
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
File: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft (raw, json)
Hash identifier: uVBZFAB3UxGgPwtG/SCS1zpopUttcpAd91OWOfOIrEo=
Subject key identifier: EA:28:98:FB:29:21:AC:CD:59:76:2D:6C:8A:7C:38:04:85:B3:2B:81
Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B
Certificate issuer: /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
Certificate serial: 045E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
Manifest number: 044E
Signing time: Wed 19 Aug 2026 00:34:29 +0000
Manifest this update: Wed 19 Aug 2026 00:34:29 +0000
Manifest next update: Wed 26 Aug 2026 00:34:29 +0000
Files and hashes: 1: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl (hash: 7ctlcedgWNtnFyUuc8etG1o5vtMxkg3W4HAOnbycZnk=)
2: E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (hash: 8/zGP160nh2DZMDYJOe8sBKWHlHcrlutomFPHyVw0oU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl
rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118 (0x45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C7F, serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
Validity
Not Before: Aug 19 00:34:29 2026 GMT
Not After : Aug 26 00:34:29 2026 GMT
Subject: CN=6a84fa15-2449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:0b:15:78:11:8e:59:72:71:54:8f:48:20:
78:c8:98:85:16:94:15:40:73:1c:92:65:d1:ef:c9:
7b:50:e9:34:b3:63:52:a3:83:f0:cc:76:3b:82:88:
73:c0:37:5c:7e:9a:c8:37:1f:52:75:e4:9b:7c:df:
82:72:52:ec:9f:e9:fe:4d:a4:15:ba:6e:ed:ae:a8:
23:c8:a6:f4:c5:07:1a:dc:ce:a8:33:60:78:7a:1e:
c5:2a:dd:51:c9:31:90:94:73:28:77:54:08:a9:d1:
0c:21:6b:eb:a9:31:0f:6f:de:b5:8f:39:b5:52:70:
b2:c1:eb:cf:dc:37:2d:19:c1:3a:ea:7e:95:5d:94:
ef:dc:ec:f5:81:fc:d5:2f:9c:05:82:16:b3:8f:8a:
bd:f4:3a:40:94:d8:0a:a3:ef:75:51:9c:6b:90:19:
73:a5:2c:1f:cb:7a:8c:10:77:33:c1:fd:25:a8:b1:
1d:69:e9:1e:0b:c6:fa:98:6e:12:19:f4:3c:97:34:
ca:80:a0:36:25:f0:b3:ce:62:8b:4c:a6:9c:ad:42:
fa:ac:63:8f:ab:1f:d2:4b:99:33:92:4b:7b:22:aa:
43:1c:fc:f7:79:ee:ce:61:7e:ae:c8:f5:dc:2c:40:
ec:21:64:37:b2:5f:e5:4a:39:fa:00:0b:c7:41:1e:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:98:FB:29:21:AC:CD:59:76:2D:6C:8A:7C:38:04:85:B3:2B:81
X509v3 Authority Key Identifier:
keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:10:32:99:f9:f1:9d:0b:44:9f:4e:48:15:62:fb:a5:62:6e:
93:0a:22:52:ff:d5:01:81:f2:9e:ed:c3:29:78:d6:f4:2f:5b:
0a:ae:a8:b3:7e:fe:f7:b9:94:c9:ef:4a:37:ed:e4:bc:27:ed:
db:61:a2:9d:a6:2f:45:00:97:d4:41:cf:73:57:f6:ff:66:80:
91:61:dd:e7:4d:86:19:71:d0:d6:f7:ef:0e:4b:9c:b0:5f:91:
6e:74:ae:05:c6:57:ab:15:e3:9b:98:9d:b7:ce:79:c5:82:55:
d8:bd:97:7e:9a:8d:ac:5e:0c:e1:b2:f0:bf:d4:e2:01:e7:92:
49:31:54:97:59:6e:c5:28:32:96:b7:05:34:5f:05:d5:b8:ed:
ee:7e:ea:35:2c:7c:02:14:07:2b:59:30:db:60:3e:d4:32:9b:
bd:8b:79:c1:d8:0e:3f:b0:87:3b:ed:72:ca:2e:28:f5:d8:58:
0d:a2:18:f3:c6:02:04:ba:e6:0b:53:7f:57:01:f1:37:0b:31:
55:8c:ee:e0:4f:ad:ae:19:be:22:0c:70:5c:7a:72:1c:d3:5f:
ca:34:b0:76:38:ae:a5:1d:c8:99:61:fe:64:c1:3f:18:df:fd:
e6:67:a0:2d:40:57:fb:74:77:71:ba:c7:e5:55:79:60:af:7e:
e8:ae:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:19 2026 by rpki-client