
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json)
Hash identifier: XkpU4f5FdjLEYRqOfsRUX+rs8oFexA+Gl5Ndwfb9kxU=
Subject key identifier: AC:B4:BC:E2:22:C0:6A:1B:D1:9E:D4:F7:E2:CA:C6:D6:36:61:7D:9F
Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Certificate serial: 02A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
Manifest number: 029D
Signing time: Sat 19 Sep 2026 01:43:32 +0000
Manifest this update: Sat 19 Sep 2026 01:43:31 +0000
Manifest next update: Sat 26 Sep 2026 01:43:31 +0000
Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: uSeKr38vx+v4xIoxYVcLt7/2Dm7v3JEGmQAycqYEVCs=)
2: B6522520CA6311F09583DE23C4F9AE02.roa (hash: BLKJYKfre7LAbOlIyN9gi1hwCec2KGQoAxw2GSxc1Lk=)
3: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: zE41WQieGtPZ6uprujzngfIRBwGKIWd50MUZOTimbRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681 (0x2a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Validity
Not Before: Sep 19 01:43:31 2026 GMT
Not After : Sep 26 01:43:31 2026 GMT
Subject: CN=6aade8c4-9fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:f1:ff:6d:4e:1a:a8:a7:83:53:2a:28:a3:
c0:b8:ad:f9:3e:08:48:4b:cf:ba:b2:21:a7:7b:b4:
a5:dd:32:a6:08:6f:24:b3:2b:56:b7:7c:88:cc:2b:
df:88:ec:e5:3b:aa:7b:d1:49:94:0e:fa:85:0d:7d:
70:5b:81:1a:78:9c:dc:8b:ad:5b:ac:e0:ab:97:54:
bf:98:9a:dd:13:75:91:d4:6e:41:bc:ce:3a:c5:73:
19:a8:d2:be:a9:3c:4b:f9:0e:00:7f:7a:c5:1d:a6:
50:5c:1d:69:11:5e:e5:01:e9:22:c6:c0:e4:74:d4:
de:af:b0:5d:20:02:6d:a7:9d:c1:ae:1d:55:86:3d:
d3:07:46:b6:88:28:8e:ad:00:08:50:bd:6b:21:07:
6f:85:3c:55:8a:a2:25:02:f1:56:78:16:35:3d:8d:
0e:3b:9d:e4:74:8d:3e:7d:9e:7c:be:93:ec:51:e8:
e7:13:68:a3:82:be:20:7b:a5:29:4c:84:0e:f5:f0:
79:ba:c0:1e:64:d6:03:95:f0:74:12:08:b2:8f:b1:
91:ce:11:cd:7c:a9:28:6f:b8:05:4e:3d:ab:90:28:
44:13:3d:25:47:34:6e:76:72:32:46:35:a9:a7:83:
aa:de:99:34:1b:44:39:9d:b4:3f:ab:eb:85:4a:65:
9a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B4:BC:E2:22:C0:6A:1B:D1:9E:D4:F7:E2:CA:C6:D6:36:61:7D:9F
X509v3 Authority Key Identifier:
keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:0a:fa:16:08:2f:06:0e:67:04:22:de:6b:c7:2b:da:d2:6e:
e7:56:8c:23:a5:d4:e5:e8:43:8a:1a:93:96:a5:15:84:70:13:
9c:9e:5e:b5:74:3b:59:71:1f:45:73:5a:c2:1a:3e:2b:ea:c8:
e2:98:cf:ca:c6:9d:b2:2b:ce:81:e1:56:0b:ca:05:b1:55:bb:
df:5f:6c:7f:a3:1f:10:f3:f9:0c:67:5e:2b:81:fb:3c:b8:fd:
17:d9:fe:95:48:ab:39:d9:5f:dc:45:14:9e:8f:da:90:55:55:
cd:e5:e8:9e:5b:fa:e9:64:a1:fb:1e:86:fe:af:57:62:72:fe:
ab:18:9f:ed:e9:7a:e8:c8:84:8c:b3:25:31:23:57:d8:13:fe:
05:23:96:68:0e:82:b8:2d:c5:a0:af:51:8c:09:17:66:6d:d7:
e4:8e:20:69:5b:5f:7f:86:3d:4f:f6:59:14:bf:cf:35:9d:8d:
ee:f2:f7:f5:ca:50:42:cb:a1:83:c8:ec:00:8d:c7:a9:9b:71:
44:c2:00:4b:ec:5c:fa:a7:0a:77:3d:85:54:89:37:11:20:50:
a1:78:c8:24:e8:e2:bb:e1:7e:92:b1:62:84:e3:fe:1d:87:33:
ba:4a:ad:e5:f0:5e:49:18:ba:b9:53:c4:cc:df:9a:f2:bf:42:
5a:8d:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:40:52 2026 by rpki-client