
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json)
Hash identifier: hwlp8cVEf5sr5kKiSTCeXpDiZi9ECX+MXNI9T72qCeU=
Subject key identifier: 50:34:BC:70:10:BA:A7:00:56:02:D9:9E:F0:29:BD:79:21:4D:F1:51
Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Certificate serial: 02C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
Manifest number: 02BA
Signing time: Sun 15 Nov 2026 01:31:50 +0000
Manifest this update: Sun 15 Nov 2026 01:31:49 +0000
Manifest next update: Sun 22 Nov 2026 01:31:49 +0000
Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: Xy1zDmIFrl+qHoiWmW0rKjEl21eOLdWax+YEaJ6F+oQ=)
2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: zE41WQieGtPZ6uprujzngfIRBwGKIWd50MUZOTimbRA=)
3: B6522520CA6311F09583DE23C4F9AE02.roa (hash: BLKJYKfre7LAbOlIyN9gi1hwCec2KGQoAxw2GSxc1Lk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 01:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Validity
Not Before: Nov 15 01:31:49 2026 GMT
Not After : Nov 22 01:31:49 2026 GMT
Subject: CN=6af90b85-bd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:47:d5:49:e8:1f:4f:e4:07:98:5f:45:ac:
02:c6:35:80:8d:cf:8f:1c:fa:f4:03:4f:82:db:b4:
a3:f1:b3:fc:76:8d:91:1b:cc:cd:b1:6a:29:37:c7:
44:ea:fb:71:1b:d2:66:97:1d:16:fd:dc:5b:97:22:
15:a6:ce:32:1c:44:db:f0:29:4f:d8:3d:ee:de:98:
d2:7b:8e:8c:31:4a:c5:fc:ac:a9:42:77:20:79:51:
8a:e3:2b:5e:6f:e9:54:19:a6:b1:69:22:c1:13:a8:
92:92:98:3c:38:96:ac:ff:9c:d6:91:8c:00:0f:f4:
3b:46:82:6a:06:b3:be:9c:67:09:c3:8b:38:ca:ba:
d2:78:c0:a3:25:51:cc:77:2b:9f:58:ef:8e:3b:1b:
32:4f:20:d0:c8:b2:85:33:ad:a9:74:44:79:63:5e:
f7:ee:ed:a0:45:f2:a6:29:10:2a:48:de:bb:0e:ff:
46:3c:d9:23:aa:76:5e:3c:d7:c8:32:8f:b7:55:89:
c1:f2:db:c1:4c:98:03:05:5a:f2:38:c9:47:11:01:
23:10:c4:25:43:b3:f2:5b:7f:8a:23:eb:00:09:82:
88:d9:53:46:7c:e6:85:4c:a2:8b:46:68:86:99:b2:
c2:fa:e4:90:ac:35:9d:a6:5c:58:52:5c:c9:ce:40:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:34:BC:70:10:BA:A7:00:56:02:D9:9E:F0:29:BD:79:21:4D:F1:51
X509v3 Authority Key Identifier:
keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:f6:0f:b3:e9:d9:3a:c7:f1:98:de:75:16:f5:72:ee:c4:2a:
98:3b:0d:99:cf:82:16:17:02:c9:bc:5e:ba:be:35:1b:77:3f:
1d:a6:42:1f:6b:ee:ff:88:2f:96:b1:6d:60:41:fc:fe:f6:42:
4f:85:90:2c:ed:b7:5b:b6:1d:c9:1f:dd:dc:bc:11:44:5d:7f:
08:11:21:9e:10:03:77:6b:9e:b4:8f:bc:9d:94:07:de:28:75:
17:0a:61:3c:90:63:cf:02:e7:a1:19:61:95:e2:36:0e:78:1f:
6f:29:4c:a5:52:c1:ff:fd:28:1a:81:5b:29:bd:91:7f:22:05:
3b:93:af:f1:1f:11:f1:67:53:78:a3:3a:8d:3d:17:37:38:45:
af:fa:56:70:bf:4b:33:5b:41:e0:ff:fd:c1:e6:6e:15:3c:8a:
47:f4:7a:36:e0:11:ed:1b:69:5a:76:84:dc:f5:ba:12:89:35:
77:f9:2d:cc:ef:08:55:a7:a1:73:44:88:26:e9:23:c3:25:bd:
4f:d0:ad:13:86:04:5c:9e:92:17:65:25:46:b3:c7:6f:e0:03:
ac:de:57:14:c0:0e:83:bd:a9:17:eb:a8:b3:30:11:73:7e:b7:
87:e1:c2:4e:11:b7:f4:8a:e6:5a:14:1f:04:f4:e7:29:a7:8a:
a9:7a:5a:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2
RDJEMDkwRUIwHhcNMjYxMTE1MDEzMTQ5WhcNMjYxMTIyMDEzMTQ5WjAYMRYwFAYD
VQQDEw02YWY5MGI4NS1iZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9VH1UnoH0/kB5hfRawCxjWAjc+PHPr0A0+C27Sj8bP8do2RG8zNsWopN8dE
6vtxG9Jmlx0W/dxblyIVps4yHETb8ClP2D3u3pjSe46MMUrF/KypQncgeVGK4yte
b+lUGaaxaSLBE6iSkpg8OJas/5zWkYwAD/Q7RoJqBrO+nGcJw4s4yrrSeMCjJVHM
dyufWO+OOxsyTyDQyLKFM62pdER5Y1737u2gRfKmKRAqSN67Dv9GPNkjqnZePNfI
Mo+3VYnB8tvBTJgDBVryOMlHEQEjEMQlQ7PyW3+KI+sACYKI2VNGfOaFTKKLRmiG
mbLC+uSQrDWdplxYUlzJzkD2kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFA0vHAQ
uqcAVgLZnvApvXkhTfFRMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4
QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr
T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3
Z21iNXRER0FTb3h0TFFrT3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA/YPs+nZOsfxmN51FvVy7sQqmDsNmc+CFhcCybxeur41G3c/HaZCH2vu/4gv
lrFtYEH8/vZCT4WQLO23W7YdyR/d3LwRRF1/CBEhnhADd2uetI+8nZQH3ih1Fwph
PJBjzwLnoRlhleI2DngfbylMpVLB//0oGoFbKb2RfyIFO5Ov8R8R8WdTeKM6jT0X
NzhFr/pWcL9LM1tB4P/9weZuFTyKR/R6NuAR7RtpWnaE3PW6Eok1d/ktzO8IVaeh
c0SIJukjwyW9T9CtE4YEXJ6SF2UlRrPHb+ADrN5XFMAOg72pF+uoszARc363h+HC
ThG39IrmWhQfBPTnKaeKqXpa/A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:19 2026 by rpki-client