
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json)
Hash identifier: k7LwYO1KW/9rQgPKifm0bsTsQFavqOWn/2n938wi5kc=
Subject key identifier: 3E:9F:78:EF:1C:BC:9A:9B:50:42:13:FE:35:77:46:8B:21:24:95:70
Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C
Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C
Certificate serial: 0EEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
Manifest number: 0EE1
Signing time: Fri 12 Jun 2026 17:37:31 +0000
Manifest this update: Fri 12 Jun 2026 17:37:31 +0000
Manifest next update: Fri 19 Jun 2026 17:37:31 +0000
Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: 2mD/all8rdBxXyqQVv4KvP5ICCbvxyPFx9M0t45UXWs=)
2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: uK9y+gPM8Frp0brfv/3gjohOY8wSZFPP3WtdADUyL4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl
rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3820 (0xeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C
Validity
Not Before: Jun 12 17:37:31 2026 GMT
Not After : Jun 19 17:37:31 2026 GMT
Subject: CN=6a2c43db-7110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:3e:17:f6:a0:2f:2c:f0:76:94:be:0c:9d:
a3:82:0d:27:05:f0:9b:ec:bc:f6:b3:36:4d:d1:44:
83:9a:3d:10:26:67:4b:29:71:73:98:ac:e5:25:f7:
06:d6:37:8c:3c:e9:56:3c:b7:2e:de:7d:ca:60:dc:
b5:93:ad:75:40:a7:23:d0:53:35:c0:b8:98:e6:27:
e0:68:43:a5:ae:a7:67:12:90:13:8f:3e:9d:6f:87:
82:b0:70:ac:7b:3a:c9:45:34:fb:45:77:fb:88:ab:
b8:04:05:5f:f0:8d:6f:bf:19:15:d3:ed:6f:34:ec:
60:06:5f:f6:b7:e5:7b:cd:f7:bb:94:bc:69:c5:a5:
12:1d:c2:be:b2:c8:0d:5a:3d:ca:66:ee:14:42:93:
1c:c2:7b:74:9b:c5:8b:3d:58:fc:22:38:4a:a3:65:
c9:34:28:3b:52:55:ed:26:97:29:fc:f0:f8:7a:6e:
fb:11:97:51:b4:6a:34:a8:61:a6:7a:32:8a:d8:83:
4a:dc:ea:28:64:11:c6:1d:f4:57:62:b2:46:8a:4f:
25:16:c9:58:3e:a7:36:a8:ea:30:f4:ba:4d:7d:e5:
a7:f5:7e:81:15:6f:b3:ba:16:1e:3d:4d:fc:2a:96:
7b:e2:75:62:82:a0:e2:d3:06:69:3a:90:83:2e:8f:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9F:78:EF:1C:BC:9A:9B:50:42:13:FE:35:77:46:8B:21:24:95:70
X509v3 Authority Key Identifier:
keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1f:a0:66:94:0b:2c:77:1a:ad:b0:8e:1b:9d:57:6f:a1:9c:
ad:94:8c:d8:ae:1a:65:85:ba:25:45:76:b5:6f:71:ad:4d:67:
f3:90:cc:d2:e4:c7:be:fe:40:0d:40:65:d8:cf:08:7e:98:a4:
fd:99:62:7b:79:c6:5b:7e:55:85:fe:96:1a:b2:59:f0:35:74:
6a:66:76:84:b0:bf:93:8a:07:0d:7e:b2:98:04:07:59:9e:3e:
0a:b6:04:ff:80:63:af:34:ff:49:b2:b7:e1:91:94:59:94:72:
67:d4:95:2f:36:53:75:dc:ae:27:d3:0e:8c:65:b0:6e:e6:c0:
ef:74:23:8c:6a:3d:95:1e:25:2e:8d:d8:f7:8a:3e:18:6d:c1:
f3:d1:e3:0b:aa:ad:ca:9c:12:72:d4:88:7e:0f:be:48:f5:2f:
e7:d2:32:dd:42:b6:d3:fe:57:25:2e:35:78:1c:03:8b:73:e3:
ea:b9:1f:f4:4d:31:34:a1:c8:83:b3:92:53:bc:26:2e:b7:a8:
66:5e:03:ed:9e:bb:7e:19:d3:5f:bd:7f:e2:0f:49:83:8e:5a:
c2:07:f6:a5:88:80:48:95:90:6b:fd:f9:12:06:2a:6b:4c:19:
75:3d:0a:93:ce:13:43:a3:27:7c:0f:86:76:11:aa:9a:4b:9d:
21:0a:3b:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC
QUQ4RTQ4N0MwHhcNMjYwNjEyMTczNzMxWhcNMjYwNjE5MTczNzMxWjAYMRYwFAYD
VQQDEw02YTJjNDNkYi03MTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyXc+F/agLyzwdpS+DJ2jgg0nBfCb7Lz2szZN0USDmj0QJmdLKXFzmKzlJfcG
1jeMPOlWPLcu3n3KYNy1k611QKcj0FM1wLiY5ifgaEOlrqdnEpATjz6db4eCsHCs
ezrJRTT7RXf7iKu4BAVf8I1vvxkV0+1vNOxgBl/2t+V7zfe7lLxpxaUSHcK+ssgN
Wj3KZu4UQpMcwnt0m8WLPVj8IjhKo2XJNCg7UlXtJpcp/PD4em77EZdRtGo0qGGm
ejKK2INK3OooZBHGHfRXYrJGik8lFslYPqc2qOow9LpNfeWn9X6BFW+zuhYePU38
KpZ74nVigqDi0wZpOpCDLo8W7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD6feO8c
vJqbUEIT/jV3RoshJJVwMB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4
NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T
SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh
QW13bjh0dVJ4RS02Mk9TSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHR+gZpQLLHcarbCOG51Xb6GcrZSM2K4aZYW6JUV2tW9xrU1n85DM0uTHvv5A
DUBl2M8Ifpik/Zlie3nGW35Vhf6WGrJZ8DV0amZ2hLC/k4oHDX6ymAQHWZ4+CrYE
/4BjrzT/SbK34ZGUWZRyZ9SVLzZTddyuJ9MOjGWwbubA73QjjGo9lR4lLo3Y94o+
GG3B89HjC6qtypwSctSIfg++SPUv59Iy3UK20/5XJS41eBwDi3Pj6rkf9E0xNKHI
g7OSU7wmLreoZl4D7Z67fhnTX71/4g9Jg45awgf2pYiASJWQa/35EgYqa0wZdT0K
k84TQ6MnfA+GdhGqmkudIQo7Kw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:30:59 2026 by rpki-client