
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json)
Hash identifier: LbTkOJrONk7g3riZlbeDIwZWX5T14yYKMJ9uX6/LK58=
Subject key identifier: 39:B0:36:85:08:C4:2F:BE:44:F9:22:3C:5A:52:78:75:39:29:C8:F9
Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14
Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514
Certificate serial: 043A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
Manifest number: 042E
Signing time: Wed 07 Oct 2026 00:23:34 +0000
Manifest this update: Wed 07 Oct 2026 00:23:34 +0000
Manifest next update: Wed 14 Oct 2026 00:23:34 +0000
Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: 1N+blF09rdlfeNPvaz5BQeQiPl1g1PW+y9/kb0mBLyg=)
2: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: 6ChvL5bIW0nd/LEwk1GkYjUq9x3wU+NsnqxaoPxGr+c=)
3: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: SAmq2qut5svZXJTr/IN8K0rrvVU2RQUex9B9Y/hGwvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl
rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082 (0x43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514
Validity
Not Before: Oct 7 00:23:34 2026 GMT
Not After : Oct 14 00:23:34 2026 GMT
Subject: CN=6ac59106-858e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:42:c3:d8:b8:2b:a6:c3:11:ef:aa:8e:f1:c8:
c3:f4:ea:e5:f8:ab:9d:8f:80:09:d6:88:3f:aa:76:
06:01:7a:f2:4b:15:da:23:35:ff:12:53:db:a7:c6:
26:5a:e7:dc:c7:96:dc:e8:c6:3e:bc:bd:39:49:20:
39:7f:dd:34:d0:08:eb:a1:2c:b0:cb:52:a5:73:80:
06:62:a1:02:34:bd:17:75:59:88:06:12:f7:9b:8b:
b3:05:ad:11:61:84:7e:42:d2:42:e7:5f:f4:a0:3d:
96:f6:05:18:33:4d:4f:8b:ae:bc:e3:ce:41:e9:4b:
bf:3c:c2:75:11:e4:63:ab:24:47:fc:8c:38:16:6b:
fe:34:fb:7f:a1:08:bb:d4:64:c4:b5:3f:bf:31:bb:
e4:53:4a:1a:47:6e:c8:08:12:1f:78:40:cc:9d:56:
ae:5b:e8:87:20:c6:f6:c5:a6:3d:9e:ea:f0:c1:0f:
63:b0:e5:5d:17:75:5c:79:29:cb:e1:e8:bf:56:62:
10:5b:3e:68:01:94:c1:c2:47:4d:82:b5:4f:e6:46:
78:35:e6:b9:99:6f:9c:3a:cd:05:6e:65:c8:dd:9a:
58:dc:e4:56:c2:7e:a2:17:02:63:3b:c4:42:1f:ee:
93:48:4d:b9:6c:a1:5e:f3:bf:2a:f9:34:6d:80:a5:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B0:36:85:08:C4:2F:BE:44:F9:22:3C:5A:52:78:75:39:29:C8:F9
X509v3 Authority Key Identifier:
keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:6e:ba:e8:92:02:bb:10:e6:30:b5:9e:b3:1c:43:4f:ca:47:
a3:54:f8:43:6b:b9:22:28:6f:36:3a:ce:f0:e9:e9:f9:5e:fb:
7a:8a:fd:c4:c5:b3:8a:b7:60:f3:b5:94:f6:30:24:e4:85:e3:
f3:82:5b:2a:23:11:94:01:94:94:47:eb:e1:3f:09:9a:90:47:
76:27:e0:db:30:ae:52:37:28:74:a5:95:44:33:a5:31:0b:b9:
54:48:8f:e7:7e:4a:54:6c:5c:c8:89:a5:9b:8b:18:2c:fe:d5:
af:d4:4d:e2:6d:22:cb:3f:fd:5d:54:85:3a:bf:0b:66:3f:00:
8c:8a:7b:86:4e:bd:2e:52:db:75:10:cd:55:35:40:7d:f8:06:
ba:81:11:3a:94:a1:a3:57:13:57:dd:79:03:cf:2f:79:2f:c3:
ca:c8:6b:aa:f1:e3:bd:a4:db:70:8f:0c:b2:01:ce:88:5b:0c:
02:0d:56:f9:59:6c:2c:54:0b:5c:27:c1:75:68:6b:c9:6b:ee:
d7:42:b3:56:49:77:a4:3f:e3:fd:18:4d:54:bb:c4:f4:90:dc:
57:5e:05:99:f6:5f:c4:ec:66:b4:f9:d2:4d:1c:08:8d:27:90:
49:da:a9:70:ba:4f:7a:8e:c5:cf:2d:32:1c:81:6e:a2:47:3e:
01:81:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:03:54 2026 by rpki-client