
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
File: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json)
Hash identifier: qlDaJYOzPUKSLdngGV790VPMSwxsQQYJvIBQM7EyeD4=
Subject key identifier: 2F:80:14:CA:32:8E:65:B2:99:D1:6E:1B:8A:5E:60:2B:E7:E6:02:AB
Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
Manifest number: 0206
Signing time: Thu 05 Nov 2026 03:56:15 +0000
Manifest this update: Thu 05 Nov 2026 03:56:15 +0000
Manifest next update: Thu 12 Nov 2026 03:56:15 +0000
Files and hashes: 1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: jKWXPmdBswCTK4cOP0C59a9Stk6DSqrYw2uTb2duu+s=)
2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: Nm/9k1bK/nJvJq+EeJ6k6OoJJzoZhznxyzIVifoqxa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 03:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Validity
Not Before: Nov 5 03:56:15 2026 GMT
Not After : Nov 12 03:56:15 2026 GMT
Subject: CN=6aebfe5f-0c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:8d:d9:37:fe:60:03:1b:96:83:e2:f9:69:
a2:7d:80:4d:32:ef:2d:8b:5d:6c:25:ed:96:4d:68:
cd:eb:a5:eb:7c:6a:2f:25:c0:15:c4:33:72:d4:af:
72:54:c3:a0:44:ec:31:77:c3:5f:bd:9e:6e:3a:b5:
48:eb:e5:e6:6d:1b:dd:8e:55:14:09:35:08:c3:c7:
9c:39:9a:7d:3c:61:b1:a4:0f:27:ae:c8:38:22:56:
f1:46:51:8d:87:35:2f:76:e3:2e:8e:8f:39:8e:72:
95:18:e6:a1:47:7e:cc:14:1d:35:00:57:68:89:17:
9d:c6:07:89:d5:95:fe:05:cd:33:0d:e6:11:3d:a0:
70:76:dc:02:c7:4f:09:ac:cc:35:d0:56:85:56:7d:
f2:46:76:e0:ed:34:94:1b:96:7c:cb:3f:9b:2f:2a:
d0:49:4c:cf:bd:ec:95:a3:de:cb:eb:a8:21:ee:d9:
87:eb:34:22:a8:09:70:e4:7b:58:88:41:61:45:f6:
2d:ab:71:21:79:ce:26:04:96:0d:74:93:ba:4d:cf:
1f:d1:9a:2f:f5:c8:df:92:97:2a:ee:47:47:25:9f:
59:64:93:4e:2a:84:fc:0d:bc:dd:9d:cf:56:a1:4d:
f9:02:26:34:86:16:74:c6:70:66:13:40:ce:24:23:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:80:14:CA:32:8E:65:B2:99:D1:6E:1B:8A:5E:60:2B:E7:E6:02:AB
X509v3 Authority Key Identifier:
keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:a8:0c:7b:9a:ca:96:6b:de:ec:b9:45:bf:7e:9e:95:20:50:
fa:12:b9:ec:bd:01:12:38:2c:b1:b9:9a:39:12:43:87:d7:70:
3d:c9:f6:f8:4c:81:6d:ca:e1:56:a6:f0:d4:e6:60:e9:12:f1:
fb:92:64:0d:61:73:45:15:0f:7c:35:05:88:33:5c:73:c9:c5:
48:ea:01:ff:9f:8c:29:d9:d5:ac:a0:95:70:77:63:c8:39:9e:
11:79:03:cf:2c:56:88:1b:fc:96:6d:a2:91:77:37:c1:04:7f:
0e:ee:22:22:19:1d:f8:bc:2d:73:ec:88:6f:f6:c3:42:fa:39:
c0:25:55:db:fd:99:2a:dc:e3:b5:b3:43:35:fe:ec:2c:9d:cf:
5b:fa:7c:69:30:41:15:31:dd:fb:8e:4d:70:77:a5:19:a2:81:
67:5d:1a:28:6d:c3:8e:47:c4:95:67:73:68:35:09:4f:b2:a8:
77:e4:91:de:ff:64:42:18:b0:4d:3f:f2:77:ed:a6:7f:18:af:
54:6d:83:8e:00:23:0d:bf:06:b8:27:08:83:c5:d1:ce:62:39:
e7:4c:d0:ae:9f:5a:58:b3:89:95:f3:28:af:59:ae:99:d1:4a:
98:2f:90:70:82:cf:c2:cf:fe:0f:51:5b:11:85:06:f9:cf:7c:
c2:5a:a6:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5QTIxMTAvBgNVBAUTKEQ4RkM3OTVCNjNDQzQyNTczRkQ1REI0NEYwQTgzODZD
OEQ2NDNCODQwHhcNMjYxMTA1MDM1NjE1WhcNMjYxMTEyMDM1NjE1WjAYMRYwFAYD
VQQDEw02YWViZmU1Zi0wYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA01CN2Tf+YAMbloPi+WmifYBNMu8ti11sJe2WTWjN66XrfGovJcAVxDNy1K9y
VMOgROwxd8NfvZ5uOrVI6+XmbRvdjlUUCTUIw8ecOZp9PGGxpA8nrsg4IlbxRlGN
hzUvduMujo85jnKVGOahR37MFB01AFdoiRedxgeJ1ZX+Bc0zDeYRPaBwdtwCx08J
rMw10FaFVn3yRnbg7TSUG5Z8yz+bLyrQSUzPveyVo97L66gh7tmH6zQiqAlw5HtY
iEFhRfYtq3Ehec4mBJYNdJO6Tc8f0Zov9cjfkpcq7kdHJZ9ZZJNOKoT8Dbzdnc9W
oU35AiY0hhZ0xnBmE0DOJCMxRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+AFMoy
jmWymdFuG4peYCvn5gKrMB8GA1UdIwQYMBaAFNj8eVtjzEJXP9XbRPCoOGyNZDuE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CMzk2RjNDMEM1
NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFsY18xZHRFOEtnNGJJMWtP
NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzJQeDVXMlBNUWxjXzFkdEU4S2c0Ykkxa080US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODlBMi9CMzk2RjNDMEM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFs
Y18xZHRFOEtnNGJJMWtPNFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAagMe5rKlmve7LlFv36elSBQ+hK57L0BEjgssbmaORJDh9dwPcn2+EyBbcrh
Vqbw1OZg6RLx+5JkDWFzRRUPfDUFiDNcc8nFSOoB/5+MKdnVrKCVcHdjyDmeEXkD
zyxWiBv8lm2ikXc3wQR/Du4iIhkd+Lwtc+yIb/bDQvo5wCVV2/2ZKtzjtbNDNf7s
LJ3PW/p8aTBBFTHd+45NcHelGaKBZ10aKG3DjkfElWdzaDUJT7Kod+SR3v9kQhiw
TT/yd+2mfxivVG2DjgAjDb8GuCcIg8XRzmI550zQrp9aWLOJlfMor1mumdFKmC+Q
cILPws/+D1FbEYUG+c98wlqmyg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:48:47 2026 by rpki-client