
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
File: x52oqmnxJno4UemSoGnAL1DoArw.mft (raw, json)
Hash identifier: 1gzPgSWPq6AcDNX05nnnP0f/psp5HXPVEy6HBWruGac=
Subject key identifier: 03:86:C4:CF:FC:70:0A:65:64:F5:1E:AE:B6:BF:95:74:CD:3A:4E:F9
Authority key identifier: C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC
Certificate issuer: /CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
Manifest number: 0222
Signing time: Tue 23 Jun 2026 02:55:14 +0000
Manifest this update: Tue 23 Jun 2026 02:55:14 +0000
Manifest next update: Tue 30 Jun 2026 02:55:14 +0000
Files and hashes: 1: x52oqmnxJno4UemSoGnAL1DoArw.crl (hash: j0uFNzMrgsWn+ATUTqbIwWJCczCQgBCGmwpU9jDVs4w=)
2: 0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa (hash: NZR7cop8QVWqUsDBeZWfV0zvXiChucbzAQ2g4pUVe3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl
rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 02:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC524, serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
Validity
Not Before: Jun 23 02:55:14 2026 GMT
Not After : Jun 30 02:55:14 2026 GMT
Subject: CN=6a39f592-095d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3f:51:0b:4f:c1:2a:98:f9:2a:ff:4a:61:1f:
2f:00:2d:31:54:c1:01:7d:b7:72:07:13:76:ce:c4:
ce:3b:fb:a8:38:34:53:c6:ad:c0:89:24:34:4d:e8:
c7:b8:4e:0e:ae:97:94:90:f3:8f:d4:24:24:b9:24:
f1:a7:47:61:48:39:fc:93:4e:e1:88:7b:9e:ba:2b:
cf:d2:da:2d:58:3e:de:f6:b8:4b:a1:65:10:1a:88:
d0:77:f4:ed:cb:b6:75:01:a3:3e:35:d6:59:c1:8b:
ae:3a:a2:6c:30:24:44:97:64:83:35:a1:4e:cf:28:
39:45:29:e0:54:fb:8c:98:39:2e:9b:3d:ff:19:f2:
4a:82:37:0c:ab:6e:39:3a:c7:a0:3e:96:0c:16:2d:
48:5f:83:de:b9:0b:ff:25:62:51:86:d1:02:bf:90:
6e:be:61:24:6f:e5:a2:94:48:7f:07:c0:0b:64:66:
0e:f9:99:ba:91:3a:c9:a2:ac:85:3b:4d:8c:7d:f4:
71:8e:3a:b7:92:b6:34:84:c4:7f:79:7c:18:ee:d7:
0f:51:b6:00:d0:30:b9:cd:b4:2d:d0:bf:0b:78:c3:
3c:28:a6:2c:24:99:79:0d:0c:5f:28:2d:99:50:99:
61:94:4e:df:4e:4e:7d:43:fa:8f:54:b6:89:bd:bb:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:86:C4:CF:FC:70:0A:65:64:F5:1E:AE:B6:BF:95:74:CD:3A:4E:F9
X509v3 Authority Key Identifier:
keyid:C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d5:81:81:5b:77:72:1f:25:71:98:8f:eb:90:59:98:b4:a5:
46:93:af:bf:1c:51:97:39:a7:71:a6:e1:12:4e:35:9f:70:7f:
f5:dc:97:4b:95:5b:5d:73:04:46:44:b0:8b:f7:98:4a:3b:ce:
ea:20:6e:df:46:5f:8a:39:21:0d:b7:5f:d1:0b:11:4c:55:b7:
68:4c:60:fa:b8:39:e6:fa:16:05:d1:3b:fc:76:03:e0:d8:7f:
3f:58:85:7a:31:36:3f:cd:b2:21:86:e1:ea:9c:e4:ff:15:25:
ea:1a:f6:47:a9:d9:83:9b:6c:29:07:b4:d7:a7:7e:1d:7b:e4:
1f:6f:ee:55:a4:b6:2e:7a:57:a8:24:5e:71:39:64:fc:77:1d:
94:1e:0a:90:26:87:29:e9:c8:28:88:6d:b8:6a:5f:c1:b9:fe:
87:91:7f:ac:42:1f:32:a8:07:1b:1d:6f:6c:ab:57:a6:e8:77:
2f:d7:54:f4:e6:01:ad:36:be:4d:99:81:d9:40:fa:2b:05:46:
cb:c9:1e:e3:4c:b8:1a:c5:37:70:7a:75:73:f8:38:fc:ec:62:
03:e0:9d:b7:6d:f9:ec:38:f1:0e:87:90:ec:58:cb:96:e9:9a:
eb:0b:1d:46:b2:22:28:94:c7:22:d0:cc:e7:d0:58:1c:3e:eb:
be:03:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:16 2026 by rpki-client