
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json)
Hash identifier: AO+32wSfVGVPyUfwcjMpht8rgpIYHGCV5Rb+9KZ0lyY=
Subject key identifier: 78:74:43:0D:9E:AE:CF:25:BD:04:D9:BF:2D:8A:0F:5B:58:75:E1:85
Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30
Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730
Certificate serial: 21CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
Manifest number: 2DA2
Signing time: Sun 04 Oct 2026 15:54:36 +0000
Manifest this update: Sun 04 Oct 2026 15:54:35 +0000
Manifest next update: Sun 11 Oct 2026 15:54:35 +0000
Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: gfC7171/4SOdI8IRHV9/pNX6AAH/N7pdH6WZujv2LHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl
rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8651 (0x21cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730
Validity
Not Before: Oct 4 15:54:35 2026 GMT
Not After : Oct 11 15:54:35 2026 GMT
Subject: CN=6ac276bb-4b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1f:f1:3f:8b:0a:66:fd:c1:c3:46:62:8b:9c:
95:85:22:de:16:37:3a:97:35:3e:21:65:0b:58:fd:
f1:bf:52:85:36:d5:c5:00:8d:81:3d:76:7d:fa:73:
f9:d9:e9:36:7e:d1:e4:24:84:bf:c9:e3:68:db:5e:
4f:87:b1:34:c4:cf:37:aa:7b:ba:12:8b:4b:9a:36:
2e:1e:31:0f:d5:fe:ae:ce:ae:83:b7:7c:05:0e:99:
a5:ac:53:73:7b:96:e7:71:42:d8:fd:62:47:22:7a:
35:43:1c:98:4d:5a:28:e9:be:61:08:3f:b6:28:9f:
71:cc:d2:36:3b:c2:96:95:f8:1b:e4:96:66:64:49:
b2:e9:71:c8:4c:0f:fd:1c:17:f5:2e:3c:cf:cf:e8:
1d:8e:b1:c5:42:25:38:30:18:22:af:aa:91:af:5d:
12:4b:d1:72:e0:5b:63:32:0c:5c:3c:a2:ee:74:55:
83:a0:8a:82:1d:60:c5:52:00:48:c1:c3:04:61:a1:
c1:64:27:b5:b2:d4:04:0f:1e:dc:1a:10:71:1b:8d:
95:03:2c:f3:ad:71:48:a1:02:25:cc:59:88:70:7c:
d8:f5:61:c8:67:a4:8b:37:eb:17:d9:75:4f:ef:00:
b2:aa:16:91:fb:56:ce:2e:01:a7:24:73:f6:7d:df:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:74:43:0D:9E:AE:CF:25:BD:04:D9:BF:2D:8A:0F:5B:58:75:E1:85
X509v3 Authority Key Identifier:
keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:8d:d1:91:1f:91:b4:e8:ef:40:09:14:58:05:23:7b:22:38:
1e:c6:f5:19:5b:08:ed:81:38:b4:02:8a:52:16:78:8c:5d:15:
be:7c:d2:a8:ad:05:69:fd:c0:6f:a8:58:6b:ce:4e:72:f4:46:
1c:dd:75:7f:bf:be:2d:f3:50:34:73:d2:8b:b8:06:83:44:62:
52:f9:b0:49:3b:6e:77:c1:3d:a0:21:aa:07:c3:a4:80:61:0e:
2d:1b:0f:34:e9:e1:ec:a8:8f:24:90:f7:71:81:29:04:c3:72:
c9:b2:03:41:88:52:5a:ea:2f:df:39:72:c1:97:24:b0:0c:4f:
38:35:c8:44:a4:56:14:35:df:ac:e0:be:23:57:2e:83:8a:cb:
18:0a:17:f1:95:07:87:c6:1c:55:26:4f:19:d1:0a:cc:16:f2:
bf:2a:e6:52:72:17:39:e9:ea:78:27:5d:ba:ac:00:f4:32:ea:
ad:0e:78:a6:d9:7d:ae:93:fa:64:42:2f:10:32:47:7c:ee:a5:
c6:24:6a:6b:c4:d4:b2:da:7a:59:53:46:20:04:2a:52:b5:7a:
91:a4:74:e6:ec:fe:35:fb:96:76:6f:69:7c:a9:88:94:ef:1c:
e4:8f:84:8a:01:84:fb:bb:05:aa:56:7f:41:55:de:23:86:39:
5e:5c:e3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 01:15:42 2026 by rpki-client