
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json)
Hash identifier: TjlJTfdkJt5bIFyjxpJIVwWvZDNUxIcncofsYsk60yY=
Subject key identifier: A7:80:A6:4C:C1:44:78:70:F7:F1:29:82:73:90:54:C2:56:BA:E9:EC
Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Certificate serial: 02AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
Manifest number: 02A0
Signing time: Fri 25 Sep 2026 01:39:28 +0000
Manifest this update: Fri 25 Sep 2026 01:39:27 +0000
Manifest next update: Fri 02 Oct 2026 01:39:27 +0000
Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: 9Trbk5uB31TbMx12doZRgwiS1T2q34eWJ7Fou2L/vm4=)
2: B6522520CA6311F09583DE23C4F9AE02.roa (hash: BLKJYKfre7LAbOlIyN9gi1hwCec2KGQoAxw2GSxc1Lk=)
3: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: zE41WQieGtPZ6uprujzngfIRBwGKIWd50MUZOTimbRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Validity
Not Before: Sep 25 01:39:27 2026 GMT
Not After : Oct 2 01:39:27 2026 GMT
Subject: CN=6ab5d0d0-975f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:4d:af:12:6b:d3:84:f4:a2:55:35:41:9a:
bc:ab:56:82:6d:e6:32:96:df:c1:64:21:7f:26:2e:
ab:f1:0d:41:47:78:e5:1a:0e:fd:50:de:4f:f3:30:
0b:c2:38:2a:96:9e:bf:71:37:dd:43:89:08:81:fd:
ed:2f:66:14:da:a0:e7:0f:d0:11:dd:1a:97:bb:8c:
cc:7d:72:44:3f:25:87:5f:2e:94:4e:72:e7:bb:c2:
21:7a:f2:dd:27:23:b4:7f:1a:87:6c:5b:81:3e:ed:
e3:ff:1f:7c:a7:ec:11:d5:57:0d:c1:1d:66:bb:e7:
e0:62:28:f0:42:84:fe:9e:c4:68:ee:a5:73:ff:15:
44:5f:e0:61:f6:c3:f2:67:50:3d:b8:6f:13:65:bc:
52:91:05:95:39:69:9d:3f:7f:ec:ce:7c:df:16:23:
8c:b9:04:87:13:49:17:45:5c:97:bd:87:48:d4:fc:
e9:d6:ca:ec:1d:c4:8b:90:f5:ed:bb:d6:a6:15:64:
ad:7f:d6:c4:19:e0:4b:b7:80:09:4b:cc:9d:47:60:
a7:e6:7e:33:65:0f:14:ef:a4:95:57:31:6b:be:eb:
8f:9d:24:ab:69:e1:51:c6:1a:79:8a:c7:b3:e6:86:
a9:ca:e2:da:7e:55:d8:87:59:56:e0:66:d5:11:8c:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:80:A6:4C:C1:44:78:70:F7:F1:29:82:73:90:54:C2:56:BA:E9:EC
X509v3 Authority Key Identifier:
keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:f5:e5:99:8a:92:17:3d:d9:79:65:b8:3d:54:49:30:e8:57:
52:7c:d4:cf:58:b8:91:bb:25:4a:67:3c:f6:a5:82:17:c3:40:
83:51:79:61:a2:9e:5c:c3:a0:76:81:82:6b:bf:27:4e:93:43:
d8:89:04:ee:eb:27:fa:db:f6:9f:d2:a3:41:58:eb:0c:9c:f0:
cf:04:72:3c:ca:d2:b3:0d:35:9c:54:a1:19:08:fc:18:55:e1:
47:57:ab:46:45:b0:87:8a:78:10:79:b1:d0:79:f4:44:38:4b:
14:43:cd:51:4e:df:39:9b:bc:e6:d0:c9:92:07:ff:a8:34:f8:
f9:da:85:0f:78:89:a9:f2:de:8d:64:a1:ad:68:40:9c:65:4d:
40:af:6a:e0:c5:b8:a8:bc:8a:39:28:b4:0b:31:4c:29:5f:4b:
e6:4a:cb:d1:e4:17:f6:07:cb:9c:2b:dd:71:42:70:0a:8e:aa:
41:84:91:c0:b1:8e:e2:64:0f:f8:f4:52:d9:8b:58:c8:65:24:
27:40:18:3a:d7:86:6e:8d:e2:cd:60:17:71:43:36:0b:66:5b:
5a:e5:72:14:ea:8e:a5:e2:cf:53:a2:56:ad:19:d6:74:03:d5:
fc:1d:49:94:a7:72:dd:d5:cc:e8:f5:1f:62:27:f9:36:02:a2:
0a:2b:d7:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2
RDJEMDkwRUIwHhcNMjYwOTI1MDEzOTI3WhcNMjYxMDAyMDEzOTI3WjAYMRYwFAYD
VQQDEw02YWI1ZDBkMC05NzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqtRNrxJr04T0olU1QZq8q1aCbeYylt/BZCF/Ji6r8Q1BR3jlGg79UN5P8zAL
wjgqlp6/cTfdQ4kIgf3tL2YU2qDnD9AR3RqXu4zMfXJEPyWHXy6UTnLnu8IhevLd
JyO0fxqHbFuBPu3j/x98p+wR1VcNwR1mu+fgYijwQoT+nsRo7qVz/xVEX+Bh9sPy
Z1A9uG8TZbxSkQWVOWmdP3/sznzfFiOMuQSHE0kXRVyXvYdI1Pzp1srsHcSLkPXt
u9amFWStf9bEGeBLt4AJS8ydR2Cn5n4zZQ8U76SVVzFrvuuPnSSraeFRxhp5isez
5oapyuLaflXYh1lW4GbVEYxe6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKeApkzB
RHhw9/EpgnOQVMJWuunsMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4
QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr
T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3
Z21iNXRER0FTb3h0TFFrT3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJfXlmYqSFz3ZeWW4PVRJMOhXUnzUz1i4kbslSmc89qWCF8NAg1F5YaKeXMOg
doGCa78nTpND2IkE7usn+tv2n9KjQVjrDJzwzwRyPMrSsw01nFShGQj8GFXhR1er
RkWwh4p4EHmx0Hn0RDhLFEPNUU7fOZu85tDJkgf/qDT4+dqFD3iJqfLejWShrWhA
nGVNQK9q4MW4qLyKOSi0CzFMKV9L5krL0eQX9gfLnCvdcUJwCo6qQYSRwLGO4mQP
+PRS2YtYyGUkJ0AYOteGbo3izWAXcUM2C2ZbWuVyFOqOpeLPU6JWrRnWdAPV/B1J
lKdy3dXM6PUfYif5NgKiCivXmA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:03:25 2026 by rpki-client