
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json)
Hash identifier: Jd4d1zK1v9dVDS7HYmAxsrqOIhCWSxVBCDZCUlXVYo4=
Subject key identifier: E1:94:DF:AA:BD:B0:67:D9:8B:4E:21:97:7B:A2:91:D0:84:3D:67:3D
Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Certificate serial: 0843
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
Manifest number: 083A
Signing time: Fri 06 Nov 2026 21:13:18 +0000
Manifest this update: Fri 06 Nov 2026 21:13:17 +0000
Manifest next update: Fri 13 Nov 2026 21:13:17 +0000
Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: YmWbv5wFaI+Iuog96nJyGgQlJxMf6lRD4LL3ilG0bHo=)
2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: fI5k1La4sD+/67HSTmA1tFZ/9I8h6JeK1LDDYcVzmAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Nov 2026 21:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115 (0x843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Validity
Not Before: Nov 6 21:13:17 2026 GMT
Not After : Nov 13 21:13:17 2026 GMT
Subject: CN=6aee42ee-356f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:70:28:fa:67:39:95:ee:78:43:0a:38:2d:
d9:2d:19:5a:bc:8f:fd:bf:eb:ab:2d:dc:a5:66:3e:
4b:5a:f9:ca:96:03:46:77:9f:69:58:9d:4b:89:ac:
7a:41:86:9e:75:08:f5:ab:40:c4:50:93:65:28:d3:
5a:af:53:41:31:73:5c:2b:ed:5e:00:8a:17:63:e3:
77:92:6a:89:38:dc:c7:ed:57:82:3c:42:2e:62:72:
29:b3:01:53:ac:d9:29:59:31:63:00:ec:1e:bd:3f:
0b:54:3b:88:38:62:54:ad:b3:cf:40:42:d0:48:03:
59:f1:ff:ec:cd:72:a6:08:ad:54:ca:36:78:21:ab:
eb:ac:95:06:34:19:0a:e4:e9:80:4b:29:92:90:a7:
2a:48:89:7f:63:34:0a:84:d2:46:09:2f:e8:57:c0:
dd:a1:83:26:b7:31:ef:6d:ab:f2:96:d3:47:4b:0d:
ff:92:7b:ef:c8:67:c5:b4:ab:53:12:9e:27:9a:8c:
69:33:3a:5a:ca:82:42:fe:36:69:a7:41:03:75:a8:
84:28:ef:56:1a:c6:89:b3:c9:b4:2b:aa:90:f6:48:
6e:90:bd:cb:55:c8:5c:65:25:ee:17:35:5a:69:f5:
73:82:9e:fc:14:b6:0a:3a:d4:20:f8:8f:6b:33:72:
bf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:94:DF:AA:BD:B0:67:D9:8B:4E:21:97:7B:A2:91:D0:84:3D:67:3D
X509v3 Authority Key Identifier:
keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:97:ac:d1:d8:55:7e:9b:76:68:6e:ce:93:22:8a:2b:c2:8e:
b5:dc:db:7c:d0:25:bd:14:b9:33:32:38:6f:1c:c6:e8:e0:b3:
83:18:bd:d5:10:4a:3b:ce:a1:09:c2:9c:ba:8e:9b:f7:5b:0e:
db:46:fe:3e:c7:84:5e:6e:16:fa:ff:a3:06:a5:8b:42:3b:64:
4c:4b:f4:55:69:7d:be:51:42:00:a9:d6:71:27:a5:8f:e2:e5:
a6:20:b0:ca:9d:12:11:af:d5:72:8f:fd:6b:70:63:c0:db:7b:
d2:25:23:99:a0:1e:a4:a3:18:50:8c:9f:68:21:65:c7:ee:6a:
48:6f:e6:79:fe:40:88:1a:50:8f:6b:39:58:f8:42:f5:70:9d:
d5:fd:e1:94:b5:7d:22:b6:66:e5:e7:52:98:44:5f:46:77:b4:
fb:bc:c0:cc:e5:83:99:74:5a:b0:b2:88:44:a4:89:d9:45:77:
24:77:59:d4:1d:5a:60:fd:83:45:51:ef:af:a2:44:93:c2:a5:
17:16:aa:4c:9d:85:5a:a8:33:e7:48:24:39:95:95:ba:68:50:
e4:93:1b:cd:98:c5:d4:86:68:90:be:be:ff:fb:bc:c7:fb:6d:
e9:24:f3:ad:93:a9:5e:6c:5a:a4:63:ed:0d:d3:7a:a4:9f:c9:
6b:e2:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 07:43:19 2026 by rpki-client