
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json)
Hash identifier: MYrB7ZRYNu5tcUKMsH1XwCsvYZGKWx8Su1S+v1IScf8=
Subject key identifier: E9:52:EF:F4:62:DE:D9:51:1A:93:20:A5:EA:B8:28:37:75:57:A3:8B
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial: 3593
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
Manifest number: 3588
Signing time: Sun 04 Oct 2026 15:15:37 +0000
Manifest this update: Sun 04 Oct 2026 15:15:37 +0000
Manifest next update: Sun 11 Oct 2026 15:15:37 +0000
Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: fBLYa8HdrT2pxxGtetbN+/ew6eODndJgZrEZCppzQAg=)
2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: TuixmrjJztg/mXQeKBMMqGDhlis8qrixyvnyo1RBaA0=)
3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: Iu3fSi12Z2U9AUNUC1OMiFixkCYrUHtslkvgsswiyxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13715 (0x3593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Validity
Not Before: Oct 4 15:15:37 2026 GMT
Not After : Oct 11 15:15:37 2026 GMT
Subject: CN=6ac26d99-a43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:22:b6:be:f9:4f:ae:cc:2f:1f:db:88:4d:
bb:5c:7d:3c:5f:2c:3b:b2:bb:36:ca:cc:6d:f7:84:
ad:24:19:7e:f9:e8:47:ca:ce:2a:b9:53:40:21:a1:
08:71:d0:88:98:67:17:92:85:d7:fe:a8:c4:b1:ec:
41:34:5f:17:7d:c8:d5:13:31:74:91:50:38:a4:c5:
1a:ed:74:14:fe:ce:05:dc:a2:97:0a:f3:e5:46:94:
da:d9:0d:e7:81:21:3e:96:0e:bd:83:a5:7b:0b:6f:
e7:39:d5:0d:f0:68:a0:13:94:4b:90:1b:b2:9b:01:
69:a2:25:41:b5:52:27:73:33:e5:f5:64:b7:55:ff:
9b:64:ac:07:ba:d9:13:a7:49:36:a1:a4:a9:15:35:
4e:06:45:4c:f0:ef:ba:c9:6d:46:c3:9c:0d:89:18:
06:af:af:30:3a:37:3c:54:35:13:c2:fa:13:35:01:
9a:66:6d:72:77:63:6d:17:87:3a:2f:92:44:62:91:
db:9f:5f:37:25:ff:d6:ca:22:c3:1e:9c:31:26:ed:
7a:96:67:4b:ef:6b:93:43:5a:35:d0:ff:9a:dd:c3:
64:69:96:a3:11:f3:a8:d3:3a:24:ac:a0:da:70:db:
7c:63:dc:65:83:31:2e:3e:4f:9a:c3:93:22:70:5d:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:52:EF:F4:62:DE:D9:51:1A:93:20:A5:EA:B8:28:37:75:57:A3:8B
X509v3 Authority Key Identifier:
keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:9d:b9:c1:36:5d:a7:b1:e4:6e:a9:e5:66:66:49:97:16:e0:
b3:ac:71:50:38:3b:d6:30:74:a8:e9:5b:ad:fe:e8:fc:5a:65:
c4:19:99:03:ec:a1:e4:cd:94:cc:d7:cb:e9:df:e8:d3:cb:9f:
09:f5:9f:ec:f9:9e:ef:92:7e:4b:88:65:54:08:8b:3a:df:4c:
60:24:5f:85:d0:55:d1:a5:fa:a1:45:98:ea:f0:5c:83:90:f9:
b2:51:93:07:63:02:8f:d3:d5:3e:c8:8d:5c:4d:3e:b1:c8:5f:
f1:eb:60:41:db:b0:90:5f:12:43:16:ae:06:c3:58:90:ce:19:
dd:d7:7b:56:c9:66:e8:c6:60:ba:ba:17:2b:72:76:ad:92:f3:
75:53:4c:15:f0:df:ec:ea:36:d2:eb:28:05:2d:ee:4e:2f:8c:
f8:af:73:9e:4e:ed:ce:db:8a:18:d9:f4:dd:ab:60:23:f9:bc:
3f:80:7e:11:78:45:ee:e9:e9:54:03:2a:ae:22:dc:05:08:4b:
db:c2:1e:2a:8a:ae:85:06:6f:b2:6f:53:78:84:07:83:69:d0:
73:47:c2:fe:19:6a:d9:74:b8:d6:73:86:71:a5:33:68:d0:04:
67:3b:39:1d:05:db:32:cd:6b:cd:67:38:67:62:b7:9a:ed:43:
d4:09:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:12:54 2026 by rpki-client