
$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json)
Hash identifier: KMz2BLw3Op70LqHEhNg5dj0hUC4/MkjWl2An/h/l21g=
Subject key identifier: A0:02:ED:ED:21:5E:67:93:49:89:5C:AF:15:CA:8A:93:FF:1A:39:40
Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Certificate serial: 0267
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
Manifest number: 025B
Signing time: Mon 11 May 2026 02:15:38 +0000
Manifest this update: Mon 11 May 2026 02:15:38 +0000
Manifest next update: Mon 18 May 2026 02:15:38 +0000
Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: LYMqWj2LUMuHpLCO60XA1wqC/awcR1kb1hJ4AysBZGg=)
2: B6522520CA6311F09583DE23C4F9AE02.roa (hash: BLKJYKfre7LAbOlIyN9gi1hwCec2KGQoAxw2GSxc1Lk=)
3: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: zE41WQieGtPZ6uprujzngfIRBwGKIWd50MUZOTimbRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Validity
Not Before: May 11 02:15:38 2026 GMT
Not After : May 18 02:15:38 2026 GMT
Subject: CN=6a013bca-c0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:b4:de:38:8e:7b:b3:f0:f7:aa:e6:94:86:
c2:a1:25:8e:79:3c:6e:fd:c9:b3:bf:19:0f:3a:e6:
ba:ae:75:9d:1d:f9:a1:38:15:3f:ba:4e:c0:d7:d9:
d6:5c:74:b9:ca:44:67:70:22:dd:02:16:b3:0d:f9:
02:96:d8:53:69:50:1a:5d:6f:ff:59:b4:b4:86:5c:
14:9c:0d:5d:71:a2:04:b1:8a:ce:6b:8d:4a:5d:72:
68:ff:59:13:3f:48:0c:b6:94:76:ec:0c:92:19:60:
81:1f:1e:66:0e:d6:b6:05:7a:4c:28:b2:d9:a0:31:
4e:e9:bf:10:80:00:62:97:e1:5f:73:72:c1:5d:71:
fb:07:97:d9:6c:d7:d3:1d:b9:da:6f:1c:02:8e:92:
9a:06:28:89:9d:78:b5:9c:49:5a:35:00:71:9b:49:
0a:55:f1:ad:ed:02:d8:60:bb:16:c4:6b:a2:6a:8e:
2b:ca:2d:2c:34:15:af:74:92:21:b2:05:09:6c:bf:
0c:8e:ea:29:c6:96:d4:e8:61:19:78:7a:e0:ab:21:
27:b6:46:8b:82:29:e2:27:92:36:d5:5d:46:34:20:
58:a5:ad:14:22:19:61:29:4a:d2:d9:72:3b:11:b8:
22:16:b5:f2:62:6f:b0:79:09:5c:76:13:ae:f8:cf:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:02:ED:ED:21:5E:67:93:49:89:5C:AF:15:CA:8A:93:FF:1A:39:40
X509v3 Authority Key Identifier:
keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:44:fc:dc:09:a9:4d:2e:d1:de:7c:d0:82:18:35:48:4e:8a:
e3:eb:5e:65:85:ad:3a:be:b9:31:96:d2:c8:e6:18:41:63:a5:
3a:73:79:33:17:7a:40:02:6c:33:4c:bc:f3:b5:5c:26:d0:e3:
b8:e0:8f:21:27:38:04:07:97:9a:cb:74:81:6a:6c:cb:ff:bf:
02:a9:e8:64:3a:4b:6e:32:63:26:76:41:3a:53:56:79:90:e2:
58:0e:00:5e:72:5f:59:94:7f:04:c4:29:f6:31:0c:86:1b:70:
56:a9:23:29:b1:70:c9:5b:bc:e0:f3:bc:0c:9e:8f:6c:2a:f2:
57:1d:c7:66:3a:1f:71:2b:f6:96:6c:10:85:8c:b0:14:8a:91:
7a:3d:32:78:8e:f3:cb:5f:50:c5:c4:d4:c6:95:89:9a:97:da:
8c:a3:43:c1:08:3e:79:74:88:cd:8e:32:b2:cb:77:17:8a:15:
7a:72:84:05:a5:d4:1f:1a:52:08:bb:7e:35:89:cd:41:d9:3b:
4e:64:c0:19:ac:22:b6:23:da:e7:8f:91:ce:d9:34:2b:14:15:
24:36:62:a9:15:02:e4:07:8a:0e:6c:3b:00:89:c1:0d:d7:1b:
73:ca:ac:f3:89:f1:61:d9:04:97:67:62:d2:fa:f8:81:b8:1b:
45:50:5b:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2
RDJEMDkwRUIwHhcNMjYwNTExMDIxNTM4WhcNMjYwNTE4MDIxNTM4WjAYMRYwFAYD
VQQDEw02YTAxM2JjYS1jMGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwKm03jiOe7Pw96rmlIbCoSWOeTxu/cmzvxkPOua6rnWdHfmhOBU/uk7A19nW
XHS5ykRncCLdAhazDfkClthTaVAaXW//WbS0hlwUnA1dcaIEsYrOa41KXXJo/1kT
P0gMtpR27AySGWCBHx5mDta2BXpMKLLZoDFO6b8QgABil+Ffc3LBXXH7B5fZbNfT
HbnabxwCjpKaBiiJnXi1nElaNQBxm0kKVfGt7QLYYLsWxGuiao4ryi0sNBWvdJIh
sgUJbL8MjuopxpbU6GEZeHrgqyEntkaLginiJ5I21V1GNCBYpa0UIhlhKUrS2XI7
EbgiFrXyYm+weQlcdhOu+M/mMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAC7e0h
XmeTSYlcrxXKipP/GjlAMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4
QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr
T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3
Z21iNXRER0FTb3h0TFFrT3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK0T83AmpTS7R3nzQghg1SE6K4+teZYWtOr65MZbSyOYYQWOlOnN5Mxd6QAJs
M0y887VcJtDjuOCPISc4BAeXmst0gWpsy/+/AqnoZDpLbjJjJnZBOlNWeZDiWA4A
XnJfWZR/BMQp9jEMhhtwVqkjKbFwyVu84PO8DJ6PbCryVx3HZjofcSv2lmwQhYyw
FIqRej0yeI7zy19QxcTUxpWJmpfajKNDwQg+eXSIzY4ysst3F4oVenKEBaXUHxpS
CLt+NYnNQdk7TmTAGawitiPa54+Rztk0KxQVJDZiqRUC5AeKDmw7AInBDdcbc8qs
84nxYdkEl2di0vr4gbgbRVBbZA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:30:50 2026 by rpki-client