
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json)
Hash identifier: MFFiu24XBpBGYbKyVrfxcV/n4KyYP26aqNUNL2loh4k=
Subject key identifier: D1:E5:F8:12:5D:28:32:E9:D0:2A:4B:86:1E:DF:52:20:76:9D:4D:75
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial: 0603
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
Manifest number: 05CF
Signing time: Mon 26 Oct 2026 23:02:31 +0000
Manifest this update: Mon 26 Oct 2026 23:02:31 +0000
Manifest next update: Mon 02 Nov 2026 23:02:31 +0000
Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: N7a5spbThOwwNtweSArlJiF1OdvoRKdJUo4vYc157zw=)
2: E6EAAE16B2AA11F19707923F4511F970.roa (hash: FHp8dNV8pl0sKRHj67dCuGl/uWdSSBrx/0Q3JFg9L7M=)
3: 6E6FEF28DC1311F0BA8FDA195F6F56BC.roa (hash: RClecKG5kjOxOe4lhvUyvu90mrTmfQN5JEcW/BBLi2s=)
4: 9F890910DA3C11F088DF33818DD3641D.roa (hash: WSO54GXOMLNY9+Q+eJeEwRTVNPFNhORZLJRc9VrAOIk=)
5: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: +TxFvB+FhR7Ozdlw+djv4eD43K7uTA0JjO2neLRuzKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 23:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1539 (0x603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Validity
Not Before: Oct 26 23:02:31 2026 GMT
Not After : Nov 2 23:02:31 2026 GMT
Subject: CN=6adfdc07-c4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:da:30:09:1b:15:95:5f:29:6a:f9:06:62:
a5:2b:57:1a:b8:19:ef:b5:86:e7:31:8e:f7:df:51:
83:28:ca:3a:31:09:ef:81:a2:1a:19:b5:79:d4:b8:
14:61:ea:93:25:bd:99:20:06:ef:79:20:8e:68:b0:
3e:bf:0a:ab:39:6f:57:2d:4f:04:10:0c:48:1a:b8:
70:04:42:87:ba:83:28:f4:05:39:e2:08:ac:b8:b6:
f3:3a:28:b2:43:80:42:ef:0c:df:98:00:8d:67:c7:
76:30:85:10:5d:4c:ef:a2:61:f6:a3:44:64:e0:a9:
35:d2:80:47:02:a8:22:41:ec:f6:d5:44:38:af:06:
40:73:33:7b:eb:77:1d:09:6c:2b:1a:f5:fc:76:46:
0d:f4:57:1a:3e:90:91:54:aa:32:15:5b:fe:d5:77:
b7:36:dc:6d:5b:b6:88:5f:fc:67:f5:c2:38:55:3e:
8f:56:99:c2:a0:8b:13:ff:06:43:99:7e:e4:c0:d0:
1d:3a:c6:6c:38:e6:57:d1:fc:ae:9e:c8:a5:8c:90:
43:42:03:42:6f:6d:06:34:a4:d3:73:91:2c:67:50:
8a:ce:ec:9a:e8:94:fc:ee:05:a3:1b:c9:e0:6e:be:
da:c3:b4:e3:3a:31:b3:63:cc:25:b0:41:3d:8e:0b:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E5:F8:12:5D:28:32:E9:D0:2A:4B:86:1E:DF:52:20:76:9D:4D:75
X509v3 Authority Key Identifier:
keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:40:e7:f5:bb:ea:8e:57:ae:a5:e6:60:63:b0:ce:1d:c2:a8:
78:08:71:a6:19:15:92:51:25:34:8a:63:ec:d8:ce:8f:21:70:
d9:32:5e:cb:e9:33:08:b7:be:86:0b:1c:d6:31:e1:07:7a:c3:
f0:1c:0d:2c:e1:c0:2e:f1:30:0a:49:5b:42:3b:9a:20:e3:8f:
8e:8a:98:42:89:f7:5f:0a:91:ae:71:4a:7b:7b:4f:06:19:fa:
d5:36:3a:2a:5f:dc:57:4a:85:0e:30:d1:1c:0b:c4:73:57:40:
d2:80:e6:4e:12:c5:70:db:15:40:42:8b:6e:33:c1:9b:57:4a:
44:00:02:ff:88:a0:6e:6e:58:ab:4f:ef:30:44:76:9b:e7:ca:
fd:5d:e1:bc:d9:be:77:b8:ab:3a:eb:04:26:ca:ff:47:b2:4e:
2c:77:59:d4:be:ed:38:3c:1c:5e:25:7d:ad:d7:8b:0a:90:b8:
57:38:9b:d7:fd:f9:5f:48:d0:e5:a0:73:06:69:10:2c:c0:c3:
c2:0b:71:82:9e:1b:c6:8d:e2:34:04:86:a2:3c:c5:53:40:8d:
d6:7f:f0:0e:25:9b:79:51:4a:05:f6:a9:c1:14:c2:d6:2e:d6:
a4:da:68:e5:da:7c:8d:b8:a2:1a:56:fd:75:2d:ed:72:0e:92:
58:2d:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:07:30 2026 by rpki-client