
$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json)
Hash identifier: rpLPs0EzruxJy7zPyN/LBI0dHQxOt6+PLz+S9ADjUw0=
Subject key identifier: A6:84:1E:28:B1:6A:15:91:C3:D4:3E:25:3E:BD:11:E4:20:CC:DD:FF
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial: 02F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
Manifest number: 02ED
Signing time: Fri 17 Apr 2026 01:11:46 +0000
Manifest this update: Fri 17 Apr 2026 01:11:46 +0000
Manifest next update: Fri 24 Apr 2026 01:11:46 +0000
Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: 4q/NlTKxrdj6qDEknAonDMazsHzSKUMnSAWvsckLOk4=)
2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: h9XZber2EyFddUowRYB4R36YQps0wInKux9nbzLj6gU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Validity
Not Before: Apr 17 01:11:46 2026 GMT
Not After : Apr 24 01:11:46 2026 GMT
Subject: CN=69e188d2-d69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:00:b5:c4:05:6f:3a:04:bf:73:ea:20:29:a6:
a1:28:f0:ad:ab:df:52:22:07:92:ae:04:ee:0a:e6:
9e:35:57:11:6e:3a:f3:00:7c:a2:a0:ca:32:17:25:
2f:6a:48:71:fb:d7:57:49:ef:fb:59:5d:97:07:b8:
01:ab:76:57:d8:0a:53:a6:50:b7:da:30:aa:ed:ba:
a4:3d:41:04:85:2c:5b:44:e3:50:30:fe:82:a1:f5:
77:13:36:7e:7b:45:7c:81:d9:a6:f2:82:9c:60:44:
a3:d5:ea:59:f0:b1:cc:16:ef:5a:22:fb:2a:b6:e2:
52:28:79:de:9a:ce:74:d9:29:5a:0a:c5:7f:05:bf:
fc:57:db:8d:01:e6:03:06:06:a8:0f:30:b5:86:a2:
96:96:35:ca:11:be:a7:bb:10:c5:b1:d6:2c:29:18:
e1:07:2e:96:1e:eb:84:64:69:00:49:40:16:65:20:
27:ab:94:41:9f:df:79:53:ce:1a:4e:db:0c:6d:fb:
fd:15:46:11:92:a9:f0:c9:c2:72:8d:0d:87:c6:6d:
1e:1f:87:72:6a:7d:54:68:27:63:71:c9:82:bc:1e:
78:ae:5f:81:eb:c6:95:3f:5d:9f:98:d1:e1:71:8e:
1b:62:b0:b8:04:53:db:49:c5:b3:d0:44:33:aa:09:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:84:1E:28:B1:6A:15:91:C3:D4:3E:25:3E:BD:11:E4:20:CC:DD:FF
X509v3 Authority Key Identifier:
keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:cd:f8:de:04:f6:77:52:15:87:ed:cf:80:36:df:5c:4b:77:
fa:ad:69:07:d7:bd:45:8e:0f:f4:6b:a1:34:76:35:38:c1:f7:
45:03:93:ad:b5:e8:62:ff:47:90:e0:05:96:f8:01:a4:cf:e8:
b3:f4:69:1f:76:5d:db:4a:6c:0a:59:40:a1:19:63:8c:0d:11:
3b:d0:d0:3b:3e:e9:f1:09:c1:7d:3c:6b:0b:4f:6d:d0:56:69:
10:9f:7d:c2:0f:f6:42:ac:be:76:2e:0d:97:c8:2b:64:82:9a:
81:f6:67:da:d6:82:57:9c:3e:48:4e:0b:7a:3f:1e:19:fe:d2:
21:3c:d5:9f:ae:5d:cb:fa:a4:05:38:77:46:87:3a:a0:0c:cb:
09:51:19:20:b3:9b:ed:d1:71:74:f3:43:78:d7:82:e8:51:0b:
4e:cb:3f:65:bb:2a:8c:8f:a0:6f:a8:07:4f:f3:20:5c:2c:96:
e1:ab:b8:39:cd:57:69:12:c0:ac:8b:69:b6:dd:9b:4d:31:3f:
3f:43:f6:30:f7:71:f5:7e:c0:62:7a:f7:07:34:23:21:af:cc:
80:24:ce:8a:d5:3a:a6:7d:64:d8:45:9e:69:9b:1f:f0:96:00:
5e:d0:8b:d6:ae:00:49:1b:91:8d:c5:1c:6c:cf:86:27:c7:42:
70:3d:db:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE5RjExMTAvBgNVBAUTKEQ5MDg0Q0FEQzNCRUM4QzIwMEM1QTk2QjcyRURBRkQ0
QTAwRUFFRTgwHhcNMjYwNDE3MDExMTQ2WhcNMjYwNDI0MDExMTQ2WjAYMRYwFAYD
VQQDEw02OWUxODhkMi1kNjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjAC1xAVvOgS/c+ogKaahKPCtq99SIgeSrgTuCuaeNVcRbjrzAHyioMoyFyUv
akhx+9dXSe/7WV2XB7gBq3ZX2ApTplC32jCq7bqkPUEEhSxbRONQMP6CofV3EzZ+
e0V8gdmm8oKcYESj1epZ8LHMFu9aIvsqtuJSKHnems502SlaCsV/Bb/8V9uNAeYD
BgaoDzC1hqKWljXKEb6nuxDFsdYsKRjhBy6WHuuEZGkASUAWZSAnq5RBn995U84a
TtsMbfv9FUYRkqnwycJyjQ2Hxm0eH4dyan1UaCdjccmCvB54rl+B68aVP12fmNHh
cY4bYrC4BFPbScWz0EQzqgkdjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKaEHiix
ahWRw9Q+JT69EeQgzN3/MB8GA1UdIwQYMBaAFNkITK3DvsjCAMWpa3Ltr9SgDq7o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTlGMS82OTVGOTNGRTIx
RUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlNSUF4YWxyY3UydjFLQU9y
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJRaE1yY08teU1JQXhhbHJjdTJ2MUtBT3J1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTlGMS82OTVGOTNGRTIxRUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlN
SUF4YWxyY3UydjFLQU9ydWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQs343gT2d1IVh+3PgDbfXEt3+q1pB9e9RY4P9GuhNHY1OMH3RQOTrbXoYv9H
kOAFlvgBpM/os/RpH3Zd20psCllAoRljjA0RO9DQOz7p8QnBfTxrC09t0FZpEJ99
wg/2Qqy+di4Nl8grZIKagfZn2taCV5w+SE4Lej8eGf7SITzVn65dy/qkBTh3Roc6
oAzLCVEZILOb7dFxdPNDeNeC6FELTss/ZbsqjI+gb6gHT/MgXCyW4au4Oc1XaRLA
rItptt2bTTE/P0P2MPdx9X7AYnr3BzQjIa/MgCTOitU6pn1k2EWeaZsf8JYAXtCL
1q4ASRuRjcUcbM+GJ8dCcD3bwg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:56 2026 by rpki-client