
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
File: x52oqmnxJno4UemSoGnAL1DoArw.mft (raw, json)
Hash identifier: 4O1nPm3lI9FmsdnjiGZcn5876vWu4hkwN/1m49qe3n8=
Subject key identifier: CF:51:2F:36:A6:24:21:5D:92:FC:01:81:1B:23:9B:E5:E0:67:9D:87
Authority key identifier: C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC
Certificate issuer: /CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
Manifest number: 0201
Signing time: Fri 17 Apr 2026 02:50:22 +0000
Manifest this update: Fri 17 Apr 2026 02:50:22 +0000
Manifest next update: Fri 24 Apr 2026 02:50:22 +0000
Files and hashes: 1: x52oqmnxJno4UemSoGnAL1DoArw.crl (hash: JU/z2EjoUmyBJXrP0D4euz3z4LmNKbII2UrdaB1VWY0=)
2: 0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa (hash: NZR7cop8QVWqUsDBeZWfV0zvXiChucbzAQ2g4pUVe3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl
rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC524, serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
Validity
Not Before: Apr 17 02:50:22 2026 GMT
Not After : Apr 24 02:50:22 2026 GMT
Subject: CN=69e19fee-db6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:71:15:0e:e6:30:d8:ff:c7:ca:fd:f6:cb:
68:80:ff:06:66:9f:96:f5:43:33:47:05:b7:d0:52:
a0:60:ce:7c:a9:1d:12:e6:df:4c:2a:ea:75:b2:a9:
40:07:83:7d:d1:74:05:a8:b1:8c:4e:88:e5:9d:a3:
c3:d2:67:40:98:b4:ff:52:49:fc:6c:96:19:c2:8b:
fa:78:45:4c:02:3c:cf:00:a8:51:33:2c:69:52:34:
47:2f:6e:98:14:87:8a:e8:7c:9c:26:4a:fc:fd:ed:
03:ae:bb:e0:c3:80:df:67:05:ae:c0:3b:36:e6:18:
5f:31:63:e6:af:fb:c4:7e:17:0f:8d:55:0b:35:73:
36:4e:ad:03:6d:6d:53:cb:74:b4:23:7f:0f:5e:2c:
af:64:20:d4:85:62:a2:aa:c8:27:31:ac:0e:f8:94:
66:68:95:eb:c9:56:9c:a8:eb:fa:c4:65:8c:fd:8f:
8e:b9:82:42:a6:cb:b7:3a:0f:9b:94:38:12:3c:71:
5b:62:e7:c3:c9:51:14:63:52:ab:cb:f8:ee:7b:6b:
20:94:53:2c:59:08:f7:e1:7e:98:7e:d5:f3:ca:4c:
ea:10:b5:3a:85:fb:b0:80:c0:fe:0e:9c:c4:29:3d:
f3:ee:e1:f9:32:f1:68:6d:54:50:b0:fb:71:34:78:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:51:2F:36:A6:24:21:5D:92:FC:01:81:1B:23:9B:E5:E0:67:9D:87
X509v3 Authority Key Identifier:
keyid:C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e6:b5:ab:66:05:94:2a:94:28:97:95:e2:43:26:13:d8:27:
f1:a3:b0:de:ee:13:e0:0b:44:97:e9:63:70:88:d0:cf:6e:ae:
68:93:07:d2:ed:38:cb:93:2c:31:28:d0:88:8e:19:54:c1:2f:
27:90:c0:70:56:d6:3a:47:87:41:f2:86:ae:ab:5a:17:cc:e5:
eb:10:00:64:a4:07:3b:20:fb:8b:27:41:7b:9d:b6:ff:18:ae:
7b:4b:68:28:a8:35:a0:67:1c:e5:ed:44:b5:49:23:1f:fa:cd:
58:43:57:50:8d:84:84:32:39:29:e3:1d:5d:90:3c:84:fd:43:
66:fd:8a:cc:01:47:8f:28:af:fe:10:2d:71:d4:11:a0:a7:c3:
ea:4e:0a:99:35:3b:1c:0f:63:23:19:47:75:44:0c:98:9d:bc:
ac:39:21:11:ae:77:6d:e3:b2:4c:79:7b:58:5c:8b:ac:4f:0d:
40:47:89:e4:4f:b3:17:e4:b1:fd:9f:e9:f6:a5:68:08:b4:1a:
8b:11:14:40:2e:e0:95:c2:b4:e8:c1:82:30:ad:76:6f:49:e1:
21:e3:0c:eb:65:8f:55:fb:77:cb:1b:f3:d5:48:dd:98:26:46:
54:de:76:40:a8:e5:74:7e:0d:03:cc:b7:be:99:55:d4:d7:04:
2b:e4:cb:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM1MjQxMTAvBgNVBAUTKEM3OURBOEFBNjlGMTI2N0EzODUxRTk5MkEwNjlDMDJG
NTBFODAyQkMwHhcNMjYwNDE3MDI1MDIyWhcNMjYwNDI0MDI1MDIyWjAYMRYwFAYD
VQQDEw02OWUxOWZlZS1kYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnHJxFQ7mMNj/x8r99stogP8GZp+W9UMzRwW30FKgYM58qR0S5t9MKup1sqlA
B4N90XQFqLGMTojlnaPD0mdAmLT/Ukn8bJYZwov6eEVMAjzPAKhRMyxpUjRHL26Y
FIeK6HycJkr8/e0Drrvgw4DfZwWuwDs25hhfMWPmr/vEfhcPjVULNXM2Tq0DbW1T
y3S0I38PXiyvZCDUhWKiqsgnMawO+JRmaJXryVacqOv6xGWM/Y+OuYJCpsu3Og+b
lDgSPHFbYufDyVEUY1Kry/jue2sglFMsWQj34X6YftXzykzqELU6hfuwgMD+DpzE
KT3z7uH5MvFobVRQsPtxNHiJmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM9RLzam
JCFdkvwBgRsjm+XgZ52HMB8GA1UdIwQYMBaAFMedqKpp8SZ6OFHpkqBpwC9Q6AK8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzUyNC9CNUMyQjczNDJD
NTcxMUVFQkIxODg2MjlDNEY5QUUwMi94NTJvcW1ueEpubzRVZW1Tb0duQUwxRG9B
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g1Mm9xbW54Sm5vNFVlbVNvR25BTDFEb0Fydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzUyNC9CNUMyQjczNDJDNTcxMUVFQkIxODg2MjlDNEY5QUUwMi94NTJvcW1ueEpu
bzRVZW1Tb0duQUwxRG9BcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqua1q2YFlCqUKJeV4kMmE9gn8aOw3u4T4AtEl+ljcIjQz26uaJMH0u04y5Ms
MSjQiI4ZVMEvJ5DAcFbWOkeHQfKGrqtaF8zl6xAAZKQHOyD7iydBe522/xiue0to
KKg1oGcc5e1EtUkjH/rNWENXUI2EhDI5KeMdXZA8hP1DZv2KzAFHjyiv/hAtcdQR
oKfD6k4KmTU7HA9jIxlHdUQMmJ28rDkhEa53beOyTHl7WFyLrE8NQEeJ5E+zF+Sx
/Z/p9qVoCLQaixEUQC7glcK06MGCMK12b0nhIeMM62WPVft3yxvz1UjdmCZGVN52
QKjldH4NA8y3vplV1NcEK+TL8A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:33:32 2026 by rpki-client