
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json)
Hash identifier: p60LFqoaZa8Q22kLxsneaUA5hJrA67TttcJC/1323s8=
Subject key identifier: C2:D0:4B:81:A1:49:DC:6F:99:3C:41:28:8B:07:6B:35:6D:D9:9E:A9
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
Manifest number: 0257
Signing time: Wed 07 Oct 2026 02:54:34 +0000
Manifest this update: Wed 07 Oct 2026 02:54:34 +0000
Manifest next update: Wed 14 Oct 2026 02:54:34 +0000
Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: nOgO2bSQSjN45O6dtxTk60RBCXWZtmBtbJxVv4Zr3MM=)
2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: k/wrk+71dTC2xpAfXzlheReLA9aT4ZuDhkK6xEFQumE=)
3: 585745526BC111EEA163E774C4F9AE02.roa (hash: jWFAA3hjLn4/pUtGRdYAlT0inc3UozSJNCSTFiimgaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Validity
Not Before: Oct 7 02:54:34 2026 GMT
Not After : Oct 14 02:54:34 2026 GMT
Subject: CN=6ac5b46a-075a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:81:77:83:09:32:de:44:32:5c:a9:97:48:
49:3b:2d:c1:58:56:9e:be:c3:39:a2:64:35:f6:42:
d6:4e:c2:4a:48:a5:14:84:32:31:8c:01:43:2f:80:
52:68:d5:e7:86:2b:41:bb:bf:88:72:5a:4a:dd:8d:
0c:fe:04:96:a5:6e:dd:3f:6b:26:c9:3b:ba:2e:66:
72:03:63:46:a9:c0:08:88:71:7c:b8:26:21:da:52:
52:5c:f6:05:82:84:16:0b:55:25:f2:25:14:1e:2a:
04:13:c8:01:eb:9e:a6:ec:f9:b7:4a:73:d9:e5:a7:
b3:7e:f9:bd:26:42:37:2f:86:f9:14:75:c5:76:bb:
d5:19:6b:51:1f:08:98:cf:ff:26:16:e0:84:5c:dd:
c7:36:8b:b9:65:eb:6d:15:b0:6b:e3:33:bc:cb:99:
36:43:4a:e5:50:c6:28:6d:1d:7c:4b:56:4e:fd:2c:
cd:13:cc:2e:81:ca:56:15:d6:c5:88:78:24:f9:87:
d9:10:e2:3a:49:76:8b:c4:45:d4:6d:9a:92:2f:9f:
76:2d:f3:56:41:7c:f6:dd:b2:8a:ee:c7:fc:f9:13:
27:a7:15:d3:9f:7e:70:70:b6:c8:32:97:1b:4f:79:
7d:02:47:45:5c:af:f8:64:f4:9d:6e:17:bf:11:e3:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:4B:81:A1:49:DC:6F:99:3C:41:28:8B:07:6B:35:6D:D9:9E:A9
X509v3 Authority Key Identifier:
keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:65:69:0a:d5:e8:f2:c0:ad:a6:32:fc:ff:d9:1e:b3:d0:1f:
32:b1:d9:67:d6:8c:b7:e1:34:4f:80:5d:93:cc:87:f2:2a:71:
82:77:0c:e3:91:e3:e0:89:d0:4a:7b:f8:92:74:44:71:1a:32:
2e:a9:b0:2b:34:78:58:bc:de:33:46:c0:43:21:27:7f:6e:bb:
3d:bb:c8:67:c2:b1:54:16:43:be:c0:05:15:96:b3:c6:2c:d5:
60:b9:9b:8a:e0:7d:61:f2:6c:c2:29:ae:d3:48:9c:aa:2b:e5:
78:fc:ff:82:29:d8:61:2e:29:3c:58:3b:50:91:74:1e:ce:2d:
94:f3:a0:0d:ff:76:5b:c1:4a:9c:db:35:ab:9d:28:ff:0b:96:
3a:18:8c:05:1a:c7:83:f8:25:93:b4:91:b4:1b:20:8b:3f:b5:
1e:b8:7a:5c:ef:f6:94:ab:b8:95:97:92:1e:dc:f4:df:5e:fb:
10:ea:41:85:48:af:1e:65:d7:b7:58:13:9d:de:d9:52:75:92:
f4:65:2e:c9:21:1e:52:d8:5a:e1:83:97:95:98:1e:44:62:51:
55:1f:8e:ff:ec:13:54:8a:34:3a:f6:39:2f:9d:86:13:40:b3:
d1:58:e0:c4:73:89:ad:a7:96:ad:91:13:08:f8:bc:c9:ff:dc:
84:8c:0e:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC
REJCMzVGM0QwHhcNMjYxMDA3MDI1NDM0WhcNMjYxMDE0MDI1NDM0WjAYMRYwFAYD
VQQDEw02YWM1YjQ2YS0wNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArjCBd4MJMt5EMlypl0hJOy3BWFaevsM5omQ19kLWTsJKSKUUhDIxjAFDL4BS
aNXnhitBu7+IclpK3Y0M/gSWpW7dP2smyTu6LmZyA2NGqcAIiHF8uCYh2lJSXPYF
goQWC1Ul8iUUHioEE8gB656m7Pm3SnPZ5aezfvm9JkI3L4b5FHXFdrvVGWtRHwiY
z/8mFuCEXN3HNou5ZettFbBr4zO8y5k2Q0rlUMYobR18S1ZO/SzNE8wugcpWFdbF
iHgk+YfZEOI6SXaLxEXUbZqSL592LfNWQXz23bKK7sf8+RMnpxXTn35wcLbIMpcb
T3l9AkdFXK/4ZPSdbhe/EeN6FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLQS4Gh
SdxvmTxBKIsHazVt2Z6pMB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw
NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVo
T2JlMkR6bklpMG05dXpYejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaGVpCtXo8sCtpjL8/9kes9AfMrHZZ9aMt+E0T4Bdk8yH8ipxgncM45Hj4InQ
Snv4knREcRoyLqmwKzR4WLzeM0bAQyEnf267PbvIZ8KxVBZDvsAFFZazxizVYLmb
iuB9YfJswimu00icqivlePz/ginYYS4pPFg7UJF0Hs4tlPOgDf92W8FKnNs1q50o
/wuWOhiMBRrHg/glk7SRtBsgiz+1Hrh6XO/2lKu4lZeSHtz03177EOpBhUivHmXX
t1gTnd7ZUnWS9GUuySEeUtha4YOXlZgeRGJRVR+O/+wTVIo0OvY5L52GE0Cz0Vjg
xHOJraeWrZETCPi8yf/chIwO4A==
-----END CERTIFICATE-----
Generated at Thu Oct 8 03:43:21 2026 by rpki-client