
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
File: sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json)
Hash identifier: maSmyB9FAP42Rpy4Q6zzDAmZClkAJakyXL3Bf12CGOY=
Subject key identifier: 07:6F:B9:26:F2:37:2D:8B:1C:51:37:93:37:13:1F:C6:15:E8:25:EA
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial: 036A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
Manifest number: 0332
Signing time: Sat 27 Jun 2026 01:43:42 +0000
Manifest this update: Sat 27 Jun 2026 01:43:42 +0000
Manifest next update: Sat 04 Jul 2026 01:43:42 +0000
Files and hashes: 1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: K7pRTOh4bFKpCk5lusQHooCP1/aQCGzWkfC1WJMNkaQ=)
2: 826A614C16D911F183D175C0323D8C67.roa (hash: ycmuh8Nj0r0LWzIjLbjrvo9pWQhXULrkKa+U8zn3Gr8=)
3: 36282A602FB311F1BAA2499190833773.roa (hash: ZhezHZjIimq5M2gqm3AOHJtdV6x+qdTacZqo95wm3Sw=)
4: D6D1A360323911F0BDA2E834C4F9AE02.roa (hash: 6w7CckVV6rG/tG2tTXK+P2qxsctnyNA9gMl+grLKt2E=)
5: DF9C04F4897811F08A9D002AC4F9AE02.roa (hash: 1eWJrnzvRDCq+R12qi5MDc8zwDz6onremzl8rIyFdWg=)
6: D14FB73439DA11F1B4AF0311B9833773.roa (hash: 98qj9ACGoLIV5uiZE8wJ/8qhEcL1JY5MLgWrObpjwjc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Jul 2026 01:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874 (0x36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Validity
Not Before: Jun 27 01:43:42 2026 GMT
Not After : Jul 4 01:43:42 2026 GMT
Subject: CN=6a3f2ace-f985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:20:2a:10:eb:fa:cd:fb:a9:6a:59:48:51:
94:14:fc:0f:0a:99:69:12:bc:45:f9:96:a0:66:ab:
82:c1:eb:62:4c:20:bf:9f:de:ab:be:d6:b1:46:a2:
84:b8:81:c1:d5:98:de:5a:41:99:74:28:0e:c9:48:
81:06:6b:cc:41:5b:a0:8f:68:96:9b:6b:cf:6c:38:
fa:75:a9:68:49:2b:0e:1d:ad:bb:1c:a0:93:db:40:
65:f7:75:03:7c:21:96:2d:78:65:7d:66:43:c7:65:
37:7f:5d:ca:40:ae:59:e8:bf:34:cf:7b:36:6b:26:
2d:f0:ff:b8:92:3e:31:5e:aa:fa:de:f2:70:e0:c9:
57:72:23:84:17:51:ea:a1:1d:54:09:c1:a0:9e:1e:
6d:1f:ef:78:d8:b7:ad:a3:b9:c4:2e:9e:c9:2b:3b:
2a:aa:4c:80:12:d2:f1:96:87:f3:9e:73:29:21:96:
3b:3e:43:51:a3:f6:0a:76:70:d4:14:46:22:fa:50:
41:58:82:5c:9f:fb:c6:0c:15:d0:98:f4:c3:09:40:
14:52:bc:37:c3:08:45:51:d0:4a:5c:30:7b:f3:e7:
a0:5c:24:f4:19:b0:4d:27:2e:91:da:40:fc:01:42:
9c:9d:0f:ad:49:4d:5a:68:28:81:1a:47:8f:e0:ef:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6F:B9:26:F2:37:2D:8B:1C:51:37:93:37:13:1F:C6:15:E8:25:EA
X509v3 Authority Key Identifier:
keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:63:56:30:25:b1:ea:09:dd:55:36:df:94:34:6e:d8:e5:88:
79:a1:51:8f:8f:93:7a:89:28:7b:74:71:dd:cb:24:0f:d8:0a:
66:5a:7b:cb:fb:50:09:61:76:91:9c:81:ce:7c:6d:d7:47:31:
83:55:f3:f5:16:62:89:44:14:1d:2b:71:75:a9:1c:07:26:f5:
28:71:fd:ad:ec:2a:40:10:24:24:64:46:bb:03:76:ec:33:63:
dc:3d:f4:ea:a4:4e:ca:54:33:14:2e:6e:ea:56:36:12:74:7c:
9a:fa:45:a5:65:1b:3d:ea:93:61:1c:50:33:50:1d:ab:73:78:
83:0a:fa:59:cf:99:03:91:e7:d0:31:ff:40:4c:df:d9:eb:2a:
33:9d:27:d3:81:fe:8d:01:da:98:85:b7:f2:d8:0c:dd:3d:3b:
a6:78:e6:71:85:8c:68:53:fb:44:56:91:ef:83:59:10:0e:c4:
38:19:15:0c:57:90:df:a4:ee:7e:3e:85:3b:e0:00:54:3e:26:
b3:1d:c1:df:89:73:6f:cf:91:af:da:ab:d0:ae:0e:2d:cc:8e:
dc:73:d4:15:13:7b:ea:43:ad:98:f6:7e:2d:81:e0:27:6a:9c:
53:c5:c7:7e:40:bc:6c:bb:8e:ed:29:e0:b6:8c:39:a6:da:d9:
68:04:53:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 16:21:46 2026 by rpki-client