
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
File: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft (raw, json)
Hash identifier: T2FT3ywtOq0Hlx7zLqj9MBO/JCKGw5rqS4aDJcI2a+I=
Subject key identifier: 11:85:15:E2:FA:EA:FD:56:8D:2F:EA:DC:2B:01:BD:D2:F8:61:49:19
Authority key identifier: D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A
Certificate issuer: /CN=A91F0AF0/serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A
Certificate serial: 0D6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
Manifest number: 1F6C
Signing time: Thu 10 Sep 2026 17:06:36 +0000
Manifest this update: Thu 10 Sep 2026 17:06:36 +0000
Manifest next update: Thu 17 Sep 2026 17:06:36 +0000
Files and hashes: 1: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl (hash: 1ETYIA/AUkAfGlYrf0Cy04XumCfdvAbiDNGbin13wi8=)
2: CE3C7EF66FEB11EB91967864C4F9AE02.roa (hash: PoMZXZYHdteODhPAtacBWSXCAi/gVbSsN+xQtOQaEQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl
rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 17:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3439 (0xd6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0AF0, serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A
Validity
Not Before: Sep 10 17:06:36 2026 GMT
Not After : Sep 17 17:06:36 2026 GMT
Subject: CN=6aa2e39c-a663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:af:b5:af:e9:b7:33:eb:b6:ac:c8:78:13:c0:
9b:fc:ca:32:27:17:e3:6c:3a:ab:eb:fe:10:e3:fc:
37:c8:9e:e2:3f:d3:c1:05:d7:77:69:ab:25:8f:30:
96:78:8f:e1:84:c7:03:54:41:02:00:79:14:3c:15:
eb:d6:fa:87:3a:6a:47:41:40:95:71:73:05:0e:ad:
f9:52:73:dc:df:0e:99:14:2d:06:c0:96:a6:b6:13:
45:d8:40:ac:27:89:28:eb:ca:81:33:68:84:85:6d:
87:3e:fd:b8:45:86:c5:55:2e:c1:d1:36:7e:88:c4:
d9:4c:ff:ff:8d:82:96:24:d3:68:21:9b:a9:16:13:
55:d3:26:83:af:a7:ca:7b:87:61:72:a8:f1:bf:64:
59:d6:e9:4a:a4:91:c8:77:f8:10:83:97:31:09:90:
23:29:dd:c5:af:2f:3b:15:6c:df:6a:f8:d6:d1:0c:
ae:eb:56:3f:0f:3a:48:5e:8f:6a:7a:0c:92:6a:4c:
fa:25:d3:85:2a:7a:e0:03:75:fa:63:40:ac:f7:7e:
9c:42:1c:d6:83:8d:bc:7c:5b:2a:4f:eb:d9:a5:f7:
59:8c:a6:dd:d4:9c:fa:85:9d:3a:9d:87:aa:f7:ef:
04:66:57:f8:78:fb:64:c6:7b:13:1f:a8:58:d7:a9:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:85:15:E2:FA:EA:FD:56:8D:2F:EA:DC:2B:01:BD:D2:F8:61:49:19
X509v3 Authority Key Identifier:
keyid:D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:25:39:47:80:41:6c:bb:0c:30:e3:20:59:87:2f:a8:52:d3:
bd:10:80:e8:f9:cf:1b:b9:76:94:46:d4:ea:9c:d3:dd:b8:74:
f4:fd:40:18:19:ec:df:05:df:71:28:a1:b2:7d:13:04:fa:77:
49:79:19:58:24:bb:eb:43:87:bc:f0:93:9f:db:91:46:f9:6c:
d3:ba:4e:69:97:e8:33:f9:33:e6:3f:70:2e:c9:39:ea:10:2a:
4f:94:7a:f5:a0:8f:24:88:67:64:e2:ea:50:36:e0:b4:5c:05:
8d:3f:25:cf:27:b9:6f:4d:ca:fd:2a:29:9e:99:1f:d5:0d:7b:
ba:10:98:a8:92:e9:60:4b:5f:99:6e:67:24:85:0f:f2:8d:5c:
23:25:3a:71:22:6d:49:c5:9f:f5:a2:6c:13:68:d1:e1:e2:a3:
7d:2b:0b:74:f2:16:e6:a8:fe:7b:75:85:72:be:6b:7f:d0:f3:
96:f2:17:89:92:1d:32:f0:54:5e:c3:1e:d8:0c:c1:63:5c:3a:
d5:0b:7a:20:9e:eb:63:e3:39:30:e1:99:84:c7:32:cb:30:f5:
ee:a9:7c:be:79:a8:e7:95:59:11:a0:29:9f:15:7a:3f:c6:ef:
4e:5c:11:d1:27:ff:fa:40:7b:8a:07:c9:51:b8:8a:5b:aa:be:
e0:2e:d1:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBBRjAxMTAvBgNVBAUTKEQ5QkQ3MEU3NzdGODYxQUU1NDM4NTcxNDhFNjMzNTJG
REE4NEMwN0EwHhcNMjYwOTEwMTcwNjM2WhcNMjYwOTE3MTcwNjM2WjAYMRYwFAYD
VQQDEw02YWEyZTM5Yy1hNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiK+1r+m3M+u2rMh4E8Cb/MoyJxfjbDqr6/4Q4/w3yJ7iP9PBBdd3aasljzCW
eI/hhMcDVEECAHkUPBXr1vqHOmpHQUCVcXMFDq35UnPc3w6ZFC0GwJamthNF2ECs
J4ko68qBM2iEhW2HPv24RYbFVS7B0TZ+iMTZTP//jYKWJNNoIZupFhNV0yaDr6fK
e4dhcqjxv2RZ1ulKpJHId/gQg5cxCZAjKd3Fry87FWzfavjW0Qyu61Y/DzpIXo9q
egySakz6JdOFKnrgA3X6Y0Cs936cQhzWg428fFsqT+vZpfdZjKbd1Jz6hZ06nYeq
9+8EZlf4ePtkxnsTH6hY16mIZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGFFeL6
6v1WjS/q3CsBvdL4YUkZMB8GA1UdIwQYMBaAFNm9cOd3+GGuVDhXFI5jNS/ahMB6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEFGMC9FMzc2Mjk1MDBG
RkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlhNVVPRmNVam1NMUw5cUV3
SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJiMXc1M2Y0WWE1VU9GY1VqbU0xTDlxRXdIby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEFGMC9FMzc2Mjk1MDBGRkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlh
NVVPRmNVam1NMUw5cUV3SG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIiU5R4BBbLsMMOMgWYcvqFLTvRCA6PnPG7l2lEbU6pzT3bh09P1AGBns3wXf
cSihsn0TBPp3SXkZWCS760OHvPCTn9uRRvls07pOaZfoM/kz5j9wLsk56hAqT5R6
9aCPJIhnZOLqUDbgtFwFjT8lzye5b03K/Sopnpkf1Q17uhCYqJLpYEtfmW5nJIUP
8o1cIyU6cSJtScWf9aJsE2jR4eKjfSsLdPIW5qj+e3WFcr5rf9DzlvIXiZIdMvBU
XsMe2AzBY1w61Qt6IJ7rY+M5MOGZhMcyyzD17ql8vnmo55VZEaApnxV6P8bvTlwR
0Sf/+kB7igfJUbiKW6q+4C7RnA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:40:07 2026 by rpki-client