
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json)
Hash identifier: xLjUlveOmErFl6gBkVRI0wuGRlqcr/g68E1l7sZdW4E=
Subject key identifier: 73:78:21:78:CD:FF:8C:E5:D2:2F:67:D8:D8:36:6A:30:7C:81:D7:D7
Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Certificate serial: 02B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
Manifest number: 02A6
Signing time: Wed 07 Oct 2026 01:58:28 +0000
Manifest this update: Wed 07 Oct 2026 01:58:28 +0000
Manifest next update: Wed 14 Oct 2026 01:58:28 +0000
Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: MGvoR2TqRABZmfzRQTWk92uSFmHFcYV8FI65Caizj1o=)
2: B6522520CA6311F09583DE23C4F9AE02.roa (hash: BLKJYKfre7LAbOlIyN9gi1hwCec2KGQoAxw2GSxc1Lk=)
3: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: zE41WQieGtPZ6uprujzngfIRBwGKIWd50MUZOTimbRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690 (0x2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Validity
Not Before: Oct 7 01:58:28 2026 GMT
Not After : Oct 14 01:58:28 2026 GMT
Subject: CN=6ac5a744-fc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:70:c1:c1:a6:bc:c0:03:b3:3b:85:c8:0b:
30:af:61:3f:83:96:7d:94:1e:cc:ff:e8:ac:55:44:
ad:1a:59:95:f0:6a:3e:d1:45:6e:e1:25:55:f1:d5:
dd:e9:7b:53:1a:c4:6c:df:9b:c4:db:4d:c0:4c:24:
2f:31:12:9c:38:b5:d0:12:5c:65:df:3c:fc:64:75:
64:4f:de:e0:f9:17:47:08:b9:fa:f3:25:08:27:28:
3a:fa:90:72:ee:f0:93:ca:33:f8:0a:70:a8:a9:e4:
1f:25:08:11:cf:30:2e:12:ba:87:f6:36:9c:f5:55:
15:1e:05:6c:7c:e5:5c:14:68:94:16:73:bb:1a:62:
0d:13:d6:21:8e:55:7f:9d:18:08:36:0e:b9:30:73:
88:8e:06:11:72:f0:c8:e0:9f:91:32:13:2a:38:a6:
92:7b:b6:c9:db:55:22:87:99:8c:8e:77:90:b6:a2:
20:68:21:e5:b1:fa:de:02:8b:6d:6d:bd:20:cc:58:
6a:76:c6:77:c0:60:59:06:e2:5e:4f:f9:a8:fc:9c:
50:09:c1:cc:cb:45:0a:c3:a6:d1:15:60:52:7b:06:
96:57:d0:b4:00:ca:97:70:cd:f9:49:6e:48:a5:03:
1e:72:16:e0:fc:1f:95:29:5a:7d:53:8e:8b:a3:bb:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:78:21:78:CD:FF:8C:E5:D2:2F:67:D8:D8:36:6A:30:7C:81:D7:D7
X509v3 Authority Key Identifier:
keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:f0:85:f3:11:55:32:07:c8:66:60:43:c0:7a:c6:b5:11:1c:
ac:c0:4c:f6:92:8b:b4:d6:e4:c3:db:65:a4:17:43:a8:90:0d:
01:5d:19:8e:2e:60:73:c7:28:9e:23:0b:ed:9f:3b:42:c3:c9:
15:c5:e3:32:ec:9f:aa:fc:2f:e2:6f:28:f2:a9:90:18:6f:da:
69:95:d7:ea:e7:de:06:f8:78:8f:df:49:b7:0f:b2:0c:c2:16:
b0:28:53:8f:14:c2:6a:d4:21:c1:8f:7e:48:89:1e:ad:78:bd:
f4:38:9f:5f:3a:22:9c:1a:13:70:d0:dd:6a:e8:f9:7b:73:0e:
b3:04:90:df:3f:7a:1a:f3:92:12:d1:38:5d:0a:34:f4:28:f3:
cd:99:da:1d:97:98:5f:d0:f8:35:2f:06:c1:42:ce:47:c0:68:
12:81:43:d5:19:e7:3e:a5:b9:2b:24:ef:b8:ed:ea:00:aa:f0:
8c:3b:b3:ae:54:5c:9f:01:7e:46:25:17:46:33:12:85:de:68:
45:c0:8e:7a:17:7f:5b:dc:bb:ff:30:04:e2:c3:77:dd:48:ce:
b3:ff:5e:b4:23:99:04:de:fd:58:49:cc:99:a3:69:7e:4e:e6:
fa:1d:22:ca:29:a8:21:5b:89:b2:c8:8e:92:06:65:5c:cd:85:
43:29:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 18:22:27 2026 by rpki-client