
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json)
Hash identifier: czHEtqLE0+DpnrBfKld64ezIe+rAlPZyU+r9Hf9/meY=
Subject key identifier: 25:D4:13:47:B7:45:5D:DF:B4:0D:2F:D5:54:76:66:91:F3:64:2F:DF
Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Certificate serial: 0828
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
Manifest number: 0820
Signing time: Sun 20 Sep 2026 21:04:16 +0000
Manifest this update: Sun 20 Sep 2026 21:04:16 +0000
Manifest next update: Sun 27 Sep 2026 21:04:16 +0000
Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: fvN/42DDUh02nl3f4UXhm4beBK9YclZ6kCGJKgpJT4g=)
2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: zq6YsHOFAkCUjOwvFtu/Gf7IKiFUQhFU7rExUxXP4/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Validity
Not Before: Sep 20 21:04:16 2026 GMT
Not After : Sep 27 21:04:16 2026 GMT
Subject: CN=6ab04a50-3f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:8d:2e:6e:47:a4:c2:6e:0f:18:1a:e5:55:
f6:75:12:20:a3:40:46:e9:97:30:3d:80:18:32:22:
04:a0:24:45:65:aa:d8:4b:03:f0:f4:0c:d0:d8:e5:
e0:18:3a:0f:38:93:1b:2d:11:9e:23:41:5a:e7:d5:
a2:e2:f4:45:d0:d0:d1:92:3b:92:9f:7a:e5:da:57:
98:ea:7e:d6:a6:51:aa:bb:a8:ae:1d:0a:eb:4e:b0:
a9:57:82:9e:3c:d7:29:00:af:96:d6:43:ca:33:04:
10:1f:81:94:58:87:35:1b:99:4e:10:d9:62:89:33:
a6:31:e8:b2:bb:e3:bb:94:38:82:a4:5a:91:04:dc:
91:44:f0:d8:e1:98:fd:d6:3f:ee:03:bb:9b:91:f6:
28:41:a0:e0:80:0c:c1:4b:dd:64:d2:cd:c6:22:fb:
cd:43:04:39:ea:bf:d9:67:82:f9:03:cc:1b:21:77:
d2:c8:29:73:c7:27:6a:56:bd:fb:88:2f:0c:7c:f7:
1f:11:2f:a5:b2:f4:1e:c8:37:c8:92:a1:8c:b7:b9:
a1:27:b9:f5:ca:5d:fc:70:5c:ea:9f:e7:fe:fc:41:
30:c5:54:3f:56:e0:06:89:12:67:52:d4:df:9c:b8:
8b:9b:56:37:46:1f:c1:99:3a:fa:63:6b:93:3a:4e:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D4:13:47:B7:45:5D:DF:B4:0D:2F:D5:54:76:66:91:F3:64:2F:DF
X509v3 Authority Key Identifier:
keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:0a:cb:09:4b:07:e3:91:07:b2:98:e0:ea:ec:bf:b6:9a:eb:
c2:7f:c2:a9:7a:c1:27:69:06:9c:07:a6:dd:7d:da:41:05:37:
73:7a:1d:10:17:a8:1e:27:4f:d2:d0:a1:6e:37:00:37:2e:6d:
b4:6f:7b:6a:a5:16:58:89:b5:9c:74:a5:95:29:e2:d7:d0:b6:
4b:b9:bf:12:cd:2d:1e:ce:84:31:2d:9d:48:6e:ed:e4:d4:40:
6f:3b:d4:fb:32:7f:0c:54:81:fc:c8:1a:24:4c:27:e9:95:e8:
b1:05:1a:c6:3b:30:7c:4e:8e:4f:b8:6c:ab:a4:a0:1b:7b:bc:
a1:c8:4d:2a:d8:60:16:68:dc:13:89:b0:bd:03:d9:56:f7:e1:
4e:a2:e0:41:c6:b8:79:f4:6a:9c:46:41:39:c7:0c:5b:fb:71:
46:ec:00:c8:33:f9:44:1c:62:d2:36:38:99:28:e8:66:35:18:
c8:f5:77:15:a4:ba:c2:b0:32:69:41:3d:5c:2e:06:06:dc:c4:
4b:87:17:46:45:1f:e8:c1:9a:ec:a7:2c:48:98:75:ad:07:a0:
20:0e:a0:5d:72:08:61:08:88:6d:aa:06:b1:d0:61:4c:a1:ec:
8f:d3:e8:7b:6a:76:5a:c2:87:65:43:c4:bd:b4:95:87:d8:ba:
09:08:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:01:13 2026 by rpki-client