
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json)
Hash identifier: FzbZle7lhm01GcjLMe0DgRIAEwitk6SxPz6uAhCklV8=
Subject key identifier: 2C:06:4F:A0:C4:A4:12:17:40:D7:B4:BA:45:82:EA:E5:0C:92:EA:7F
Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
Manifest number: FA
Signing time: Tue 03 Mar 2026 05:50:18 +0000
Manifest this update: Tue 03 Mar 2026 05:50:18 +0000
Manifest next update: Tue 10 Mar 2026 05:50:18 +0000
Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: Ju1aU6IHmI9pPH1WRiAmcpRkth7RpRGtNwAKJLGxw1A=)
2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: mSukAUMe5Lr3KzZ1M4lKG8ZcBcOq+sE7NJI6nlUpRwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Validity
Not Before: Mar 3 05:50:18 2026 GMT
Not After : Mar 10 05:50:18 2026 GMT
Subject: CN=69a6769a-3c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:47:b2:13:68:1d:6a:e1:9c:bf:60:c9:ed:60:
cd:6f:5f:da:f3:f9:71:26:71:80:72:75:a8:e0:a5:
63:8a:79:2b:e5:3c:50:6e:4b:67:28:af:9e:24:68:
df:7e:7b:ce:9d:99:e2:5e:78:dd:d4:e8:e9:6a:19:
01:55:c8:79:97:e0:cf:32:17:38:b0:58:07:fe:d5:
03:88:6d:d3:7c:82:ec:e5:90:0a:9d:55:22:19:30:
3a:86:99:98:dc:50:d0:d4:54:00:9a:40:a6:7c:a5:
cd:9d:41:03:2d:75:a2:d2:d9:99:fa:47:fc:23:93:
3e:df:0a:fc:4b:32:5c:30:0e:ab:c3:56:09:8c:8f:
fe:73:93:a8:be:42:d6:c2:44:54:11:ad:bf:6f:8a:
37:86:99:66:87:ac:26:65:1f:a8:9a:c9:fd:94:6e:
df:80:ef:3e:50:dd:2e:e0:45:d5:f1:64:07:12:d2:
38:29:32:d6:df:f9:a6:54:b4:7b:31:4f:04:6a:1c:
ed:ae:ab:7c:65:74:d1:c4:2a:fd:8c:57:db:39:8f:
2a:71:b0:2e:f4:e7:98:fc:df:2f:5b:3f:4d:27:a9:
45:87:28:6b:34:3c:b1:a0:74:65:e0:17:a8:97:01:
c8:11:e3:4a:d3:54:d9:90:03:cd:c2:50:bd:52:94:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:06:4F:A0:C4:A4:12:17:40:D7:B4:BA:45:82:EA:E5:0C:92:EA:7F
X509v3 Authority Key Identifier:
keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:a3:cf:41:0d:88:b6:ec:5c:74:d1:9d:a1:a4:7e:80:77:bd:
7b:28:7b:94:bc:c6:21:85:5b:03:08:ca:f0:98:0f:ba:13:24:
43:c9:56:40:3f:ac:2b:08:94:87:3e:2e:84:46:ca:b5:06:77:
8c:8b:92:a4:94:ad:50:ad:b9:0a:4a:14:39:d7:a6:8d:45:7d:
67:6f:78:c3:dc:e7:9d:94:cd:6b:76:d4:b2:65:52:bf:fb:8f:
38:55:11:70:85:b8:f3:34:2f:7c:7f:c7:83:aa:7b:a6:8f:bf:
bc:49:7d:2c:fa:0e:67:cd:e7:81:58:fe:ce:a8:6d:72:5f:96:
65:31:f3:fd:46:cf:b4:72:4a:1b:46:8b:aa:14:83:53:aa:81:
34:ee:f9:db:46:59:a5:9d:21:3a:32:0e:98:7f:5d:da:93:61:
5e:00:bf:a5:ce:5b:b8:b8:b7:b7:61:71:42:36:71:e5:ad:3f:
34:af:26:d6:6b:b4:05:fe:a6:6d:b7:2f:d8:7b:52:78:f7:79:
71:13:8c:1d:d5:46:31:c2:b9:d8:98:c0:8f:4e:5c:ff:de:2a:
2a:92:30:ee:03:bf:3c:6f:08:14:35:24:20:d7:54:5d:f5:30:
da:d3:15:79:c9:97:45:c1:90:b6:c6:95:08:85:09:a9:0a:ff:
2c:25:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:20 2026 by rpki-client