
$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json)
Hash identifier: HzdZpdxxsEa4VzeP3BoC+II0k/XEOmGx4+FZLq+y9L4=
Subject key identifier: 8E:30:FD:06:8C:1B:72:BB:80:8B:DC:82:56:CB:0D:07:D2:72:94:A9
Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Certificate serial: 0283
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
Manifest number: 0277
Signing time: Tue 07 Jul 2026 02:49:10 +0000
Manifest this update: Tue 07 Jul 2026 02:49:09 +0000
Manifest next update: Tue 14 Jul 2026 02:49:09 +0000
Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: sTg+HbUrcl7/1rYsRkrkEDdq96lcCXiOFbCe29zb1lY=)
2: B6522520CA6311F09583DE23C4F9AE02.roa (hash: BLKJYKfre7LAbOlIyN9gi1hwCec2KGQoAxw2GSxc1Lk=)
3: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: zE41WQieGtPZ6uprujzngfIRBwGKIWd50MUZOTimbRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 02:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 643 (0x283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Validity
Not Before: Jul 7 02:49:09 2026 GMT
Not After : Jul 14 02:49:09 2026 GMT
Subject: CN=6a4c6926-f8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:df:8b:94:09:3b:22:5d:56:43:eb:f1:d2:
15:53:d4:c2:7e:04:99:ba:75:5b:10:ba:7e:3e:e7:
20:8f:43:78:4d:3c:72:5b:a9:62:5c:a4:3d:34:08:
6d:21:b4:6b:f3:ef:0f:2a:30:8d:e6:0f:3d:32:a4:
d9:46:e9:53:ea:c7:fa:96:6c:c5:f4:df:7b:cd:9c:
de:a0:26:96:72:70:74:dc:9a:c4:35:8b:8c:90:3b:
9a:bd:84:0c:8d:e6:97:e8:ea:cc:28:88:7b:1d:64:
8d:1f:e1:79:5a:27:fe:80:38:6f:24:94:56:47:fd:
42:47:1b:30:ad:f2:bc:f8:d2:1c:bb:a1:dc:40:bd:
b8:98:16:5f:76:60:02:d0:17:b1:aa:6c:77:85:02:
35:6a:1e:03:c4:c0:40:95:e2:a4:39:4d:4b:06:ba:
0a:78:5a:5e:c1:b7:28:45:95:8a:15:cb:66:6b:a3:
90:70:f6:ef:f3:43:79:02:12:08:f4:b7:46:27:0b:
20:23:a3:33:aa:d5:d4:4c:c3:4d:04:9d:90:43:21:
ab:83:5b:e5:2d:f6:d0:31:52:b2:d0:d8:45:de:5c:
7f:89:e6:06:25:5f:52:bb:c4:c9:56:6f:91:77:ef:
e9:83:a6:8b:e7:f3:99:3e:cf:ff:43:b1:6a:a0:ba:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:30:FD:06:8C:1B:72:BB:80:8B:DC:82:56:CB:0D:07:D2:72:94:A9
X509v3 Authority Key Identifier:
keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:24:4c:23:e7:78:8a:d7:d4:2d:47:d3:11:7a:23:38:e4:59:
a8:9b:cf:68:7a:f8:53:55:09:b0:47:1e:df:cc:fd:74:9a:92:
90:c8:2e:27:50:cb:b5:00:c6:68:a6:56:c9:89:0e:42:bd:a2:
aa:be:bd:b3:d9:8e:e4:c7:e9:16:d2:6f:a5:4b:7e:f1:0f:f3:
4b:9f:84:37:75:36:6a:2a:7e:bc:52:9d:b0:ff:44:28:95:a3:
f5:14:da:3b:4f:5c:05:66:1c:a8:de:2f:5e:40:10:78:07:c4:
fc:31:5b:ec:80:58:a6:03:f4:5a:49:d3:8a:83:9d:d1:1b:e7:
5c:bb:77:9c:f8:e1:ea:40:2e:69:2f:7e:30:12:b7:2c:14:4e:
cf:69:a1:11:ce:d1:b0:b4:f7:60:07:08:10:a7:ee:fa:9e:d4:
50:90:7f:1b:fd:a6:78:86:28:49:66:d6:2f:5c:a2:ff:e2:ad:
e1:c3:91:41:5a:a9:44:1f:b3:8e:e4:00:79:e5:20:42:2e:8b:
ea:fd:51:16:cc:5f:ed:1a:90:68:b1:4b:11:85:6c:f5:84:63:
55:6e:e8:2e:07:56:de:c5:9c:8e:51:b4:cf:8d:e7:82:02:03:
ac:dc:3b:48:f0:84:f7:a8:30:e9:ad:a5:27:ae:06:45:5f:b0:
1d:ee:2e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:44:20 2026 by rpki-client