
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
File: sJELB8hrD_owClKsfDH8tSwFMtc.mft (raw, json)
Hash identifier: upqub+ZboWBmu7zjU09SDuAup7ndbu4ll7w+g59gWmM=
Subject key identifier: 4C:9B:FE:A6:DE:86:FF:D6:F1:81:E4:D7:E1:39:3A:53:FB:78:46:E1
Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
Certificate issuer: /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
Certificate serial: 06FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
Manifest number: 06F1
Signing time: Sun 18 Oct 2026 22:20:38 +0000
Manifest this update: Sun 18 Oct 2026 22:20:37 +0000
Manifest next update: Sun 25 Oct 2026 22:20:37 +0000
Files and hashes: 1: sJELB8hrD_owClKsfDH8tSwFMtc.crl (hash: HpMKDpCP08rSF2e9Dfgk1AR8CB98rW1fXZNi6Tw1Yig=)
2: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (hash: xZwoqxfOayEV992muPvVHQ2Q6o2AK6AHasTqY2PsFBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl
rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 22:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1786 (0x6fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B777C, serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
Validity
Not Before: Oct 18 22:20:37 2026 GMT
Not After : Oct 25 22:20:37 2026 GMT
Subject: CN=6ad54636-af74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:84:f7:71:c9:31:27:30:b6:d0:50:94:cb:
42:77:bd:a4:53:75:0a:88:dc:67:0b:a5:54:c1:f5:
c5:14:52:4c:f9:64:ff:b7:3a:72:79:b6:98:9e:8f:
d7:13:06:80:e2:01:9d:7a:b9:fe:01:ae:8c:fc:b7:
d6:bd:83:26:ab:42:6a:2a:eb:f7:cd:e6:96:1c:f4:
9c:a8:f2:1f:9a:9f:6d:6e:60:59:e9:15:83:e6:77:
68:5b:2f:6a:4f:c2:51:5b:bb:b7:4a:d5:7a:9c:50:
85:a7:42:4b:19:cd:ac:93:ca:f5:2a:ed:12:08:14:
43:8e:ac:20:a7:ba:9d:b0:9d:22:6a:98:b0:c8:66:
64:20:b9:52:8d:a5:c7:ee:6f:fc:7f:2c:03:0b:6c:
98:5f:ae:97:24:c4:78:ad:75:15:2e:19:9b:82:b8:
91:10:71:2e:41:5b:27:6a:9c:71:13:8d:fe:32:14:
6a:72:5c:bd:37:e8:dd:d1:3b:ff:e5:d3:2e:43:a0:
6f:ca:48:4d:5a:e6:44:60:ff:d7:79:1d:1e:89:0c:
24:a7:42:2f:13:17:0e:85:14:9f:c5:eb:35:ca:b0:
04:62:b5:a4:5a:cc:f3:b2:ad:23:a0:7d:1a:16:8f:
7b:c7:83:7e:3d:ef:16:8f:61:7e:21:3b:17:f3:08:
b6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9B:FE:A6:DE:86:FF:D6:F1:81:E4:D7:E1:39:3A:53:FB:78:46:E1
X509v3 Authority Key Identifier:
keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:ac:cd:0f:e0:ff:51:95:85:4e:ae:3d:51:c6:3a:a0:5e:0c:
1c:7e:f9:b6:f0:37:62:98:0f:f9:1c:4d:89:d0:ed:6b:80:a3:
e8:15:58:32:f3:5d:c3:9d:45:79:1b:ed:10:1c:cc:9e:ba:45:
a0:4c:25:f9:b3:04:9f:c2:b4:02:e7:18:70:f4:6a:6d:fd:e3:
55:ff:4b:95:97:15:37:53:b8:a4:cf:bb:92:8e:fa:08:18:4d:
50:ff:92:db:df:4e:83:e8:5a:0b:39:b4:c7:71:38:ab:cb:c2:
81:b7:cb:2e:ef:aa:7f:00:65:39:2a:52:45:3d:ca:0f:30:7c:
72:de:1d:19:63:49:2d:24:92:80:0c:68:32:5c:7c:2f:12:d7:
d2:de:70:f4:f3:ce:7e:ba:93:68:05:0a:df:ed:25:27:17:ff:
25:13:7c:20:f0:ff:a8:7e:2d:82:ee:60:86:5e:e8:ae:71:cc:
5f:96:33:f0:71:40:6c:85:74:8e:05:be:87:ea:c0:b7:82:15:
ad:4b:e9:b0:93:f5:83:e9:5a:49:b9:e1:b3:7d:5a:0b:d2:a6:
ee:10:97:a0:9a:4d:50:c7:9d:2f:aa:18:ca:43:2e:b7:96:86:
bd:f2:6a:b0:63:09:6a:44:fd:d2:50:e8:b3:4b:5b:c3:cc:34:
24:5f:c6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:35:43 2026 by rpki-client