
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
File: sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json)
Hash identifier: E0Jv0UtLqpoDtFlxrEEE4pHe8bP/XWCexIOXmbQMZvQ=
Subject key identifier: 80:EA:A5:E4:E6:3F:6B:E4:65:63:B2:D3:16:82:6D:E8:35:2A:75:96
Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2
Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
Certificate serial: 0973
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
Manifest number: 0968
Signing time: Fri 02 Oct 2026 20:22:13 +0000
Manifest this update: Fri 02 Oct 2026 20:22:13 +0000
Manifest next update: Fri 09 Oct 2026 20:22:13 +0000
Files and hashes: 1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: 74NQWe1rB9yJMeqE4VigHPFbPLwGmPdva2wHocroRK8=)
2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: myPqUDNWdaCgUms1NDW6cgdVK5APz5PqgTj/yOUElVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl
rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419 (0x973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
Validity
Not Before: Oct 2 20:22:13 2026 GMT
Not After : Oct 9 20:22:13 2026 GMT
Subject: CN=6ac01275-ddd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:12:1c:bb:ad:74:36:83:d3:72:f5:0d:a6:
cd:5e:64:5e:cb:ba:e6:25:94:b7:24:f6:35:2b:83:
4d:7c:31:53:47:bf:bf:11:ce:df:21:09:50:aa:2c:
a2:13:1c:d1:28:5f:d4:aa:18:24:62:70:ff:63:8d:
69:08:fd:58:7b:1f:fd:40:56:5c:22:3c:79:2e:52:
1f:09:15:ae:c7:53:9b:e2:fd:c7:66:0c:db:91:12:
33:41:1a:29:71:d8:c0:1f:a8:63:ea:e7:a0:9a:2a:
6a:84:be:f0:f5:9c:a0:d0:f4:54:19:f3:cd:6c:ba:
e3:88:93:4f:73:03:4d:1a:a2:9b:8c:0c:68:a3:6b:
7c:ee:a9:38:8d:07:a3:10:5f:5c:39:39:02:33:26:
d8:b4:34:4d:33:5e:40:18:84:d5:df:c6:87:7c:21:
c7:7f:66:86:05:eb:7c:c4:c5:c8:c7:bb:3c:49:ba:
fb:88:6d:84:c9:84:e6:58:38:f9:f7:8b:fb:3b:11:
77:26:1d:40:08:8f:4d:c8:e5:d4:71:90:6e:04:7d:
1e:57:dc:03:8b:bd:0e:d2:f4:c1:fa:e1:2b:09:47:
ec:9b:fa:83:f1:93:21:25:ef:7d:b8:f1:bc:a9:e8:
36:38:db:b9:48:16:21:0a:37:b8:6d:3e:44:a1:d5:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EA:A5:E4:E6:3F:6B:E4:65:63:B2:D3:16:82:6D:E8:35:2A:75:96
X509v3 Authority Key Identifier:
keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:6d:2b:29:6e:ce:ad:2d:4e:67:43:d8:a3:8b:fa:05:fb:c0:
70:fd:24:0b:3c:12:01:84:12:00:97:73:5c:f9:cd:d8:8f:07:
6d:ef:f4:4c:45:34:7d:c9:0b:d1:58:e9:d2:45:2f:bd:5e:18:
94:98:e8:7e:86:26:a9:4b:ca:52:41:89:ad:d5:75:27:09:2d:
de:a3:0a:2f:c8:3b:44:54:ad:57:fe:7a:bc:6e:d5:a1:7d:9c:
da:39:46:c3:e0:9a:65:ba:33:12:7e:20:42:dc:a6:a8:90:79:
b6:2b:24:93:6a:d3:30:bd:4a:8a:80:c7:42:28:b7:23:4f:36:
81:a5:f7:33:66:c9:e2:d8:6b:0c:34:67:8b:48:70:de:15:c7:
88:c7:49:5d:6b:15:96:26:44:54:3c:39:f6:85:47:7d:66:03:
9d:11:a0:00:3d:0a:c2:b6:e9:10:32:28:41:ff:cd:e2:44:89:
71:05:9f:3a:c0:34:ab:80:80:76:d3:fd:09:67:03:f0:1d:b4:
5a:25:e4:66:0e:36:72:67:88:e9:cc:10:70:f4:87:b6:76:ec:
1f:9c:12:9e:d6:56:4b:50:bd:03:8c:20:a0:bc:23:ae:ca:6c:
c2:e1:d7:db:aa:0e:1e:12:57:27:1c:ab:b9:02:22:68:e3:27:
15:e1:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:54:25 2026 by rpki-client