
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json)
Hash identifier: B8yd3yNLKmWRMvkDWB9MXmpytZ7uwk4fQNmdhC3ODdM=
Subject key identifier: 64:A7:E2:80:EE:A9:B8:66:8B:3B:60:AB:95:32:EB:E0:40:72:AE:5F
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial: 355E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
Manifest number: 3553
Signing time: Mon 22 Jun 2026 15:14:56 +0000
Manifest this update: Mon 22 Jun 2026 15:14:56 +0000
Manifest next update: Mon 29 Jun 2026 15:14:56 +0000
Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: sIRYqaMF0HzCRmKNY1LFRXiGcCdod70LcwsilEGq/u8=)
2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: TuixmrjJztg/mXQeKBMMqGDhlis8qrixyvnyo1RBaA0=)
3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: Iu3fSi12Z2U9AUNUC1OMiFixkCYrUHtslkvgsswiyxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 15:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13662 (0x355e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Validity
Not Before: Jun 22 15:14:56 2026 GMT
Not After : Jun 29 15:14:56 2026 GMT
Subject: CN=6a395170-3f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:b2:f7:7f:05:2f:f4:7e:eb:13:15:a1:ea:
5b:9d:3b:a3:63:a9:57:ba:92:8e:ff:75:c7:ef:72:
8b:46:4a:82:5e:e7:f8:c7:d9:6c:7c:18:2e:fb:c2:
1a:11:30:a9:22:66:f4:94:af:55:c9:fe:90:9c:e5:
57:10:41:e3:fe:df:e2:be:d3:3f:38:d3:c6:ee:f3:
b5:87:1c:26:6f:57:ae:9c:dd:ec:cd:aa:78:84:78:
3d:21:05:51:15:23:af:e9:16:62:0c:69:2c:95:21:
61:4f:74:27:40:91:4c:c7:78:7d:78:5a:42:39:4d:
78:f5:af:30:92:a7:97:7f:a2:a5:3f:39:a5:98:2d:
93:e2:53:78:ad:4a:e4:4f:ea:57:4b:fe:14:0d:b7:
dd:7f:8f:f6:24:77:01:04:a1:37:91:93:e6:ce:41:
fa:fc:fd:a1:72:5b:24:3b:f0:d7:56:8b:d2:f3:1b:
b6:e5:f4:ab:07:4c:ea:f7:81:ba:47:6b:f2:09:48:
99:36:65:e3:4a:f9:d7:9a:c0:17:76:82:8b:6b:02:
0b:6f:e1:e6:2b:20:ed:86:55:44:a8:5c:2b:c1:21:
e6:39:c2:a1:18:45:1a:99:88:5f:d0:07:8a:a3:cf:
ad:20:60:e0:40:8b:0d:a1:b7:f1:80:ad:eb:11:31:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A7:E2:80:EE:A9:B8:66:8B:3B:60:AB:95:32:EB:E0:40:72:AE:5F
X509v3 Authority Key Identifier:
keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b3:69:18:0c:8a:7e:8b:4f:a8:a7:35:2a:d4:38:2e:0a:8b:
c9:a2:45:e6:cc:e3:4c:38:f8:8e:69:22:96:c9:65:3b:6e:2e:
98:cc:39:0e:d3:0b:24:f6:83:20:03:f6:8e:b2:f1:2e:de:56:
0b:c0:8f:b2:ab:d2:40:d4:21:fc:6f:58:31:69:28:35:06:55:
68:27:53:b1:46:db:a8:06:5d:66:a2:6e:e9:18:d0:58:76:21:
c7:fe:e9:bb:e6:33:92:a1:45:71:2a:00:e8:94:61:11:58:33:
a7:7e:24:89:38:be:7c:70:f1:51:d6:17:78:f6:ba:14:1f:20:
49:b2:3f:24:ce:1b:94:05:be:95:6d:ba:73:ef:08:66:cb:29:
30:ee:56:9b:61:f4:8a:be:7a:b5:d4:2f:2e:6c:17:4a:9e:80:
c2:34:52:0a:1d:55:26:17:32:15:af:41:86:96:9f:d9:e1:f4:
4c:6e:cf:0f:f5:c3:32:b9:cb:30:6d:a1:b6:aa:d6:a0:67:72:
e3:63:e1:0c:0e:63:57:a4:bb:a5:22:5d:54:9a:0b:21:26:77:
fe:f0:93:9d:47:d7:1a:60:51:38:bd:07:02:bf:2a:23:2c:eb:
53:49:a3:de:18:59:f3:0d:c7:3e:6d:9a:2f:35:44:4e:cb:a0:
cc:ab:97:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:13:17 2026 by rpki-client