
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
File: R2e2k72EYu6vqD2egDydKGtiHcg.mft (raw, json)
Hash identifier: ZqsU1d3r8KGCjuLprrxVbRbrfHU7IwsQzb18VWTM30A=
Subject key identifier: 3A:4C:4F:01:36:A2:3F:7A:A9:07:82:AE:A7:B4:5D:EF:87:83:57:00
Authority key identifier: 47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8
Certificate issuer: /CN=A91F9B6C/serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
Manifest number: 012D
Signing time: Mon 05 Oct 2026 06:05:36 +0000
Manifest this update: Mon 05 Oct 2026 06:05:36 +0000
Manifest next update: Mon 12 Oct 2026 06:05:36 +0000
Files and hashes: 1: R2e2k72EYu6vqD2egDydKGtiHcg.crl (hash: YBc6VHYFHMWVHDqMrQaTf8ycemFscQ9mtaSsOVw9ylI=)
2: 3D60B6FCFA5E11EFB84AF068C4F9AE02.roa (hash: eERmryIuppZrUFAb8TiqZfIWg/53A0ZkoDjAmmurm48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl
rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 06:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9B6C, serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8
Validity
Not Before: Oct 5 06:05:36 2026 GMT
Not After : Oct 12 06:05:36 2026 GMT
Subject: CN=6ac33e30-48b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:e8:e8:0d:b6:6f:f3:6e:b3:ea:51:47:63:
f0:72:0f:81:89:4c:07:77:6b:5a:e2:c7:c2:13:f3:
2b:83:b9:07:e2:22:71:73:49:a9:51:78:be:65:03:
f4:3d:16:68:c1:21:b3:66:30:90:fe:a6:9a:e5:bc:
a0:cb:53:63:1c:3d:bf:3c:30:52:a6:17:eb:7f:00:
ee:d0:11:3b:d0:0f:21:bd:e5:70:61:87:59:f0:df:
7c:78:4b:58:e7:36:6e:df:84:9c:7a:19:81:69:0a:
9e:73:f4:7b:78:a5:3b:5d:bc:4b:f4:31:1a:c5:2b:
4b:fa:41:5a:0a:fb:d1:df:6e:03:78:b4:e0:0b:24:
7f:34:24:d5:75:d3:a9:18:92:03:51:a8:ae:9b:86:
55:d0:ea:e1:f3:7a:e7:64:e6:16:3b:b5:0f:e1:b0:
04:31:0a:ce:20:be:3e:3c:12:9e:e9:59:04:05:2b:
cc:2b:c2:d7:c8:7c:c2:e4:6f:2f:bd:31:4a:21:0b:
7c:a7:ec:3c:70:6a:9d:9c:40:53:81:15:d6:07:86:
de:d3:01:50:2a:b8:5d:27:c5:86:34:01:03:09:d1:
f5:f0:8b:6e:32:44:62:6e:7c:dd:ab:70:0d:18:f3:
d5:98:f9:68:2e:55:a7:b0:12:b4:b9:2b:6f:4f:de:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4C:4F:01:36:A2:3F:7A:A9:07:82:AE:A7:B4:5D:EF:87:83:57:00
X509v3 Authority Key Identifier:
keyid:47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:eb:a7:27:f2:f8:9a:e2:f2:eb:4a:5d:70:7d:35:f7:0a:98:
ec:0d:44:0a:58:be:ab:f5:b7:39:c0:6e:ed:ff:0c:14:93:9f:
e6:b7:97:42:35:15:ca:9f:a1:34:f9:e0:2e:6a:7d:d3:c2:3e:
45:6a:7f:3d:ce:7d:7f:2d:7f:b2:16:ce:f1:c9:d8:b9:96:cd:
26:01:8b:f1:e5:6f:bb:75:df:6b:21:3a:0a:f3:86:f2:2a:5d:
97:76:3d:41:4b:6c:fa:a7:b1:12:e2:df:b6:ab:13:82:8f:15:
0c:c6:c6:62:e1:ac:69:b4:4a:08:d3:a1:89:5e:ff:d3:53:dd:
bc:83:cc:b7:98:ee:0e:5d:b8:92:d5:1c:ed:ed:86:17:e8:9c:
42:3d:ed:ed:6d:b6:de:53:dc:98:f0:80:cd:2f:06:e8:29:d6:
77:fc:c9:a6:d5:56:78:fd:d4:4d:46:91:28:04:54:77:19:8f:
29:62:7f:0e:11:f9:8a:c7:90:09:0c:fb:c9:c0:a7:c7:27:d6:
09:59:0a:4e:d9:4e:ac:e0:02:4f:63:e7:62:30:99:dc:ec:ce:
40:73:73:e9:9d:08:10:74:29:02:73:6b:75:bd:48:c9:d7:d0:
60:66:e7:b0:3a:29:11:59:a7:a3:8d:73:32:01:bf:a8:f9:c8:
eb:c2:72:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlCNkMxMTAvBgNVBAUTKDQ3NjdCNjkzQkQ4NDYyRUVBRkE4M0Q5RTgwM0M5RDI4
NkI2MjFEQzgwHhcNMjYxMDA1MDYwNTM2WhcNMjYxMDEyMDYwNTM2WjAYMRYwFAYD
VQQDEw02YWMzM2UzMC00OGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu0jo6A22b/Nus+pRR2Pwcg+BiUwHd2ta4sfCE/Mrg7kH4iJxc0mpUXi+ZQP0
PRZowSGzZjCQ/qaa5bygy1NjHD2/PDBSphfrfwDu0BE70A8hveVwYYdZ8N98eEtY
5zZu34ScehmBaQqec/R7eKU7XbxL9DEaxStL+kFaCvvR324DeLTgCyR/NCTVddOp
GJIDUaium4ZV0Orh83rnZOYWO7UP4bAEMQrOIL4+PBKe6VkEBSvMK8LXyHzC5G8v
vTFKIQt8p+w8cGqdnEBTgRXWB4be0wFQKrhdJ8WGNAEDCdH18ItuMkRibnzdq3AN
GPPVmPloLlWnsBK0uStvT94NkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpMTwE2
oj96qQeCrqe0Xe+Hg1cAMB8GA1UdIwQYMBaAFEdntpO9hGLur6g9noA8nShrYh3I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUI2Qy9EN0RCMEEwOEZB
NUQxMUVGQUUzNzRENjhDNEY5QUUwMi9SMmUyazcyRVl1NnZxRDJlZ0R5ZEtHdGlI
Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1IyZTJrNzJFWXU2dnFEMmVnRHlkS0d0aUhjZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUI2Qy9EN0RCMEEwOEZBNUQxMUVGQUUzNzRENjhDNEY5QUUwMi9SMmUyazcyRVl1
NnZxRDJlZ0R5ZEtHdGlIY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkOunJ/L4muLy60pdcH019wqY7A1ECli+q/W3OcBu7f8MFJOf5reXQjUVyp+h
NPngLmp908I+RWp/Pc59fy1/shbO8cnYuZbNJgGL8eVvu3XfayE6CvOG8ipdl3Y9
QUts+qexEuLftqsTgo8VDMbGYuGsabRKCNOhiV7/01PdvIPMt5juDl24ktUc7e2G
F+icQj3t7W223lPcmPCAzS8G6CnWd/zJptVWeP3UTUaRKARUdxmPKWJ/DhH5iseQ
CQz7ycCnxyfWCVkKTtlOrOACT2PnYjCZ3OzOQHNz6Z0IEHQpAnNrdb1IydfQYGbn
sDopEVmno41zMgG/qPnI68JyXQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 08:02:46 2026 by rpki-client