
$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json)
Hash identifier: bJbwmokRsyECvotK7D0bMD7mumnp7EYSSh0ExMYgVL4=
Subject key identifier: AB:6E:F1:94:30:86:4C:29:FD:F2:C8:D3:EA:D7:C7:59:AB:68:75:4E
Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
Manifest number: 0249
Signing time: Sun 05 Apr 2026 01:58:35 +0000
Manifest this update: Sun 05 Apr 2026 01:58:35 +0000
Manifest next update: Sun 12 Apr 2026 01:58:35 +0000
Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: xFttlYnS2ENZnDMRQ4IHDOBDbQN52p7KMF8lQPRVV9Q=)
2: B6522520CA6311F09583DE23C4F9AE02.roa (hash: BLKJYKfre7LAbOlIyN9gi1hwCec2KGQoAxw2GSxc1Lk=)
3: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: zE41WQieGtPZ6uprujzngfIRBwGKIWd50MUZOTimbRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Validity
Not Before: Apr 5 01:58:35 2026 GMT
Not After : Apr 12 01:58:35 2026 GMT
Subject: CN=69d1c1cb-6d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:d0:48:6a:12:72:97:91:ae:3c:a9:a8:85:
5c:0d:f8:6d:3a:42:f2:75:08:0b:5f:89:c3:17:dc:
9d:27:99:8e:d2:5f:2b:d2:1f:a8:9c:05:e4:33:0b:
4f:d5:18:61:5d:84:90:97:6a:fd:8a:53:13:f5:e7:
3d:5d:cc:9b:4a:e9:44:f4:75:cc:6f:7f:e9:be:91:
1c:a5:b3:d6:8e:9b:5b:ec:2f:09:61:ab:ab:11:a0:
4c:b3:23:17:59:61:a4:06:09:85:35:d7:a5:55:ca:
e7:e4:e0:eb:14:1c:3c:f5:48:22:6b:f1:9c:cf:e9:
a4:ef:2f:58:f3:ea:e9:a2:d2:1c:ae:61:e5:98:e1:
a7:56:02:e1:4c:b0:e4:06:a5:de:40:15:0f:b5:4d:
aa:88:b3:06:87:fc:ec:a4:49:7d:f5:8a:28:25:c8:
fb:4c:ad:dc:59:cc:7b:4a:85:ba:59:c9:eb:e9:43:
49:3f:a7:78:c9:be:f7:f8:65:a0:66:c5:22:b6:10:
e6:96:0b:49:81:b0:a2:73:3c:32:c3:78:c9:6d:07:
3d:02:6b:0d:75:55:89:43:bf:09:f6:f1:c3:4e:78:
b5:db:06:98:53:7b:47:b8:29:71:f5:70:55:a6:11:
36:25:00:f0:a5:de:7b:f8:ca:d0:a2:25:bc:b7:be:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6E:F1:94:30:86:4C:29:FD:F2:C8:D3:EA:D7:C7:59:AB:68:75:4E
X509v3 Authority Key Identifier:
keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bf:3b:21:d8:6a:a2:65:46:fd:45:59:3c:f4:81:39:a0:6d:
f2:d3:84:c1:6c:62:f7:d4:cb:d7:0e:55:c1:aa:90:da:a9:d2:
c3:83:2e:95:1e:08:ca:a4:5d:c2:bb:df:99:34:b4:9b:3d:af:
a0:ee:88:49:e1:b9:1b:5d:20:cf:da:08:bf:86:8a:6d:94:24:
71:e2:6c:dc:e3:4d:e1:2a:0e:a0:1e:9f:0a:2c:b8:40:ed:aa:
e5:e9:b5:3b:ac:63:9d:84:02:3b:cc:d8:8b:08:44:8d:b1:1b:
47:03:89:ba:14:e5:94:19:17:76:0c:49:fb:3d:71:5f:d4:9a:
ff:7d:75:0c:f2:b2:5c:39:b2:e7:b6:00:22:95:77:a6:0c:d4:
23:e7:26:76:db:ad:25:a8:bd:5c:18:90:7f:2e:9d:c8:f3:44:
c1:22:cd:4c:df:68:08:35:2b:31:ad:29:70:e5:ac:e2:4e:8b:
b9:42:3c:8d:68:4d:a5:3f:f2:a0:ed:5d:f3:56:b5:49:8e:bb:
bc:e2:17:e1:dc:b3:c8:57:6e:60:f1:bc:c5:d3:5c:62:6e:02:
87:41:15:44:a2:37:da:7c:88:c4:e4:df:62:20:64:9b:2a:d3:
bb:55:11:e2:b7:95:38:6f:e7:9a:9d:7a:d5:41:c0:1d:3e:1b:
24:bf:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:08:28 2026 by rpki-client