
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json)
Hash identifier: 5m6LUOudMxgw6HioBWVAKWVM0NEcVv9+DLQLvi888Qc=
Subject key identifier: 9B:CD:85:0A:95:6A:0F:72:45:50:1E:22:6C:CC:64:D0:75:FB:F7:11
Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Certificate serial: 0522
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
Manifest number: 0513
Signing time: Mon 28 Sep 2026 23:46:11 +0000
Manifest this update: Mon 28 Sep 2026 23:46:11 +0000
Manifest next update: Mon 05 Oct 2026 23:46:11 +0000
Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: sX68zMB00rBM3HZeISIbn4dSps76U/4zdbc/MWiysos=)
2: hi6XFGG7lg3zKMm4tIJacD3ClQg.asa (hash: nD16c1SaImd5jIeliiej27leO49yQYLvEwXAU3d5DJk=)
3: 996419B6627D11F1B70F09038E47A888.roa (hash: 6fwP2rsJ1aYLnM+RF5A41SVQIk30a/xQCKjUg+QU10c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 23:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314 (0x522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Validity
Not Before: Sep 28 23:46:11 2026 GMT
Not After : Oct 5 23:46:11 2026 GMT
Subject: CN=6abafc43-7023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:1e:53:15:79:64:bc:72:e7:47:05:e5:dd:
22:86:c4:e0:c5:30:5c:c3:52:23:ff:85:a4:75:56:
e5:51:fa:4a:7e:dd:7b:dc:ff:ce:87:e8:5d:65:27:
40:00:b8:ab:c4:1d:20:34:06:2c:b5:40:70:cb:00:
c3:84:ef:1c:c7:4c:db:99:31:9a:88:94:ca:4b:4f:
bf:17:6b:f9:f8:09:1a:0e:c4:f4:be:84:bb:15:fd:
60:08:d6:13:58:6d:bc:a0:f1:56:b2:ff:a6:e4:52:
cd:0e:27:13:a4:54:ec:73:9f:2a:1a:9f:b5:b0:79:
64:2d:29:d6:fe:e7:95:43:6e:16:18:13:3a:15:85:
1e:1a:03:f4:18:22:c5:68:9c:cb:47:7d:f2:48:89:
3d:67:1a:81:9b:3f:2f:de:7e:dd:42:2a:66:e1:cf:
fe:41:1c:2c:d4:3f:2c:41:12:06:b0:45:81:6b:55:
4b:93:74:f1:c6:80:a8:20:e5:c7:58:47:c6:db:6d:
15:23:b6:c8:80:b2:23:b6:c0:c9:91:b4:a0:fa:ae:
16:b1:ac:da:15:f3:f0:40:68:2f:ab:94:ae:a2:f0:
6c:75:1b:c2:85:48:00:fd:38:60:92:d2:dc:88:e5:
a6:f2:40:05:69:4b:b3:a7:ef:08:30:af:f4:5e:22:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CD:85:0A:95:6A:0F:72:45:50:1E:22:6C:CC:64:D0:75:FB:F7:11
X509v3 Authority Key Identifier:
keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:ab:b3:1e:c7:36:94:38:6e:ab:c3:d8:6f:22:23:6a:9b:45:
de:04:4d:38:8d:0e:ee:80:77:1b:ff:fe:b2:4e:a3:3a:21:72:
81:61:71:72:15:97:f6:57:76:b9:3e:57:e5:67:78:43:a1:4b:
c8:55:b8:26:b3:92:93:77:c4:09:d7:1b:fa:d9:3b:c0:a0:52:
d0:4a:01:ab:61:10:cd:92:35:f8:c1:0c:2c:b8:7c:98:cb:df:
4e:c9:08:0e:a6:ce:d1:1a:4c:d1:7f:97:b8:75:eb:ba:b3:05:
61:d7:df:9b:57:54:3c:b5:2f:b9:ac:58:98:91:cc:a1:22:26:
4f:cf:0c:50:5c:df:20:1b:e8:30:54:e3:ce:b9:9a:d2:06:07:
f9:7d:a7:fa:c9:3e:d6:94:db:dc:e1:1c:80:f8:7c:91:5f:d2:
6d:7a:79:f0:7e:1c:ab:14:de:dd:48:91:38:e7:72:f9:25:26:
87:a7:59:5d:94:78:13:ca:eb:bb:7c:5a:fb:df:52:33:53:f5:
7b:04:cc:a4:5e:4f:09:ac:75:77:29:b2:5b:ad:26:3f:c0:f4:
5b:96:44:26:d2:c4:98:d4:6e:fb:66:9a:89:35:98:ea:9f:2a:
23:4b:68:64:91:4a:93:c2:af:ac:0c:3f:b6:20:9c:7b:81:07:
35:9f:94:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:24:41 2026 by rpki-client