
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft
File: 2m3rP2XMI2eEg6drt445Hy-cZCE.mft (raw, json)
Hash identifier: GK4TD1htHJiam6WAMKzE7qLU3P4wBZQp7sAGr9m7G3g=
Subject key identifier: 06:EE:95:02:C1:DD:37:66:D6:6C:C2:4A:50:AF:55:14:4B:4D:DA:EC
Authority key identifier: DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21
Certificate issuer: /CN=A91CE959/serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft
Manifest number: 62
Signing time: Sat 19 Sep 2026 03:47:23 +0000
Manifest this update: Sat 19 Sep 2026 03:47:22 +0000
Manifest next update: Sat 26 Sep 2026 03:47:22 +0000
Files and hashes: 1: 2m3rP2XMI2eEg6drt445Hy-cZCE.crl (hash: DMpUYkPM4htqwJB09Jw9oB/FKdjszlaBDVV8h+j5tvc=)
2: DD10EC4221D311F1A9814A2D233D8C67.roa (hash: /yzAJPiNJxpo9+q64etk5otNPKwR6uKsst/Nxwyi5gg=)
3: E302E312268811F185CD3CFFB4833773.roa (hash: 1Tn0eJ0bGdKPh/87544Mu+NSKKv9zP/9QDVNwO5GdQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl
rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE959, serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421
Validity
Not Before: Sep 19 03:47:22 2026 GMT
Not After : Sep 26 03:47:22 2026 GMT
Subject: CN=6aae05cb-5b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:21:bb:dd:27:75:77:be:48:bf:92:1e:7e:
3b:5f:35:48:46:4e:28:b9:83:a8:a1:6b:a8:e8:35:
fc:bc:a9:54:2a:1b:39:99:dc:e2:e1:d9:0f:7b:a1:
c5:7f:e4:b2:8e:9d:5f:76:5f:9a:b4:7a:bd:4d:c9:
aa:09:dd:b4:f3:e1:f2:3f:1f:03:28:d1:44:17:c7:
d5:56:fb:ef:5a:87:08:e9:73:05:bb:17:1f:fc:d9:
45:b4:30:22:b4:17:d8:56:f4:ff:79:49:81:c2:fc:
20:a8:28:b3:c2:a3:1d:02:ae:91:3e:54:07:0a:76:
c8:2c:ed:a9:3a:59:cd:5e:92:ec:7e:8d:b3:6a:e4:
38:8b:d0:93:51:77:7c:38:18:e5:62:e4:5e:69:30:
c8:2c:d9:94:0e:20:a4:72:12:ab:96:02:ee:ae:e6:
ae:d4:c3:c0:f7:73:d2:fb:fc:67:14:36:61:54:f4:
54:d7:b6:6e:42:6a:6b:29:9b:7d:b2:70:28:2a:4f:
d8:7b:8f:19:4e:b8:08:73:60:e2:95:02:50:74:10:
b9:50:0f:98:62:ac:d4:fd:2b:c4:bf:ad:54:26:74:
41:8b:15:55:b8:b3:c5:d9:a5:7f:9a:eb:fb:eb:43:
40:9f:69:ab:ae:92:20:f6:da:09:20:2f:8a:45:f3:
59:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EE:95:02:C1:DD:37:66:D6:6C:C2:4A:50:AF:55:14:4B:4D:DA:EC
X509v3 Authority Key Identifier:
keyid:DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:68:75:a9:ca:e3:21:96:2d:13:1b:34:99:33:d0:32:e2:c7:
12:b2:05:bc:57:e8:e7:41:15:19:c1:e6:8b:91:82:0a:56:8d:
d3:38:05:90:13:70:69:e1:b8:1f:e9:46:6f:0f:27:6f:8f:6c:
4d:7c:20:94:55:3a:d4:e5:2f:21:58:8e:04:70:ff:32:e4:f3:
0a:3d:1c:72:4e:e5:4c:e2:db:bd:80:4b:d4:59:dc:0e:99:02:
0c:fe:76:92:68:ad:d3:b5:a7:19:05:21:7c:ad:54:c8:a9:9b:
13:ba:9a:44:63:95:69:d6:3a:71:cc:66:3a:da:9d:c7:be:63:
ea:2b:db:5b:c8:1d:aa:e9:2c:be:0b:95:c4:c0:b3:e9:82:20:
7c:af:2c:6d:98:b2:53:b3:31:4f:55:ce:b5:df:f3:92:a8:1b:
51:49:4c:54:0a:2d:86:c7:ab:f5:39:57:c8:46:d5:8b:0a:86:
a2:9f:21:25:9d:ba:66:de:20:75:da:4e:6c:dc:d5:f9:65:98:
e1:d8:75:3a:5a:a0:16:30:fd:d9:9b:0c:f8:e9:d4:93:b5:d6:
32:e2:60:4a:02:70:97:7d:61:56:2d:2b:77:63:3b:84:46:2f:
4a:f0:ae:d3:79:8a:c2:79:8d:a4:b8:92:7d:82:cd:bf:66:0c:
65:27:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:11:17 2026 by rpki-client