
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
File: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft (raw, json)
Hash identifier: 5/LgDnoFqRiaykgBsH5RTmOZ6yOXcPZ5I1+TU2wZ5o4=
Subject key identifier: E4:32:83:65:BB:7B:A7:B0:BA:D0:55:35:73:20:9A:B3:36:C0:DA:5F
Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B
Certificate issuer: /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
Certificate serial: 0475
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
Manifest number: 0465
Signing time: Sat 03 Oct 2026 00:26:05 +0000
Manifest this update: Sat 03 Oct 2026 00:26:04 +0000
Manifest next update: Sat 10 Oct 2026 00:26:04 +0000
Files and hashes: 1: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl (hash: xP3pb88oME/fQxEf95vbCDeB+lYi6LRLl8cfAStlrzM=)
2: E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (hash: 8/zGP160nh2DZMDYJOe8sBKWHlHcrlutomFPHyVw0oU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl
rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141 (0x475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C7F, serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
Validity
Not Before: Oct 3 00:26:04 2026 GMT
Not After : Oct 10 00:26:04 2026 GMT
Subject: CN=6ac04b9c-1b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:ca:43:88:16:d5:0a:28:d6:0c:60:86:25:
03:a6:3c:ca:90:d3:f8:42:59:63:dc:7c:02:54:ca:
f1:7b:a4:48:73:86:85:db:6b:ee:cb:ef:5a:5c:f2:
56:a1:ce:14:f0:e6:82:a7:da:e4:7a:1a:61:0c:ef:
54:9c:08:a1:76:28:82:a5:96:43:b3:3f:98:7f:3a:
c0:bb:41:73:56:7a:88:f0:95:7f:23:07:7a:ce:6f:
ef:0d:12:0a:13:8f:26:1b:a3:39:48:ff:ce:df:e3:
13:6f:1e:c8:4b:05:d0:0b:86:e9:f6:cf:a9:66:0c:
93:04:6f:44:46:ce:d1:e6:ac:12:c6:28:0d:43:8d:
d2:90:2d:d4:6d:b0:6d:13:64:86:21:8c:2f:46:a4:
11:8a:c3:46:86:80:a9:dc:ee:a4:c8:4e:54:8e:b7:
e3:db:f8:0a:4f:57:eb:1f:a3:dd:e4:ce:ab:6e:ef:
19:9d:5a:02:16:74:0f:ca:34:2f:82:8e:c5:6c:99:
28:da:e4:29:41:16:ec:6d:75:cb:2c:1a:15:e0:74:
bd:70:6a:db:ba:09:fc:64:88:ff:99:44:3c:c9:e9:
b9:42:a1:02:73:10:47:3f:30:34:f4:9a:63:1a:62:
8f:65:5f:4e:c6:47:7d:01:73:12:db:bc:39:13:e0:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:32:83:65:BB:7B:A7:B0:BA:D0:55:35:73:20:9A:B3:36:C0:DA:5F
X509v3 Authority Key Identifier:
keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:05:cf:b0:49:ff:7c:d0:02:ad:39:99:e4:cb:f4:5a:38:cd:
7d:5c:0f:b3:32:48:32:8f:36:c6:28:7c:40:ca:a1:d6:04:2a:
ec:e0:94:53:46:38:15:f1:cb:39:be:22:ac:ac:43:b3:40:8e:
43:45:db:dd:1b:d6:cc:10:38:e4:5e:2d:b3:e6:5c:66:e5:e4:
ff:cd:8f:00:f1:45:a7:5a:71:85:8f:68:cf:db:d8:77:d6:92:
09:87:5c:53:d1:fc:01:cf:5c:9f:b6:d5:bc:ce:48:fc:a2:6c:
1b:9f:77:27:6e:f7:ae:2c:2d:fe:33:d6:b1:0a:6c:4d:03:c9:
17:9c:df:21:fb:2d:d9:ce:45:e2:6c:eb:e8:6f:d0:85:2a:8d:
ad:27:ff:d6:fd:e0:b2:99:45:17:a2:22:cb:01:42:16:76:e9:
50:08:c8:65:c3:68:c7:0b:5e:3e:f1:62:f6:9b:d0:99:09:2d:
fd:f3:a7:7a:e5:cd:46:d5:0a:a5:05:89:9c:a3:ef:b6:43:9c:
41:52:46:ca:0f:bc:be:0f:e1:46:cc:24:9d:79:d2:e4:a0:aa:
f5:29:b6:39:f9:e6:86:18:6f:a3:76:53:3c:bf:9c:0e:16:45:
e1:36:35:e1:b5:f0:a9:e1:39:58:10:59:60:dc:2c:d5:03:a1:
4c:eb:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:19:16 2026 by rpki-client