
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json)
Hash identifier: XP8pmkEzL2BGPVM2ehUUbpF36QGN8ck4CQDpATiTKZA=
Subject key identifier: 70:D1:25:5E:83:CF:8B:A3:E4:50:A8:3B:A1:6E:97:4F:91:19:03:51
Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Certificate serial: 0842
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
Manifest number: 0839
Signing time: Wed 04 Nov 2026 21:22:27 +0000
Manifest this update: Wed 04 Nov 2026 21:22:27 +0000
Manifest next update: Wed 11 Nov 2026 21:22:27 +0000
Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: J3YdHShjv0Z0nV+7DxYwYe02Q4Pn1trcKWQ8Jzd5j4Y=)
2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: fI5k1La4sD+/67HSTmA1tFZ/9I8h6JeK1LDDYcVzmAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 21:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2114 (0x842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Validity
Not Before: Nov 4 21:22:27 2026 GMT
Not After : Nov 11 21:22:27 2026 GMT
Subject: CN=6aeba213-871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:42:42:db:f3:97:d6:f6:ea:3b:f7:2b:4f:
49:5f:2b:c0:5f:92:38:70:fc:85:4d:56:4a:76:f6:
e3:1a:12:28:4a:91:fc:8f:f0:34:80:57:bd:5f:1a:
91:c8:ee:6b:19:2e:da:13:b8:51:43:78:ea:cd:c0:
e6:cd:24:58:b6:a7:53:5a:7a:59:4a:a5:25:25:36:
d6:00:03:e6:f8:3e:59:7e:5d:7f:0d:da:21:bf:1a:
b2:80:ea:eb:68:44:55:e2:9c:38:92:8b:9d:be:69:
d9:de:e8:ef:34:51:80:9c:1b:b4:6f:50:c2:7e:b4:
b6:80:ec:fc:47:87:de:4e:38:36:ca:e8:32:ce:03:
2d:28:53:60:9e:e4:dd:fe:9e:f1:d0:f1:37:1b:06:
f3:31:03:1e:80:17:e6:f1:07:6f:78:94:c8:26:44:
8a:eb:26:60:02:d9:e7:d7:09:75:28:22:90:5a:36:
5c:fd:de:ac:60:ae:0a:66:fb:8a:5e:b7:0e:39:26:
53:54:ad:f3:1b:d8:17:c1:34:26:99:65:76:5e:b1:
65:90:39:70:0b:8a:c3:c9:9f:ce:d9:10:64:9f:aa:
ac:8f:c9:5d:85:ce:a0:92:9b:7a:00:70:96:df:9f:
45:6e:dc:2e:cb:7e:dc:ab:ff:d0:74:7e:dd:07:60:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D1:25:5E:83:CF:8B:A3:E4:50:A8:3B:A1:6E:97:4F:91:19:03:51
X509v3 Authority Key Identifier:
keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6e:1c:78:63:74:e9:04:83:86:2f:22:5c:09:94:8b:16:09:
ee:f7:fe:22:2c:64:c4:0a:9a:f4:ce:37:ce:88:84:59:13:78:
34:dd:10:97:42:4a:44:6f:0c:af:f4:23:4d:53:f4:e6:bb:91:
6d:cc:59:91:d0:7d:14:d7:96:b6:b7:f1:3d:29:3a:87:64:6d:
d3:b8:b6:3b:ca:87:5c:f2:53:c8:6d:6d:3c:60:34:e7:13:62:
a3:91:ce:53:ea:95:f9:57:77:9c:44:c9:c2:6d:5b:df:a2:34:
5c:6a:1c:68:3c:80:6a:85:2c:8a:90:e2:29:6f:5a:c9:76:8a:
1f:ae:85:4d:60:34:b7:f5:55:82:18:e2:d0:06:9f:08:16:28:
5d:2f:92:d7:c9:7a:45:24:87:65:d6:8d:c7:9a:79:a2:b6:16:
c6:7f:ac:32:77:a2:a5:79:df:ba:35:d8:b4:e6:f0:db:8d:b7:
20:99:48:c4:12:5e:41:ce:e6:3c:dc:a2:b8:7d:87:5f:f9:de:
ed:c5:47:c2:54:37:a8:24:4f:33:8c:94:52:ac:54:77:e7:6e:
46:ce:5a:4e:6e:00:cb:a7:b0:47:ff:0b:b8:79:2a:b3:c9:09:
8c:58:03:4a:15:b8:88:e1:d1:63:83:de:4e:bf:1e:75:d1:63:
46:04:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 12:12:42 2026 by rpki-client