
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json)
Hash identifier: t1S+CRHWHSLZNeMqhnm0kQQ1ruN3FReeVwO+unSDYVA=
Subject key identifier: 13:8F:73:26:75:A6:43:74:80:F8:3A:C7:C7:79:46:72:DD:40:83:8F
Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
Manifest number: 0192
Signing time: Sat 13 Jun 2026 04:22:00 +0000
Manifest this update: Sat 13 Jun 2026 04:22:00 +0000
Manifest next update: Sat 20 Jun 2026 04:22:00 +0000
Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: I/mw0S40N34S7nX7TcYncYjr1KhY0uANXcYeVdrFzaU=)
2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: EFBskJYMHfJRXujHupPsFrdh1ToDlvL0xJdWDE7eAo8=)
3: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: i2+AU5JC1CnIuV2WebgbR1MhXzhp17jyG1HTb2dIKP0=)
4: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: EOqSQLbOPrsjZ56mAXCzCp42zP2pW/1hVyLkMumCHLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Validity
Not Before: Jun 13 04:22:00 2026 GMT
Not After : Jun 20 04:22:00 2026 GMT
Subject: CN=6a2cdae8-33e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:f2:b7:1a:4b:09:e9:8f:5f:67:f4:bc:9e:
0a:33:1f:d8:9e:52:77:27:67:e3:e6:de:0d:6b:3f:
46:12:b0:1e:4a:76:8f:21:56:87:52:89:2a:43:82:
0b:1b:3a:ab:80:f6:7c:59:1a:b7:44:fd:24:3d:e1:
ce:51:00:2b:96:ec:69:07:01:46:24:3c:50:4c:78:
b5:6c:9a:5d:4d:5f:5a:68:9a:0b:8a:33:38:af:09:
ce:9a:6c:fa:ed:69:12:43:f1:ff:70:49:3b:96:74:
2b:27:c6:8d:be:3b:15:ec:58:fb:66:9f:fc:dd:7a:
98:8c:55:9d:67:91:40:94:c7:42:a7:07:49:ec:f8:
71:c8:89:87:11:40:f8:27:5d:b3:36:21:10:93:f2:
fd:7d:4a:ff:80:5a:3f:17:c2:b1:b5:0a:66:7a:cb:
32:b0:cb:7f:0c:53:22:bc:42:71:06:4b:c2:9e:3a:
b7:a3:c2:5d:41:82:30:9f:33:44:d3:a1:b7:9b:3c:
3f:cc:27:f5:03:66:22:5a:a5:84:f7:fc:23:a8:71:
71:cc:86:c8:1a:2d:59:93:74:d2:6a:ef:d6:f9:29:
f1:6e:25:7d:30:86:a3:ae:5f:6c:87:dc:97:52:95:
e3:8d:94:e1:db:a8:e4:52:f3:9e:9e:2b:1d:63:e9:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8F:73:26:75:A6:43:74:80:F8:3A:C7:C7:79:46:72:DD:40:83:8F
X509v3 Authority Key Identifier:
keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:73:87:86:b8:b0:46:78:6b:77:f0:ba:d6:71:fb:cf:b6:23:
6d:05:d8:d0:a0:f2:1c:57:8c:29:22:aa:5a:15:71:87:af:5d:
00:9f:13:93:82:53:d9:62:85:0b:a9:bc:72:c5:e0:3a:9e:a0:
31:a7:a8:b9:25:3c:88:8c:38:90:15:9e:27:f8:33:98:78:5c:
9d:8b:a7:68:26:07:0f:36:72:db:5a:22:e7:c3:98:b6:cd:77:
53:df:e9:96:e9:ea:3a:ec:79:a8:9d:68:99:8b:f1:6d:fe:0e:
42:a2:da:a1:f8:26:df:86:0d:fb:f3:1b:31:43:73:c7:9f:a6:
0a:6e:3b:f8:3f:aa:ac:49:20:f9:28:0a:d8:03:13:10:d8:a5:
4e:50:65:76:28:90:cd:5f:a7:27:2a:03:7f:6f:57:1d:47:45:
27:a4:63:8d:ea:98:d8:98:48:f8:7e:09:eb:e5:23:02:88:3a:
73:3a:e5:26:22:0c:9f:ce:f0:60:41:75:8a:f1:d2:d9:8d:0f:
bf:a9:50:1f:50:ea:6a:57:a1:82:3a:bc:b6:a8:d2:b5:d8:35:
b9:70:09:50:34:48:23:20:c8:d8:5f:92:62:a7:5f:6b:c1:d4:
3e:1e:a8:f7:62:06:b3:c8:20:37:34:2c:02:ba:ed:cb:0e:f3:
aa:ce:6c:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG
MERDNTkzM0QwHhcNMjYwNjEzMDQyMjAwWhcNMjYwNjIwMDQyMjAwWjAYMRYwFAYD
VQQDEw02YTJjZGFlOC0zM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyzDytxpLCemPX2f0vJ4KMx/YnlJ3J2fj5t4Naz9GErAeSnaPIVaHUokqQ4IL
GzqrgPZ8WRq3RP0kPeHOUQArluxpBwFGJDxQTHi1bJpdTV9aaJoLijM4rwnOmmz6
7WkSQ/H/cEk7lnQrJ8aNvjsV7Fj7Zp/83XqYjFWdZ5FAlMdCpwdJ7PhxyImHEUD4
J12zNiEQk/L9fUr/gFo/F8KxtQpmessysMt/DFMivEJxBkvCnjq3o8JdQYIwnzNE
06G3mzw/zCf1A2YiWqWE9/wjqHFxzIbIGi1Zk3TSau/W+SnxbiV9MIajrl9sh9yX
UpXjjZTh26jkUvOenisdY+lTzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOPcyZ1
pkN0gPg6x8d5RnLdQIOPMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx
NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF
QWJ6eURVdklERVB3M0ZrejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhnOHhriwRnhrd/C61nH7z7YjbQXY0KDyHFeMKSKqWhVxh69dAJ8Tk4JT2WKF
C6m8csXgOp6gMaeouSU8iIw4kBWeJ/gzmHhcnYunaCYHDzZy21oi58OYts13U9/p
lunqOux5qJ1omYvxbf4OQqLaofgm34YN+/MbMUNzx5+mCm47+D+qrEkg+SgK2AMT
ENilTlBldiiQzV+nJyoDf29XHUdFJ6RjjeqY2JhI+H4J6+UjAog6czrlJiIMn87w
YEF1ivHS2Y0Pv6lQH1Dqalehgjq8tqjStdg1uXAJUDRIIyDI2F+SYqdfa8HUPh6o
92IGs8ggNzQsArrtyw7zqs5sgw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:30:38 2026 by rpki-client