
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
File: szF8Z90Vsor6OYAEwZ0deLG_3oY.mft (raw, json)
Hash identifier: JLS0+uwxbHAmbMROHWQFrhvyZv04JpHF9crGmxdqWeM=
Subject key identifier: E3:16:16:5E:C8:5F:7A:E5:F8:7E:0A:7B:D1:62:C1:FE:09:50:87:D7
Authority key identifier: B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86
Certificate issuer: /CN=A91736F5/serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
Manifest number: 8F
Signing time: Sat 03 Oct 2026 08:12:17 +0000
Manifest this update: Sat 03 Oct 2026 08:12:17 +0000
Manifest next update: Sat 10 Oct 2026 08:12:17 +0000
Files and hashes: 1: szF8Z90Vsor6OYAEwZ0deLG_3oY.crl (hash: dNhk3Cn3y1UD6NIdGAJui0mR+G9oakjdzf6UbIvLjF8=)
2: DF325558E6EE11F09FA64894636F56BC.roa (hash: vEOW1RXhvztzL2HV82vJS53AY6+1wricRf5vvLZfhIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl
rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91736F5, serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
Validity
Not Before: Oct 3 08:12:17 2026 GMT
Not After : Oct 10 08:12:17 2026 GMT
Subject: CN=6ac0b8e1-e902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:94:1e:62:8c:4b:a0:58:6a:b4:ad:ef:55:
11:63:14:8e:18:fa:51:1f:dc:20:67:f4:2a:d6:c9:
71:39:14:27:64:88:ce:b1:de:ce:13:84:2c:ed:e5:
66:41:e0:e3:17:da:11:9f:cc:95:b8:ec:7b:38:55:
7a:c6:65:48:35:28:b6:79:4e:5f:2f:2f:41:04:ec:
78:bb:d0:ee:80:c3:dc:cb:24:44:ca:2d:eb:61:a4:
e2:da:f2:57:14:4b:69:90:53:b7:37:02:91:41:a6:
99:63:6c:22:3e:45:cd:98:ca:a2:f6:00:cb:4a:90:
ce:0b:df:1b:a7:7f:a4:3c:94:e0:e3:ac:7e:90:45:
bd:a1:7c:46:67:fe:cb:a3:48:a4:0b:92:1d:21:7c:
60:75:22:e5:55:ae:b6:17:83:2b:95:c9:3b:11:0a:
28:0b:2b:49:92:31:51:29:18:b1:82:c3:e6:72:28:
0a:4c:79:0b:f4:9a:6f:be:7b:2b:3f:89:ec:4f:10:
92:5f:2d:14:e9:21:cd:a6:67:08:0b:5c:f0:c1:4c:
95:3a:4f:2a:4e:ec:12:7f:0c:69:e7:f6:53:58:d0:
2c:35:84:95:ed:46:0e:80:e4:72:fe:2e:51:85:13:
84:73:c5:26:8f:98:3e:88:16:9f:4a:de:25:fb:3b:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:16:16:5E:C8:5F:7A:E5:F8:7E:0A:7B:D1:62:C1:FE:09:50:87:D7
X509v3 Authority Key Identifier:
keyid:B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:44:b7:3e:c2:d1:8f:60:a8:3a:42:4a:d0:2b:f7:e0:13:06:
9a:58:c7:1f:bf:96:87:83:f3:ec:7d:1a:2f:5e:5a:ce:2f:d4:
b5:da:44:8c:36:eb:36:6d:cf:9c:44:45:51:b5:2d:13:9f:59:
73:b3:cc:b1:30:e4:d2:fb:a5:81:3c:71:cd:87:c9:3e:b2:81:
ff:77:0a:3d:b1:01:03:65:7d:89:70:db:43:e9:64:7d:5d:e3:
89:ce:06:1e:4e:80:09:44:02:ee:d5:04:ed:08:17:f6:09:6d:
9a:43:4d:8a:c4:0a:74:d5:5d:71:95:ee:5a:16:2b:ee:6d:b6:
e3:35:80:80:fa:3b:80:92:c5:1a:47:42:e3:3e:1f:ea:79:47:
29:0f:22:32:75:41:6e:f6:d8:db:24:7f:71:37:f1:d9:32:78:
dd:37:02:be:dc:65:d4:52:6f:95:0c:02:87:bd:d5:1d:88:26:
c5:84:73:ee:74:5f:be:04:ba:0f:f4:7e:ec:b8:82:49:9b:70:
a4:65:07:74:38:d4:78:94:13:80:64:fb:30:cd:20:d3:50:9e:
24:55:0a:76:94:9f:d9:55:27:8e:fa:94:06:b3:0e:b1:ab:d8:
e4:79:d8:8e:8c:26:dd:b8:f3:4c:88:81:b7:62:4b:61:ee:d7:
4e:0a:95:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM2RjUxMTAvBgNVBAUTKEIzMzE3QzY3REQxNUIyOEFGQTM5ODAwNEMxOUQxRDc4
QjFCRkRFODYwHhcNMjYxMDAzMDgxMjE3WhcNMjYxMDEwMDgxMjE3WjAYMRYwFAYD
VQQDEw02YWMwYjhlMS1lOTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn4eUHmKMS6BYarSt71URYxSOGPpRH9wgZ/Qq1slxORQnZIjOsd7OE4Qs7eVm
QeDjF9oRn8yVuOx7OFV6xmVINSi2eU5fLy9BBOx4u9DugMPcyyREyi3rYaTi2vJX
FEtpkFO3NwKRQaaZY2wiPkXNmMqi9gDLSpDOC98bp3+kPJTg46x+kEW9oXxGZ/7L
o0ikC5IdIXxgdSLlVa62F4Mrlck7EQooCytJkjFRKRixgsPmcigKTHkL9Jpvvnsr
P4nsTxCSXy0U6SHNpmcIC1zwwUyVOk8qTuwSfwxp5/ZTWNAsNYSV7UYOgORy/i5R
hROEc8Umj5g+iBafSt4l+zvyaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMWFl7I
X3rl+H4Ke9Fiwf4JUIfXMB8GA1UdIwQYMBaAFLMxfGfdFbKK+jmABMGdHXixv96G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzZGNS8yQTUwQjY0OEU2
RUUxMUYwQUQwOTU3OTI2MzZGNTZCQy9zekY4WjkwVnNvcjZPWUFFd1owZGVMR18z
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N6RjhaOTBWc29yNk9ZQUV3WjBkZUxHXzNvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzZGNS8yQTUwQjY0OEU2RUUxMUYwQUQwOTU3OTI2MzZGNTZCQy9zekY4WjkwVnNv
cjZPWUFFd1owZGVMR18zb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPUS3PsLRj2CoOkJK0Cv34BMGmljHH7+Wh4Pz7H0aL15azi/UtdpEjDbrNm3P
nERFUbUtE59Zc7PMsTDk0vulgTxxzYfJPrKB/3cKPbEBA2V9iXDbQ+lkfV3jic4G
Hk6ACUQC7tUE7QgX9gltmkNNisQKdNVdcZXuWhYr7m224zWAgPo7gJLFGkdC4z4f
6nlHKQ8iMnVBbvbY2yR/cTfx2TJ43TcCvtxl1FJvlQwCh73VHYgmxYRz7nRfvgS6
D/R+7LiCSZtwpGUHdDjUeJQTgGT7MM0g01CeJFUKdpSf2VUnjvqUBrMOsavY5HnY
jowm3bjzTIiBt2JLYe7XTgqVLQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:53 2026 by rpki-client