
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft
File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json)
Hash identifier: 3WxJba1/ytzbXeoGsR3maK5CBJzKm+KOA02mt2eH4/g=
Subject key identifier: BC:A9:68:1B:B5:07:FE:8C:00:6A:C9:D2:C0:6C:7A:7F:84:5A:DB:14
Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36
Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436
Certificate serial: 0A37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft
Manifest number: 0A2D
Signing time: Tue 06 Oct 2026 19:49:57 +0000
Manifest this update: Tue 06 Oct 2026 19:49:56 +0000
Manifest next update: Tue 13 Oct 2026 19:49:56 +0000
Files and hashes: 1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: p6d/DaQkCXlUS4P2BBoFaC7WdhTgWm+rBJBv+PQhG2A=)
2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: XaO1hJB0oSGtUyL6Bx5I5lGNvEGPhwnmNhYVX7Xyt8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl
rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2615 (0xa37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436
Validity
Not Before: Oct 6 19:49:56 2026 GMT
Not After : Oct 13 19:49:56 2026 GMT
Subject: CN=6ac550e4-4c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fd:6f:6f:43:03:08:92:d6:86:4a:d5:bf:1d:
6a:82:06:e1:a7:a4:55:92:40:95:1b:06:64:fe:e8:
4f:31:2b:c0:36:83:38:12:85:1b:6d:51:c7:f4:48:
6c:6c:df:bd:6d:b4:ae:80:bb:fc:68:3e:3e:d9:46:
43:56:cd:ef:e5:19:73:6f:23:a8:68:ea:e4:49:a0:
4c:b9:2b:d8:8b:3d:b1:18:58:39:3d:04:d8:0f:bf:
9f:f6:b3:9d:4b:41:a3:81:20:44:69:f6:de:8e:88:
2f:4e:49:91:ab:91:d9:4d:11:6c:c2:07:e2:14:09:
18:c6:d6:7e:b2:2e:20:2c:cc:aa:f5:92:62:9c:d2:
7e:a8:c3:7a:58:a0:36:52:c0:68:f3:2b:e1:fd:6d:
e5:f6:6b:b0:5c:60:eb:23:06:0c:ac:1d:a5:6c:e1:
d2:b9:f3:ce:90:3d:9b:4a:98:9d:52:e4:9a:33:dd:
4a:a8:b1:77:ee:8f:c9:ef:5d:b0:46:f0:39:78:7e:
d3:e3:fa:76:03:e6:fe:1a:87:7f:a5:dd:1d:df:22:
21:e3:cd:67:50:d8:ab:1f:50:c8:06:f2:1b:61:09:
24:c9:43:31:f3:2a:5d:3c:82:1f:99:01:47:ba:48:
f2:b3:be:b6:bd:79:29:f7:df:9c:00:69:27:09:ee:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A9:68:1B:B5:07:FE:8C:00:6A:C9:D2:C0:6C:7A:7F:84:5A:DB:14
X509v3 Authority Key Identifier:
keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:70:c6:46:54:63:8b:13:2c:41:89:cb:fc:74:b3:d0:73:18:
83:6e:10:6f:1f:f4:7e:0a:4b:34:9d:01:c9:07:85:eb:e8:0e:
05:60:a1:2c:18:85:16:88:0b:8e:29:52:52:d3:a6:5f:bc:c7:
f7:b9:06:b6:73:9c:e5:84:91:b2:86:9d:a0:89:b8:4c:45:d2:
22:35:07:fb:4d:2f:4c:a8:1e:09:d0:5c:52:81:4d:25:ea:53:
cc:bb:27:5f:17:8b:b1:8f:17:4a:2e:94:f7:cc:7c:1e:82:56:
a5:af:26:a0:86:c9:be:ca:a7:de:aa:f8:64:6c:af:43:49:6b:
76:b9:c7:00:38:02:17:d8:3e:33:11:ac:b7:77:20:68:57:c6:
af:df:6f:8b:72:bd:62:8d:6c:16:18:03:2d:4d:b6:ff:00:bf:
c9:e8:4a:3f:52:82:4d:09:40:5f:37:b1:dc:7c:1e:7e:e4:64:
f9:f4:03:cf:85:5d:b6:85:cf:de:a7:9e:7e:7d:8a:bd:14:60:
99:56:f2:c1:b5:00:a9:34:32:91:4f:d3:ee:83:53:b9:86:c0:
c2:75:6a:7d:32:de:f4:2f:18:85:11:26:6c:5c:c8:36:2c:fe:
f3:19:a4:8a:fa:d2:5d:94:85:44:70:01:4a:d9:ff:50:ae:58:
51:b6:b4:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4
OTA1M0Q0MzYwHhcNMjYxMDA2MTk0OTU2WhcNMjYxMDEzMTk0OTU2WjAYMRYwFAYD
VQQDEw02YWM1NTBlNC00YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6P1vb0MDCJLWhkrVvx1qggbhp6RVkkCVGwZk/uhPMSvANoM4EoUbbVHH9Ehs
bN+9bbSugLv8aD4+2UZDVs3v5RlzbyOoaOrkSaBMuSvYiz2xGFg5PQTYD7+f9rOd
S0GjgSBEafbejogvTkmRq5HZTRFswgfiFAkYxtZ+si4gLMyq9ZJinNJ+qMN6WKA2
UsBo8yvh/W3l9muwXGDrIwYMrB2lbOHSufPOkD2bSpidUuSaM91KqLF37o/J712w
RvA5eH7T4/p2A+b+God/pd0d3yIh481nUNirH1DIBvIbYQkkyUMx8ypdPIIfmQFH
ukjys762vXkp99+cAGknCe5qAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLypaBu1
B/6MAGrJ0sBsen+EWtsUMB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG
ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RjM2NC83MTZBNTlBQzlGODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZj
MU1QOEM5WVFrY1NKQlQxRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ3DGRlRjixMsQYnL/HSz0HMYg24Qbx/0fgpLNJ0ByQeF6+gOBWChLBiFFogL
jilSUtOmX7zH97kGtnOc5YSRsoadoIm4TEXSIjUH+00vTKgeCdBcUoFNJepTzLsn
XxeLsY8XSi6U98x8HoJWpa8moIbJvsqn3qr4ZGyvQ0lrdrnHADgCF9g+MxGst3cg
aFfGr99vi3K9Yo1sFhgDLU22/wC/yehKP1KCTQlAXzex3HwefuRk+fQDz4VdtoXP
3qeefn2KvRRgmVbywbUAqTQykU/T7oNTuYbAwnVqfTLe9C8YhREmbFzINiz+8xmk
ivrSXZSFRHABStn/UK5YUba0GA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 12:33:52 2026 by rpki-client