUXFFLWJHTnVPdE9JbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAfWHqHb91M6w8MjwnOzVTb8vDjzpps4VAZRPKlhapEFLKgsUINwiPZ+VqPJJ
tWGiAVNe9N3ZAowIW97Q07lGR++Jnxqs/TzNuvRqEdhqsKOXayEB/dMa4RGYqoJM
3f8jR1QQBWcEPQP9fdFCXVWyf7TOOisqRgpC4s8ShYGfAiiNtvbyOwmMM6Gk5fcE
xQOSLpkMww482Y0aiqovymrBA4Z+SGoHCikTu37NaoNs10XFa57L+Dsn8B8OMs2n
x7wY599Hg/6QGj9UCau+wkF+Fg+12xdutJWecqRRNJIBels03mHaxR7RwA/+ctsx
HftVOrjAQs5vzd9b4d6KfDXPbQ==
-----END CERTIFICATE-----
Generated at Mon Aug 31 14:15:08 2026 by rpki-client