
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
File: SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json)
Hash identifier: UfHyqUnf3Y0G1GrioeOgGYH14N2hvc1n+HiVATojf8E=
Subject key identifier: 15:93:8D:BC:45:AC:DA:20:60:61:89:3F:75:3A:BC:6B:35:C2:89:9B
Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00
Certificate issuer: /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
Manifest number: 96
Signing time: Fri 23 Oct 2026 08:03:29 +0000
Manifest this update: Fri 23 Oct 2026 08:03:29 +0000
Manifest next update: Fri 30 Oct 2026 08:03:29 +0000
Files and hashes: 1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: iRqIpb/3EOE4SM0lkgtFYwqVViKSdaCd209/+Tovhbk=)
2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl
rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 08:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400
Validity
Not Before: Oct 23 08:03:29 2026 GMT
Not After : Oct 30 08:03:29 2026 GMT
Subject: CN=6adb14d1-cd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:eb:15:15:a0:f3:94:d0:b9:b2:0f:26:fa:
c1:d1:2d:ac:dc:a1:24:ab:d5:66:06:a2:87:bc:c7:
2b:17:0a:3b:14:e4:dd:29:2b:36:48:80:fa:ea:63:
71:93:f1:a3:8e:9b:c7:b2:d5:80:ee:e2:91:61:75:
fe:f0:e0:3d:f0:6f:7c:f3:68:b9:07:84:f4:ca:7b:
5e:96:09:f3:f2:d4:66:fd:9d:bb:89:68:18:49:68:
ba:ee:8f:e2:19:7b:ae:7e:fb:3d:6b:c0:81:f9:14:
c4:01:09:e7:ef:11:ba:8d:1e:9f:15:b6:74:41:02:
e7:8b:82:4d:89:ea:ae:a0:64:65:c4:ec:ca:aa:7c:
7b:03:0a:ed:33:5f:74:e1:29:3b:a9:66:80:0a:63:
27:45:24:9b:3c:ab:10:38:53:c0:a1:fa:8c:a5:a3:
3a:2d:c1:a6:2d:5b:a2:7c:61:5f:0b:93:c9:41:b5:
96:2a:e0:0b:5e:0b:a5:ab:42:fb:b7:cc:c0:66:29:
d6:60:10:08:f0:f5:63:80:0d:97:9a:b1:72:98:c2:
a5:e3:93:6f:4b:4e:82:21:f9:44:a7:38:c8:c1:12:
c6:2e:4b:fc:af:65:76:b8:66:e0:c3:12:93:90:fb:
ce:4f:30:fa:8b:5a:2b:53:64:dd:e8:80:50:d0:9b:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:8D:BC:45:AC:DA:20:60:61:89:3F:75:3A:BC:6B:35:C2:89:9B
X509v3 Authority Key Identifier:
keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4f:87:1e:95:a5:bd:06:50:d3:c3:8d:16:fb:8a:4a:f2:3e:
cc:e0:86:ae:e0:15:42:bd:18:74:c7:cc:b0:56:2e:12:75:d4:
28:f9:b7:3d:ef:0a:c5:c3:52:94:bf:f8:53:b1:1d:ca:b9:0f:
54:17:5c:b4:b3:86:b4:f2:23:af:0a:26:3a:57:f1:56:d0:0e:
1e:0a:61:69:cd:69:03:1e:8b:2d:62:3d:25:c7:16:a1:0d:49:
c8:88:7a:ec:0d:32:e3:6f:7c:ce:30:76:2c:f4:0c:15:bb:36:
6b:a8:1b:3b:26:16:34:eb:64:a3:42:7e:fc:18:e4:94:1e:9a:
02:95:f7:44:bb:19:f7:9c:82:c0:cf:81:47:7e:a7:22:45:51:
24:f4:d0:31:56:27:f2:e4:c4:6a:e2:e2:a7:29:d1:62:1a:cc:
9a:4f:08:cb:3e:dc:7b:2c:7a:5f:15:14:00:13:03:a4:99:fb:
5c:dc:c5:40:26:3d:ab:e8:41:a3:55:a2:ab:be:d9:b4:c2:da:
75:2a:8e:54:ae:33:7e:cd:16:c2:2b:a6:2a:51:0c:06:ad:33:
61:34:54:63:4d:e9:56:61:ce:e3:a9:4d:b1:32:43:61:65:5e:
27:a2:a5:2e:4e:7a:4c:4c:1f:04:b5:ab:7c:78:53:8b:2a:20:
26:db:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:47:24 2026 by rpki-client