
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
File: MIoPBCNx10Tky2KrUekE9wys03o.mft (raw, json)
Hash identifier: tYb58uKQsQVVEby3W2SiWrxWEeoGn0HLdNwoTxaZowM=
Subject key identifier: 08:30:A8:A4:11:9E:D3:CE:88:58:9F:4A:77:56:9B:1A:89:63:E4:0B
Authority key identifier: 30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A
Certificate issuer: /CN=A91B2252/serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A
Certificate serial: 087E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
Manifest number: 0871
Signing time: Thu 16 Apr 2026 20:35:52 +0000
Manifest this update: Thu 16 Apr 2026 20:35:52 +0000
Manifest next update: Thu 23 Apr 2026 20:35:52 +0000
Files and hashes: 1: MIoPBCNx10Tky2KrUekE9wys03o.crl (hash: gfMVmOnmUfezbA/ef12YaXlSN/Hteo+w3GTbcpNa8Xk=)
2: 727EECD2678811EF99602F53C4F9AE02.roa (hash: 6TAMqIs4qomSbsapyEUsBhiHgXRJjHfMLf5Z2Vrii0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl
rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174 (0x87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2252, serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A
Validity
Not Before: Apr 16 20:35:52 2026 GMT
Not After : Apr 23 20:35:52 2026 GMT
Subject: CN=69e14828-6360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:68:2c:eb:d6:78:45:30:7f:7c:80:0c:d6:
82:21:85:09:b3:82:e9:8a:c5:a0:33:d1:9f:95:a0:
c7:d3:76:37:d4:d9:bc:f8:78:c2:28:5a:9b:85:7f:
e9:12:ca:1a:91:cd:53:7c:0e:15:c8:9b:9f:39:f2:
6e:a8:4d:4e:ab:ab:83:47:68:dd:0d:43:56:76:3c:
16:d0:b4:bb:f8:19:04:d1:0f:03:bf:79:f0:7c:2e:
6d:34:06:8a:59:0d:cc:c0:4a:b6:4a:ec:09:57:41:
a7:62:ad:8a:72:1d:18:2f:fc:27:2c:be:90:65:fb:
07:12:fa:55:d4:25:5c:00:dc:28:7d:e6:b5:6d:03:
20:21:34:e4:b4:84:ff:8c:7c:e4:5c:5f:7b:8f:a3:
ef:14:84:18:cb:ce:b3:74:ca:db:4b:e6:d4:8c:3a:
aa:61:b3:a7:60:83:ec:5b:49:0f:a6:fa:83:61:22:
0f:10:b2:0c:2c:c4:93:6f:8d:09:3a:55:38:f8:36:
45:e4:ed:6b:7b:40:c3:47:a0:d4:8f:9d:d8:dc:77:
66:1a:15:7c:aa:85:43:1f:39:46:4b:e0:52:94:4b:
d5:2c:fe:be:84:74:18:95:a3:08:db:59:0b:11:b4:
d7:42:4e:55:6e:b5:81:7e:2e:3d:37:cb:40:df:58:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:30:A8:A4:11:9E:D3:CE:88:58:9F:4A:77:56:9B:1A:89:63:E4:0B
X509v3 Authority Key Identifier:
keyid:30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:02:b6:42:93:be:87:46:8b:35:8c:60:94:cd:c6:43:2a:41:
bb:cb:61:36:fd:b9:c7:2f:01:70:06:a1:61:c6:1b:cd:4b:46:
24:9f:65:bf:c0:e0:cd:f4:6b:93:ad:5d:6c:c2:cc:dc:f5:fc:
24:bc:29:b8:5b:b6:17:66:e9:71:68:37:c7:82:c8:55:9c:85:
55:32:07:34:f9:25:91:c2:0d:fd:51:d9:02:23:ea:0c:33:f7:
6a:3d:a7:0e:0c:48:89:68:0a:73:29:d8:be:78:97:79:a8:35:
8c:1c:b7:53:c4:42:61:37:16:e4:df:1b:66:af:dd:04:d0:84:
a1:6c:1d:9e:7f:ee:20:98:bc:81:12:d1:b1:c5:d0:28:ba:2d:
40:0d:36:37:05:43:d2:81:b6:c2:85:90:4e:17:01:bb:0e:0a:
47:16:12:45:b0:57:f3:14:5e:45:4a:f3:6b:6a:ec:58:fc:da:
b3:3e:6e:b6:fb:9d:6c:e2:cd:c8:a6:3b:3f:ea:66:f7:d6:eb:
e5:76:b8:89:ef:e6:44:04:8c:61:75:a1:c7:1c:bd:34:81:fe:
24:a2:32:f2:14:e9:24:26:71:32:a6:3a:1c:87:05:13:14:67:
cc:bd:64:fe:04:2d:e3:f4:72:f4:b9:59:76:dc:79:79:46:1b:
d1:99:5d:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjIyNTIxMTAvBgNVBAUTKDMwOEEwRjA0MjM3MUQ3NDRFNENCNjJBQjUxRTkwNEY3
MENBQ0QzN0EwHhcNMjYwNDE2MjAzNTUyWhcNMjYwNDIzMjAzNTUyWjAYMRYwFAYD
VQQDEw02OWUxNDgyOC02MzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtGhoLOvWeEUwf3yADNaCIYUJs4LpisWgM9GflaDH03Y31Nm8+HjCKFqbhX/p
Esoakc1TfA4VyJufOfJuqE1Oq6uDR2jdDUNWdjwW0LS7+BkE0Q8Dv3nwfC5tNAaK
WQ3MwEq2SuwJV0GnYq2Kch0YL/wnLL6QZfsHEvpV1CVcANwofea1bQMgITTktIT/
jHzkXF97j6PvFIQYy86zdMrbS+bUjDqqYbOnYIPsW0kPpvqDYSIPELIMLMSTb40J
OlU4+DZF5O1re0DDR6DUj53Y3HdmGhV8qoVDHzlGS+BSlEvVLP6+hHQYlaMI21kL
EbTXQk5VbrWBfi49N8tA31hvMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAgwqKQR
ntPOiFifSndWmxqJY+QLMB8GA1UdIwQYMBaAFDCKDwQjcddE5Mtiq1HpBPcMrNN6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjI1Mi9DNThGOEI3QUY2
M0ExMUVBQjcwQTM2MUZDNEY5QUUwMi9NSW9QQkNOeDEwVGt5MktyVWVrRTl3eXMw
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01Jb1BCQ054MTBUa3kyS3JVZWtFOXd5czAzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MjI1Mi9DNThGOEI3QUY2M0ExMUVBQjcwQTM2MUZDNEY5QUUwMi9NSW9QQkNOeDEw
VGt5MktyVWVrRTl3eXMwM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEAK2QpO+h0aLNYxglM3GQypBu8thNv25xy8BcAahYcYbzUtGJJ9lv8DgzfRr
k61dbMLM3PX8JLwpuFu2F2bpcWg3x4LIVZyFVTIHNPklkcIN/VHZAiPqDDP3aj2n
DgxIiWgKcynYvniXeag1jBy3U8RCYTcW5N8bZq/dBNCEoWwdnn/uIJi8gRLRscXQ
KLotQA02NwVD0oG2woWQThcBuw4KRxYSRbBX8xReRUrza2rsWPzasz5utvudbOLN
yKY7P+pm99br5Xa4ie/mRASMYXWhxxy9NIH+JKIy8hTpJCZxMqY6HIcFExRnzL1k
/gQt4/Ry9LlZdtx5eUYb0Zldaw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:53:36 2026 by rpki-client