
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
File: r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json)
Hash identifier: BWNHtnrPqMNPPxzvQ3HBwQ3D1i4YJp9A+IOX6Ar8hJw=
Subject key identifier: 3D:8D:28:5B:5A:2D:59:26:C8:5A:8A:B5:3C:6B:4D:F3:F7:1B:13:C3
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Certificate issuer: /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
Manifest number: 015C
Signing time: Tue 22 Sep 2026 22:01:30 +0000
Manifest this update: Tue 22 Sep 2026 22:01:29 +0000
Manifest next update: Tue 29 Sep 2026 22:01:29 +0000
Files and hashes: 1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: XvM15ZftwYRqjJ6yHw7gYFYwcnBZ+yDWPY3dUUPcG6c=)
2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: +IqdnY0bu/tedBPSD8j29fV45Yb1kBQrsRNgm4wsYso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Validity
Not Before: Sep 22 22:01:29 2026 GMT
Not After : Sep 29 22:01:29 2026 GMT
Subject: CN=6ab2faba-cfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:bb:ef:f7:d6:94:01:53:7e:41:4e:27:23:a4:
d7:95:84:bb:54:69:70:23:37:67:e4:bc:fc:d4:be:
f9:58:8d:c8:a9:43:e8:63:41:41:de:37:c0:61:dd:
0e:d2:58:22:e8:65:f8:ec:62:cb:bd:fc:15:2f:78:
02:47:24:68:2a:f5:d0:bf:49:28:b6:73:75:f4:40:
3b:0e:8a:3c:0a:5d:a4:21:aa:bf:75:6b:bd:4c:2f:
48:15:31:43:89:04:f3:e5:f2:50:56:27:ba:14:a5:
1d:38:5b:1f:18:cb:d6:30:21:16:12:ce:53:f9:c8:
54:71:34:fa:63:2e:db:3c:2e:7c:69:c6:7e:f3:2b:
10:db:b0:9d:99:7c:09:f6:c7:78:e9:d4:39:2e:96:
f1:f5:90:18:84:c5:f4:33:2f:cc:f6:c1:ea:85:e4:
8b:a5:a0:26:bc:d8:7b:ee:c3:de:89:19:30:f3:38:
8d:e6:22:ff:51:99:a0:55:1a:33:01:8e:e1:04:7b:
4c:65:e0:c2:5e:dc:1d:7a:5f:5a:eb:97:92:7c:be:
1a:aa:85:05:e1:c2:52:9f:f8:0f:0c:20:1e:5a:f8:
3d:f0:a1:03:eb:cf:16:86:6b:96:02:fd:8a:da:7f:
d1:a0:d4:17:af:f5:b3:28:cc:73:27:09:ea:3a:16:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8D:28:5B:5A:2D:59:26:C8:5A:8A:B5:3C:6B:4D:F3:F7:1B:13:C3
X509v3 Authority Key Identifier:
keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6e:5d:e8:b9:73:b2:97:83:9f:cc:4b:22:26:53:1e:ff:6f:
bc:bf:24:2f:2d:31:0d:c7:c2:a7:6a:21:a6:27:35:2d:2f:cd:
72:f1:4f:20:35:ba:72:01:e0:8f:82:11:3d:68:3c:2f:be:93:
29:2f:a1:b1:20:e4:f6:8b:b2:4a:92:dc:72:86:21:25:57:02:
99:f7:b6:ec:31:66:d2:47:fe:da:52:f0:03:84:da:1a:c7:90:
f7:ed:7d:69:e0:09:a3:36:cf:5f:c9:e6:54:16:02:85:f9:30:
6a:ef:fc:34:a6:35:41:8a:e8:5b:4f:ca:bc:b8:96:67:83:36:
a5:5a:e9:22:d9:44:99:a2:02:26:0b:6b:4e:c6:d4:a9:05:da:
d2:f1:bb:73:2d:68:63:b5:ea:83:d3:c9:19:a6:5f:f3:ff:6c:
a7:96:c2:e6:d8:56:8c:6d:c5:79:5a:14:d7:d0:f4:00:d6:16:
96:1a:80:8f:ce:85:07:ee:cc:6f:34:2e:f3:7b:53:4f:fc:ec:
84:da:f8:17:49:59:89:6e:cc:dd:67:9e:e2:11:25:99:b9:70:
71:22:6a:50:7f:d0:c5:00:2c:f0:8b:44:6a:e9:00:99:ee:a5:
f5:60:50:28:0a:78:63:83:54:7c:db:1a:ac:9d:cd:39:12:61:
bb:4e:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:28:14 2026 by rpki-client