
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5585/FA8D2D66A03711F186C056843711F970/susmjoQItgiz9su3vJTH3yTPIik.mft
File: susmjoQItgiz9su3vJTH3yTPIik.mft (raw, json)
Hash identifier: oyX0F7Wkn58f3kxL6LOIGIMzTrwrI3XQ+lvnJXpZjnM=
Subject key identifier: 3A:48:68:24:B2:E8:AF:20:9E:9B:8A:B4:3A:CD:17:D4:7B:58:AE:D3
Authority key identifier: B2:EB:26:8E:84:08:B6:08:B3:F6:CB:B7:BC:94:C7:DF:24:CF:22:29
Certificate issuer: /CN=A91B5585/serialNumber=B2EB268E8408B608B3F6CBB7BC94C7DF24CF2229
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/susmjoQItgiz9su3vJTH3yTPIik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5585/FA8D2D66A03711F186C056843711F970/susmjoQItgiz9su3vJTH3yTPIik.mft
Manifest number: 05
Signing time: Mon 31 Aug 2026 09:38:33 +0000
Manifest this update: Mon 31 Aug 2026 09:38:33 +0000
Manifest next update: Mon 07 Sep 2026 09:38:33 +0000
Files and hashes: 1: susmjoQItgiz9su3vJTH3yTPIik.crl (hash: wO3HLoksXgQUZ9CZ4LHnuHL7mx4bYYMj5ouJGDkAAIk=)
2: 89E4F264A03811F198EE418E3711F970.roa (hash: DNgqORvt7GXyNwUF7A96VqrxVc0qo3QlhjXz+GcY8eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5585/FA8D2D66A03711F186C056843711F970/susmjoQItgiz9su3vJTH3yTPIik.crl
rsync://rpki.apnic.net/member_repository/A91B5585/FA8D2D66A03711F186C056843711F970/susmjoQItgiz9su3vJTH3yTPIik.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/susmjoQItgiz9su3vJTH3yTPIik.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 09:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5585, serialNumber=B2EB268E8408B608B3F6CBB7BC94C7DF24CF2229
Validity
Not Before: Aug 31 09:38:33 2026 GMT
Not After : Sep 7 09:38:33 2026 GMT
Subject: CN=6a954b99-512b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b2:55:10:e4:6e:1c:51:fd:b1:25:fa:47:5f:
c9:3f:1c:c5:49:22:00:da:59:da:42:fb:6d:c9:e7:
26:6a:09:78:0e:82:15:ef:94:b5:da:6b:44:d8:89:
05:62:95:b9:7a:0b:b1:2b:28:5e:e5:e4:0f:56:dd:
04:1e:7a:c3:ee:4b:7f:b8:cd:9b:c1:2f:fb:5f:8d:
4c:a0:1d:d3:08:9b:8c:71:2a:b7:20:b6:57:2d:bb:
b6:9a:d9:a9:80:36:3d:fd:94:5f:ee:be:61:3e:fe:
a7:93:da:63:30:45:a7:de:68:66:dc:9d:a8:57:00:
06:07:68:c9:84:1d:cf:52:e2:61:15:46:2a:19:2b:
fb:df:a7:52:94:d5:39:ba:f2:1e:ac:d1:16:b5:ba:
49:d4:00:bc:7e:87:75:95:2b:eb:4f:26:01:2e:65:
93:fb:5b:f0:38:19:a5:43:8f:ca:9f:a7:3b:bf:92:
d7:99:3d:2f:12:1e:42:d7:4a:ec:b6:11:03:07:fa:
56:f1:da:65:56:d8:f1:3c:52:d6:06:3d:b8:8c:5e:
7a:af:9a:fe:22:87:90:f9:f7:cd:bb:d1:d1:0b:91:
e2:52:ce:f7:30:62:66:a1:a5:d7:22:19:6f:47:ac:
92:5d:3c:7b:54:8e:ec:05:94:45:10:6c:10:68:cd:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:68:24:B2:E8:AF:20:9E:9B:8A:B4:3A:CD:17:D4:7B:58:AE:D3
X509v3 Authority Key Identifier:
keyid:B2:EB:26:8E:84:08:B6:08:B3:F6:CB:B7:BC:94:C7:DF:24:CF:22:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5585/FA8D2D66A03711F186C056843711F970/susmjoQItgiz9su3vJTH3yTPIik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/susmjoQItgiz9su3vJTH3yTPIik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5585/FA8D2D66A03711F186C056843711F970/susmjoQItgiz9su3vJTH3yTPIik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:70:fb:d8:80:2c:4a:86:25:1c:b9:fc:43:28:40:f2:2a:30:
b6:24:7d:a2:27:f3:af:dc:1e:9d:1d:fb:8a:61:77:79:55:f4:
91:ca:53:f2:12:1a:00:f3:14:3a:b2:09:81:d6:79:81:f0:9d:
16:12:7c:4f:73:8b:94:67:98:a0:00:6e:a4:a1:dc:c0:b8:89:
cb:5e:87:79:5d:d4:e9:a7:9e:d2:1b:de:13:af:be:51:ed:71:
69:21:63:dc:61:7f:c2:3d:72:80:80:9a:5d:f2:35:83:55:4e:
30:d9:e4:a2:f9:9e:ba:fa:0e:cd:57:c3:e1:8d:ac:50:a1:5e:
25:0b:42:00:bf:3a:da:2b:93:96:2d:9a:c8:25:2a:65:86:34:
57:c9:da:9b:e5:8d:09:48:27:3a:ae:fa:30:36:ac:40:fb:ed:
e6:e0:78:80:1c:bd:31:3d:dd:a7:fc:2d:46:9d:94:03:2f:d1:
0d:c3:08:a2:17:d5:42:10:12:54:f8:fa:ea:ee:e6:e4:3c:8f:
80:ed:98:2c:0d:a4:3d:4a:2c:4e:3c:7f:48:e8:32:39:46:12:
1e:83:6f:db:db:37:3b:7b:a2:9b:91:ea:88:ba:65:00:59:ae:
11:a2:79:be:b5:3b:6e:8d:d8:d6:52:6f:84:5a:b3:f1:b9:75:
de:01:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:29:29 2026 by rpki-client