
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
File: S0QUrmheSI9CsbZH7qAd67DE86A.mft (raw, json)
Hash identifier: ju9VPCqyXfB4XeE7EqqsFZu9I9nDEU43Vk4UtCsRGZc=
Subject key identifier: 11:D4:5D:38:50:07:DD:B9:84:66:FD:BC:9D:61:24:D0:23:91:B3:5E
Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0
Certificate issuer: /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
Certificate serial: 0383
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
Manifest number: 0375
Signing time: Wed 07 Oct 2026 00:57:10 +0000
Manifest this update: Wed 07 Oct 2026 00:57:10 +0000
Manifest next update: Wed 14 Oct 2026 00:57:10 +0000
Files and hashes: 1: S0QUrmheSI9CsbZH7qAd67DE86A.crl (hash: 9tBGnzqxxb7M4/F3R+6FZNQ4FSFq4J6jjht+xcsPtkE=)
2: B4A58FE60E0F11ED89E89675C4F9AE02.roa (hash: yJO+i+oPRpe2hJdrBjCi6ZjWjUnUDaX0mnbL3Z2r1os=)
3: B3F935160E0F11ED89E89675C4F9AE02.roa (hash: x4nzg1eiqnQ3xL+MBP6Ok4N2HAa+La4GXnfqybcguR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl
rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899 (0x383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9B1B, serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
Validity
Not Before: Oct 7 00:57:10 2026 GMT
Not After : Oct 14 00:57:10 2026 GMT
Subject: CN=6ac598e6-bc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:d6:be:80:20:df:c8:f1:fa:bb:d8:73:6b:
57:9d:b2:6c:73:c5:fe:91:3c:70:17:ee:1a:eb:47:
67:95:fc:98:ee:b6:dc:1b:ac:37:ec:20:07:eb:aa:
24:09:1c:b1:ae:78:54:16:5e:5a:30:33:b3:6b:ba:
af:4e:47:33:c2:34:7b:6c:64:ad:ba:7f:6c:10:de:
14:3f:77:e4:63:f6:a1:7b:af:bb:e3:e7:5f:3f:7f:
05:f9:00:c7:33:1f:5c:9c:7f:e1:6b:b0:d3:68:0d:
97:b7:15:6e:1e:bc:cc:35:9c:f9:f6:c4:19:e4:a9:
eb:34:02:29:39:85:27:1e:83:88:cf:b8:aa:cf:6a:
26:43:81:f0:1b:50:43:e8:0a:ba:2d:60:2e:04:1f:
f2:4a:9d:86:a0:a5:ed:4a:4c:cf:45:66:35:ee:c8:
91:fe:97:33:30:6d:ce:a0:4f:ef:53:1b:97:60:06:
d0:71:63:88:11:f8:73:8c:93:e9:9b:ac:6d:6f:fb:
ed:fb:97:36:d2:c8:c2:a6:b1:1c:34:be:57:35:b5:
d8:dc:86:d1:77:f4:8b:d8:91:f9:ea:33:e4:d8:62:
1f:fe:c2:ec:6e:60:c1:2b:ce:96:3f:ea:83:53:60:
23:16:00:db:f3:cd:af:6d:26:da:7e:76:8c:be:0c:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:5D:38:50:07:DD:B9:84:66:FD:BC:9D:61:24:D0:23:91:B3:5E
X509v3 Authority Key Identifier:
keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:ff:17:5f:75:41:07:94:cb:f4:90:d8:86:25:28:0c:87:7d:
3b:fe:42:00:d3:95:43:75:7c:97:19:9c:48:60:a8:0c:65:95:
e8:be:1b:e9:f1:91:df:e0:01:1a:57:a5:1b:71:06:21:38:29:
15:de:98:f8:13:6b:51:fd:6a:02:8e:12:6f:4c:4e:e7:d6:aa:
6c:ef:e9:fd:4b:9a:55:2a:a1:fa:41:77:db:45:97:de:03:92:
8f:2c:15:58:c3:78:2a:b6:2a:bf:6c:68:11:35:98:72:a1:92:
18:82:c0:66:04:5c:ad:65:0b:f5:81:3d:0d:70:ce:2e:d5:91:
51:f8:f5:49:8a:21:95:93:dc:a3:a5:d1:4d:cf:f1:36:da:30:
20:f2:85:a3:41:76:28:f1:05:ea:67:3f:02:f7:15:17:07:14:
92:34:84:28:0b:55:ae:18:9e:13:4e:88:a5:4c:7f:dd:0a:6f:
89:b0:b6:dc:15:97:0f:79:a2:d6:b4:31:4e:3f:15:04:a3:de:
f7:e8:d4:a8:84:9d:ef:ff:5f:e9:36:77:ff:42:97:0c:24:62:
32:43:9d:b5:c3:51:c4:48:82:83:e6:27:4d:7a:ff:3b:2f:f3:
5e:60:fc:ec:e6:f2:89:97:5c:43:20:24:3e:08:3e:e1:32:76:
13:da:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:54:27 2026 by rpki-client