
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json)
Hash identifier: CUC6EmJfx3riW/n7zLd2n8LIEusC2SldYGplypwvXn4=
Subject key identifier: 1E:AC:62:30:EA:D2:6C:51:17:17:A0:0C:E7:DA:55:46:F9:B3:4D:E4
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial: 3536
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
Manifest number: 352B
Signing time: Sat 04 Apr 2026 15:13:30 +0000
Manifest this update: Sat 04 Apr 2026 15:13:29 +0000
Manifest next update: Sat 11 Apr 2026 15:13:29 +0000
Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: gmx8ZUHd1Jwq4LvfZKEzMvw366FMrAeDcSAcijk3JxA=)
2: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: Iu3fSi12Z2U9AUNUC1OMiFixkCYrUHtslkvgsswiyxY=)
3: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: TuixmrjJztg/mXQeKBMMqGDhlis8qrixyvnyo1RBaA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13622 (0x3536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Validity
Not Before: Apr 4 15:13:29 2026 GMT
Not After : Apr 11 15:13:29 2026 GMT
Subject: CN=69d12a99-ca2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:c0:ec:b3:6d:5c:56:71:d7:f4:48:32:75:
54:06:51:0d:9f:71:f5:ea:08:78:91:12:82:dc:e8:
fe:15:d1:cd:de:b0:09:01:9f:c6:05:c3:90:5c:52:
6f:54:c6:44:9c:0b:74:25:cc:55:c0:81:09:3c:bb:
df:aa:f9:4f:00:cd:69:de:cf:64:30:7c:13:f4:e4:
6e:33:d5:ba:15:66:b0:c9:1a:64:9e:6e:32:a0:8a:
56:f0:71:14:45:3d:84:50:03:6b:59:b5:d4:83:c7:
f8:bb:a5:10:1a:eb:b6:5c:e0:26:31:90:c1:ef:40:
26:4f:b6:13:66:83:75:94:40:ad:9b:72:32:c7:8f:
f8:82:6f:59:1d:79:de:6d:f9:81:eb:14:a5:81:9d:
a1:16:2c:6d:60:dc:2a:00:92:7d:9f:81:70:48:b9:
f6:f8:26:59:00:fb:3f:5a:5a:84:c3:e9:39:88:31:
02:a7:39:93:d6:78:d6:c8:25:8d:ae:50:2a:00:d5:
82:a1:fb:5b:95:d5:e7:08:c2:84:b2:3c:a9:67:10:
41:55:ce:9d:63:ec:17:5f:28:2d:b0:5e:71:90:f3:
ca:03:fb:69:30:ca:fa:bf:70:10:bf:1e:d7:5b:8f:
64:2f:37:02:4f:d4:15:8c:48:f9:76:87:f9:aa:ed:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AC:62:30:EA:D2:6C:51:17:17:A0:0C:E7:DA:55:46:F9:B3:4D:E4
X509v3 Authority Key Identifier:
keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:59:16:67:46:80:af:a1:ff:11:8b:a3:af:dc:bf:6f:c4:f4:
e3:e3:80:98:31:df:7e:88:02:31:c1:3a:c5:a2:ff:9a:0b:e9:
76:20:56:93:68:5c:4c:ed:fc:7d:50:8e:69:eb:ab:24:c7:b8:
d7:27:e9:3d:8c:fb:ff:de:e5:4e:f5:8f:c3:66:48:7b:11:d9:
b6:a9:68:bf:36:b7:e0:65:fe:71:05:a3:12:8d:f3:76:c3:be:
39:0f:60:90:63:40:19:1f:1c:5e:e3:51:8a:4d:46:6d:d4:fc:
86:d1:98:9e:3f:8d:19:6d:73:a7:a4:f1:dd:04:0d:bc:75:c1:
27:c0:40:4b:60:13:2f:a6:e2:fa:c4:a2:0f:a9:2d:5d:b2:15:
c0:b0:71:71:be:b9:d5:f6:09:5e:2d:b9:f3:8e:96:dd:d9:9c:
7d:e0:9d:4d:bb:96:38:c8:b3:c1:e6:03:6c:c7:f8:b3:ed:e8:
11:be:28:f1:6e:43:6a:7e:12:5a:c6:21:1e:ae:cd:09:aa:40:
69:4f:82:20:5c:99:5f:97:15:ae:b4:d1:af:47:e3:27:55:32:
b9:c6:8e:ad:a2:e2:74:6f:06:37:40:91:30:2e:00:ed:3a:b6:
9b:11:6d:31:9a:10:c3:29:8a:ab:3b:7e:dd:76:a9:ea:dc:0d:
04:cd:54:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM2NkUxMTAvBgNVBAUTKDQ5N0IxQzRFQTZEQjE1QTgzMUZCQzE3MjJBMkY2MzQ3
NDUwQ0YzNDEwHhcNMjYwNDA0MTUxMzI5WhcNMjYwNDExMTUxMzI5WjAYMRYwFAYD
VQQDEw02OWQxMmE5OS1jYTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqLLA7LNtXFZx1/RIMnVUBlENn3H16gh4kRKC3Oj+FdHN3rAJAZ/GBcOQXFJv
VMZEnAt0JcxVwIEJPLvfqvlPAM1p3s9kMHwT9ORuM9W6FWawyRpknm4yoIpW8HEU
RT2EUANrWbXUg8f4u6UQGuu2XOAmMZDB70AmT7YTZoN1lECtm3Iyx4/4gm9ZHXne
bfmB6xSlgZ2hFixtYNwqAJJ9n4FwSLn2+CZZAPs/WlqEw+k5iDECpzmT1njWyCWN
rlAqANWCoftbldXnCMKEsjypZxBBVc6dY+wXXygtsF5xkPPKA/tpMMr6v3AQvx7X
W49kLzcCT9QVjEj5dof5qu3x9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6sYjDq
0mxRFxegDOfaVUb5s03kMB8GA1UdIwQYMBaAFEl7HE6m2xWoMfvBciovY0dFDPNB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2RS9ERDQ1NUNEQTFE
QTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZhZ3gtOEZ5S2k5alIwVU04
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NYc2NUcWJiRmFneC04RnlLaTlqUjBVTTgwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzY2RS9ERDQ1NUNEQTFEQTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZh
Z3gtOEZ5S2k5alIwVU04MEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn1kWZ0aAr6H/EYujr9y/b8T04+OAmDHffogCMcE6xaL/mgvpdiBWk2hcTO38
fVCOaeurJMe41yfpPYz7/97lTvWPw2ZIexHZtqlovza34GX+cQWjEo3zdsO+OQ9g
kGNAGR8cXuNRik1GbdT8htGYnj+NGW1zp6Tx3QQNvHXBJ8BAS2ATL6bi+sSiD6kt
XbIVwLBxcb651fYJXi25846W3dmcfeCdTbuWOMizweYDbMf4s+3oEb4o8W5Dan4S
WsYhHq7NCapAaU+CIFyZX5cVrrTRr0fjJ1UyucaOraLidG8GN0CRMC4A7Tq2mxFt
MZoQwymKqzt+3Xap6twNBM1UAQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:33:58 2026 by rpki-client