
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json)
Hash identifier: sxv62uJycwmYRBdkQiNdysiL01DaDwY6Ph7laF445vQ=
Subject key identifier: 8F:FE:2E:78:6C:C0:61:81:76:BD:A5:6F:37:20:10:C7:90:E1:1C:0F
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
Manifest number: 017C
Signing time: Sat 19 Sep 2026 05:06:25 +0000
Manifest this update: Sat 19 Sep 2026 05:06:24 +0000
Manifest next update: Sat 26 Sep 2026 05:06:24 +0000
Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: 2c9XlzGnIgMzBLp77hQW16u14lhy7K73NcTOQaetWV0=)
2: 90C06632E59811F0B79FD920496F56BC.roa (hash: Z/MTCzTXGo9DzTVFAZ1qXdgIiz2vNTTF/MPMd5PghNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Validity
Not Before: Sep 19 05:06:24 2026 GMT
Not After : Sep 26 05:06:24 2026 GMT
Subject: CN=6aae1851-9a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:8e:dd:5b:89:7b:e7:2b:5c:e3:33:88:0f:
5d:d9:ee:37:ba:d3:70:3e:47:3e:0f:42:94:ee:ed:
55:cd:f6:40:d1:11:ac:69:da:c4:20:22:d9:10:99:
50:45:33:bb:ef:9e:6b:20:1a:76:47:f4:e9:ad:6d:
68:89:65:4a:0f:11:6c:8d:d2:cd:d8:a1:ff:e8:7d:
7f:d0:10:f1:9f:cf:91:2e:79:04:2e:3b:bb:1c:d2:
78:28:6d:a1:c3:b2:68:40:41:f8:a0:b9:17:07:a7:
0b:a3:20:a7:6c:d4:56:03:65:a2:5c:dd:8f:dd:75:
cd:37:f2:90:2b:a3:88:41:1a:a5:e0:36:18:8b:e0:
30:55:4c:a1:3b:a0:57:6f:35:90:96:9a:5f:65:7e:
3f:02:88:01:7d:26:6f:a2:18:42:4f:a9:db:f3:35:
02:10:e2:73:e0:2c:5b:00:3b:d4:89:0a:48:03:cb:
a5:d8:16:4d:6e:3f:5f:a5:16:fa:60:a7:89:fe:81:
a8:cf:c1:b8:c1:25:3f:4d:e8:a8:3f:ec:8f:fb:a0:
86:04:bc:bf:13:4f:b8:5c:e8:9e:31:f9:56:52:ca:
58:aa:03:67:0a:46:25:fc:e8:76:52:51:df:44:3e:
f8:cd:7d:19:cd:cc:bd:2a:42:4d:17:bd:68:52:93:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FE:2E:78:6C:C0:61:81:76:BD:A5:6F:37:20:10:C7:90:E1:1C:0F
X509v3 Authority Key Identifier:
keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:17:38:30:ae:12:dd:b8:ca:77:df:dc:1e:82:ae:60:d4:d8:
74:46:7c:de:1e:91:9c:f9:47:0a:d2:39:12:9c:f7:36:02:4a:
bb:b6:8a:3e:ea:e4:d7:20:45:5a:a8:59:4f:55:07:56:82:b7:
d0:7c:3e:31:1a:b2:b7:28:72:b6:85:fe:99:a1:67:71:7f:c5:
31:77:f1:cd:ed:0a:f8:5a:6b:30:71:dd:12:9c:aa:74:f0:5f:
ef:0c:a5:66:93:75:56:ef:f1:65:bf:53:35:a5:5e:53:db:76:
78:87:94:c6:92:3c:c5:e3:32:69:4c:76:e1:81:ae:2a:f2:6b:
bc:dd:2f:16:c4:6a:fb:da:d8:43:ae:c1:6f:e9:aa:7c:47:6a:
ae:9e:75:6b:3a:a2:83:d4:22:5a:8b:29:fb:b5:43:0b:6e:93:
7a:31:98:35:8c:bd:4b:63:ca:d1:f0:98:8e:60:6e:c6:4d:7c:
1e:46:37:e1:2a:dd:28:34:de:92:94:2f:67:46:c7:bd:dd:fb:
e4:8e:b3:11:06:a2:51:5b:a4:c6:a6:7d:b5:01:d7:c3:ee:37:
2d:89:6e:cd:8e:dc:db:74:b5:48:b6:a2:7a:ef:67:24:81:a4:
71:0d:68:ab:c9:33:22:0e:df:8b:42:57:23:9d:e3:24:1b:80:
12:c9:62:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA2OUExMTAvBgNVBAUTKEQ5MDgzOTNDNUJBODAzNUFGNjhCN0VDMDA5NTU4RTgx
MkVEMDk1RTAwHhcNMjYwOTE5MDUwNjI0WhcNMjYwOTI2MDUwNjI0WjAYMRYwFAYD
VQQDEw02YWFlMTg1MS05YTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoMqO3VuJe+crXOMziA9d2e43utNwPkc+D0KU7u1VzfZA0RGsadrEICLZEJlQ
RTO7755rIBp2R/TprW1oiWVKDxFsjdLN2KH/6H1/0BDxn8+RLnkELju7HNJ4KG2h
w7JoQEH4oLkXB6cLoyCnbNRWA2WiXN2P3XXNN/KQK6OIQRql4DYYi+AwVUyhO6BX
bzWQlppfZX4/AogBfSZvohhCT6nb8zUCEOJz4CxbADvUiQpIA8ul2BZNbj9fpRb6
YKeJ/oGoz8G4wSU/TeioP+yP+6CGBLy/E0+4XOieMflWUspYqgNnCkYl/Oh2UlHf
RD74zX0Zzcy9KkJNF71oUpMwVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/+Lnhs
wGGBdr2lbzcgEMeQ4RwPMB8GA1UdIwQYMBaAFNkIOTxbqANa9ot+wAlVjoEu0JXg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8yRUI2MDc5NjlC
RjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0ExcjJpMzdBQ1ZXT2dTN1Fs
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzJRZzVQRnVvQTFyMmkzN0FDVldPZ1M3UWxlQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDY5QS8yRUI2MDc5NjlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0Ex
cjJpMzdBQ1ZXT2dTN1FsZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASxc4MK4S3bjKd9/cHoKuYNTYdEZ83h6RnPlHCtI5Epz3NgJKu7aKPurk1yBF
WqhZT1UHVoK30Hw+MRqytyhytoX+maFncX/FMXfxze0K+FprMHHdEpyqdPBf7wyl
ZpN1Vu/xZb9TNaVeU9t2eIeUxpI8xeMyaUx24YGuKvJrvN0vFsRq+9rYQ67Bb+mq
fEdqrp51azqig9QiWosp+7VDC26TejGYNYy9S2PK0fCYjmBuxk18HkY34SrdKDTe
kpQvZ0bHvd375I6zEQaiUVukxqZ9tQHXw+43LYluzY7c23S1SLaieu9nJIGkcQ1o
q8kzIg7fi0JXI53jJBuAEsliZw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:17:19 2026 by rpki-client