
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
File: 2YRcGequkJIocqDK_QUfFmFPhK8.mft (raw, json)
Hash identifier: sX5S/SyIiQLKGlens8pc2dDzAS06Hi0EWB4kLTQjjgU=
Subject key identifier: 52:45:5A:15:25:89:79:1D:39:9B:51:E4:A2:93:DD:01:7A:1F:D2:69
Authority key identifier: D9:84:5C:19:EA:AE:90:92:28:72:A0:CA:FD:05:1F:16:61:4F:84:AF
Certificate issuer: /CN=A91C6BF0/serialNumber=D9845C19EAAE90922872A0CAFD051F16614F84AF
Certificate serial: 0F17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YRcGequkJIocqDK_QUfFmFPhK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
Manifest number: 119F
Signing time: Thu 08 Oct 2026 17:43:36 +0000
Manifest this update: Thu 08 Oct 2026 17:43:35 +0000
Manifest next update: Thu 15 Oct 2026 17:43:35 +0000
Files and hashes: 1: 2YRcGequkJIocqDK_QUfFmFPhK8.crl (hash: SpyTJKvDFRCCQNVTIxtWI0uBxFthUvzDNw4DCzttr38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.crl
rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YRcGequkJIocqDK_QUfFmFPhK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3863 (0xf17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BF0, serialNumber=D9845C19EAAE90922872A0CAFD051F16614F84AF
Validity
Not Before: Oct 8 17:43:35 2026 GMT
Not After : Oct 15 17:43:35 2026 GMT
Subject: CN=6ac7d648-9e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:9b:1e:6d:ca:51:d0:6f:30:f0:be:83:c8:
d6:e5:5a:ed:e2:ba:90:50:58:44:54:d5:7d:56:40:
41:1c:b4:60:ab:8a:2c:15:23:77:8d:59:ff:20:89:
e2:9a:38:b7:dd:fa:fc:42:d9:c9:bb:3b:1f:0e:8f:
8f:5c:c9:a2:5c:08:26:64:92:31:43:35:f9:2f:89:
9e:b5:12:9e:b7:1d:e5:c5:8b:35:be:f4:28:26:24:
cc:43:70:fc:b6:a7:dd:0b:5d:29:e6:8c:09:32:54:
dd:7c:b6:0d:0a:7e:b8:7f:9f:38:d3:34:f5:ca:40:
f2:42:e7:ed:96:ec:a8:da:d6:31:f8:ed:d1:4e:ff:
72:1a:6a:79:8a:b6:a2:96:b7:8d:e8:c4:30:80:6a:
3f:a0:a0:88:8b:d6:48:67:0c:7e:d8:53:0c:42:9b:
dc:7b:1f:80:69:fd:91:71:61:c0:c5:fc:46:13:0e:
a0:6a:a7:6e:80:cb:31:dd:36:a2:ae:58:32:63:c7:
40:26:8d:32:c1:68:d0:ea:c0:f2:9b:66:45:fd:73:
d6:b5:3c:c8:51:f2:26:18:e6:26:13:fc:85:a1:b7:
a1:bd:65:93:ba:45:ac:6b:d2:c9:42:2e:f5:3a:7a:
6a:85:d5:e0:ff:ac:1a:f4:e1:d9:c2:be:64:91:70:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:5A:15:25:89:79:1D:39:9B:51:E4:A2:93:DD:01:7A:1F:D2:69
X509v3 Authority Key Identifier:
keyid:D9:84:5C:19:EA:AE:90:92:28:72:A0:CA:FD:05:1F:16:61:4F:84:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YRcGequkJIocqDK_QUfFmFPhK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:52:a6:f5:98:e9:a4:49:6c:0b:78:e7:02:84:a8:94:6e:7f:
16:fd:16:4d:94:e9:94:47:00:34:9d:5e:27:ef:01:2b:9a:53:
72:b6:af:2e:fb:55:c6:4d:e6:6f:e3:f5:12:d8:ca:a4:c8:d1:
0d:aa:60:bb:28:2c:54:73:c4:da:dc:18:c1:22:2e:34:c9:ae:
33:41:90:37:82:7a:bc:70:b0:43:a1:2d:bf:31:cb:37:32:11:
35:2c:0c:07:7d:c1:a8:e2:e6:1b:b2:ca:c6:2f:4d:bf:4a:b7:
45:bd:11:ab:f0:2a:c4:07:99:f3:26:9e:26:65:a3:1b:b8:ab:
f0:07:e4:1c:c0:4c:da:e5:0e:fc:02:20:90:65:c8:dc:2e:0e:
c4:07:27:21:dd:c7:43:c6:09:b7:a7:e6:54:ef:ea:78:31:62:
da:fa:05:6e:72:74:14:18:9e:b5:42:8c:74:1b:91:cb:22:56:
e1:3b:9b:e4:d7:03:5d:03:5c:19:54:ce:70:ff:c4:da:45:19:
f6:b0:a0:bf:9b:e7:68:90:03:3f:7d:10:fb:a3:f1:91:6a:0b:
3a:dc:18:47:11:a4:08:a3:cb:f8:c9:50:d4:8e:ee:77:f6:05:
05:8f:2c:f1:f4:ec:1e:1e:cf:a1:67:75:17:16:56:76:0c:f2:
07:11:20:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZCRjAxMTAvBgNVBAUTKEQ5ODQ1QzE5RUFBRTkwOTIyODcyQTBDQUZEMDUxRjE2
NjE0Rjg0QUYwHhcNMjYxMDA4MTc0MzM1WhcNMjYxMDE1MTc0MzM1WjAYMRYwFAYD
VQQDEw02YWM3ZDY0OC05ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4gebHm3KUdBvMPC+g8jW5Vrt4rqQUFhEVNV9VkBBHLRgq4osFSN3jVn/IIni
mji33fr8QtnJuzsfDo+PXMmiXAgmZJIxQzX5L4metRKetx3lxYs1vvQoJiTMQ3D8
tqfdC10p5owJMlTdfLYNCn64f5840zT1ykDyQuftluyo2tYx+O3RTv9yGmp5irai
lreN6MQwgGo/oKCIi9ZIZwx+2FMMQpvcex+Aaf2RcWHAxfxGEw6gaqdugMsx3Tai
rlgyY8dAJo0ywWjQ6sDym2ZF/XPWtTzIUfImGOYmE/yFobehvWWTukWsa9LJQi71
OnpqhdXg/6wa9OHZwr5kkXAZbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJFWhUl
iXkdOZtR5KKT3QF6H9JpMB8GA1UdIwQYMBaAFNmEXBnqrpCSKHKgyv0FHxZhT4Sv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF
QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi8yWVJjR2VxdWtKSW9jcURLX1FVZkZtRlBo
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJZUmNHZXF1a0pJb2NxREtfUVVmRm1GUGhLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi8yWVJjR2VxdWtK
SW9jcURLX1FVZkZtRlBoSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXVKm9ZjppElsC3jnAoSolG5/Fv0WTZTplEcANJ1eJ+8BK5pTcravLvtVxk3m
b+P1EtjKpMjRDapguygsVHPE2twYwSIuNMmuM0GQN4J6vHCwQ6EtvzHLNzIRNSwM
B33BqOLmG7LKxi9Nv0q3Rb0Rq/AqxAeZ8yaeJmWjG7ir8AfkHMBM2uUO/AIgkGXI
3C4OxAcnId3HQ8YJt6fmVO/qeDFi2voFbnJ0FBietUKMdBuRyyJW4Tub5NcDXQNc
GVTOcP/E2kUZ9rCgv5vnaJADP30Q+6PxkWoLOtwYRxGkCKPL+MlQ1I7ud/YFBY8s
8fTsHh7PoWd1FxZWdgzyBxEgwQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:46:30 2026 by rpki-client