
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File: u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier: wrM4Gkca2dy1IYa4LKk2GkkgV4tJ+mxgl13TU3JSG2c=
Subject key identifier: 54:B2:6E:96:5F:40:6C:18:A5:31:2C:F2:3D:55:39:47:31:94:6B:BB
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial: 0981
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number: 0963
Signing time: Mon 20 Jul 2026 20:33:47 +0000
Manifest this update: Mon 20 Jul 2026 20:33:46 +0000
Manifest next update: Mon 27 Jul 2026 20:33:46 +0000
Files and hashes: 1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: uFRgB1iV1JQw9JkOfZc6ZjykODLWuM1SatjEP4xiZCg=)
2: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: S1YQDpfRZfYWxWzS0yYZYUtJLVH3RsmKcbHcWJLLIjw=)
3: 6B8789A63FA011F1B60E4CC5BB833773.roa (hash: eUeT9MfyQplwOYsEvB1DK9Ul4fMRh4BuNuH+20Gy/0Q=)
4: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: J5TlVE9TaJMgIGEY3wJEZY2JAbPuoZdGlfLWjr6sNVQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2433 (0x981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Validity
Not Before: Jul 20 20:33:46 2026 GMT
Not After : Jul 27 20:33:46 2026 GMT
Subject: CN=6a5e862a-86a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:da:52:70:a7:10:94:f5:68:af:a3:d3:63:
df:23:6b:96:a7:6b:24:a8:d2:cf:5e:a2:99:bd:9d:
38:cb:fd:cf:53:e0:0f:f4:45:3f:1d:25:ae:9a:6f:
af:a0:7d:8c:d8:e9:05:e9:d6:b7:53:82:bc:af:03:
3d:0a:55:fe:13:19:59:48:f8:21:27:27:30:8d:c4:
38:34:82:f8:f7:06:29:23:f6:87:08:b8:08:f1:f1:
2f:02:f3:32:ce:6a:19:2e:94:d4:bb:5b:c9:57:9f:
fb:1b:9f:0a:52:ee:00:ee:f9:8e:9f:9a:43:67:b5:
d4:a7:70:40:7e:9c:fd:a6:3c:15:4f:cb:d5:e6:fc:
eb:f1:62:28:c9:5e:9f:60:4f:f5:a6:09:42:a8:b1:
f0:f2:f8:d5:b8:93:4f:90:23:4c:b7:58:10:28:9a:
5c:db:c0:60:02:0b:b6:9e:18:60:47:12:6e:0f:90:
de:00:a7:c7:75:42:54:3d:41:91:b4:42:46:1c:f5:
2e:ce:6c:46:7d:15:1a:b7:ee:28:3d:75:60:a0:cd:
f6:fa:28:7e:61:c4:5e:62:43:6e:e6:ba:18:b1:87:
af:09:63:cd:1a:87:7b:0a:2e:0b:77:f6:cb:fc:e8:
90:2f:b3:a0:c9:9a:29:27:14:3d:c1:f8:92:25:74:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B2:6E:96:5F:40:6C:18:A5:31:2C:F2:3D:55:39:47:31:94:6B:BB
X509v3 Authority Key Identifier:
keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:e5:ea:a6:0a:96:72:6f:15:4a:b3:ac:8c:db:1c:d2:38:22:
0b:1f:e5:34:8c:70:46:10:6b:4c:c9:14:a7:8a:8f:3d:5c:d6:
b3:d7:26:1b:a1:7b:63:e2:72:68:c7:3d:82:d6:41:38:2e:8d:
eb:b6:fe:77:05:a1:11:00:11:34:36:da:85:36:75:18:d3:c5:
61:69:bc:59:d0:1a:8e:86:c8:b1:fd:b7:06:34:a6:bd:d4:82:
34:06:2d:a3:56:18:c4:c5:b8:1c:99:c0:40:aa:08:55:cc:72:
fa:ba:6f:4f:ae:41:26:02:b1:33:b4:77:26:b5:e5:77:e7:fb:
09:b6:48:07:f4:8f:36:c5:07:fc:e7:28:03:b6:66:e5:22:f7:
bb:6c:db:8d:c5:e1:c0:e9:28:03:d2:18:81:8c:38:da:bc:9b:
e7:92:c2:2a:3c:fc:3a:c3:b1:4d:8c:2b:7c:69:f1:2d:18:e2:
29:75:86:dc:44:31:f7:6f:f6:a9:85:ac:12:43:1a:a4:67:1e:
9e:f6:96:a2:45:0d:d0:2a:98:a3:71:58:17:49:04:e0:3e:04:
77:ad:f3:7b:cb:6f:11:a4:96:47:bd:eb:8e:87:60:b3:56:a1:
d5:4f:1b:7d:4a:08:5d:68:56:40:de:c8:9b:a7:ef:50:29:85:
cd:e9:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:06 2026 by rpki-client