
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
File: sxbAG3t1QxTi8Y9zen19iayrfmg.mft (raw, json)
Hash identifier: f3YzNiTZ44+htvN/a4+1MplkdH6+pD3OcBADY/mMTaE=
Subject key identifier: 18:02:58:9A:8D:F4:B2:8D:67:53:3B:22:58:31:2C:09:08:87:38:2D
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
Manifest number: AC
Signing time: Wed 23 Sep 2026 07:06:49 +0000
Manifest this update: Wed 23 Sep 2026 07:06:49 +0000
Manifest next update: Wed 30 Sep 2026 07:06:49 +0000
Files and hashes: 1: sxbAG3t1QxTi8Y9zen19iayrfmg.crl (hash: bGrPRcQAMnVfQGcu+5+3Mso0Qf3/quWCkGtRnhTJm2s=)
2: 8BB48B56CCFB11F0B624EC45C4F9AE02.roa (hash: idkvQzFYbdsBSjCaqZAU9RiEXtrOEJOl+VsJAR0ESu4=)
3: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (hash: QrH4+yF/QV8+PWn2diJ35OJkx405jDujszCVYOanSfQ=)
4: 2601F1CEEB7111F0839E97F34E6F56BC.roa (hash: o3eQkFa5jtvSJm8EBegehGZ2Pgp62KSE/WHa6T+g7zc=)
5: A8F5E5EE21BE11F183C1AD111C3D8C67.roa (hash: Ieln71UjZ6UVyBBDQ/jNR5EcXnNAYyh6zzX3XZ/UHBM=)
6: F715DFB6F58D11F0BCCF7FE5756F56BC.roa (hash: WffA2epMcf/4JtgYGOrtunzCtgpaDBD29cCesds3GwQ=)
7: F6921460F58D11F0BCCF7FE5756F56BC.roa (hash: i5A7HWZGNtrSFGme8+cE96qqxQwsNoTCyoGxwxhU1Wk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Validity
Not Before: Sep 23 07:06:49 2026 GMT
Not After : Sep 30 07:06:49 2026 GMT
Subject: CN=6ab37a89-7ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:f4:d7:ef:9c:9a:c6:a7:49:38:87:b0:c3:
ab:05:14:ab:19:62:1b:76:35:4a:dd:e0:f8:b5:43:
80:2b:70:9e:a9:14:fb:d1:e8:7c:6d:41:88:38:de:
c7:80:eb:a0:8d:38:57:f0:33:e5:df:16:8b:44:ab:
8c:c7:37:39:cb:d4:c1:b9:19:52:80:b5:ee:b1:2c:
3b:dd:c0:18:47:55:24:7a:f0:0e:12:1e:2a:29:d3:
27:e6:14:58:d0:29:7c:84:4e:9c:d5:b3:ae:bf:29:
1c:61:13:4e:ca:8c:b6:f6:ae:7e:88:32:f4:5d:57:
bf:f0:1e:bd:c6:b8:a8:95:75:18:96:6c:a1:12:1e:
8c:81:06:65:7d:64:3d:73:54:54:88:db:e6:ea:6a:
87:b6:32:43:9e:45:79:ab:15:13:27:85:7b:14:cf:
e9:3f:ed:6f:42:9a:a5:48:49:ea:af:ad:5b:dd:5a:
6c:b1:dd:12:26:6b:30:4f:7b:fe:ed:a1:33:5e:83:
e7:ec:1b:95:ce:95:6c:5e:3d:ef:a6:50:ba:de:0b:
1e:4e:d9:8b:ff:9c:88:39:3a:b9:c3:d3:72:53:3a:
4b:78:3e:7e:4a:51:ee:a4:db:53:72:8c:c2:5a:b1:
a0:f4:4a:c8:3c:20:8a:ad:ff:63:93:60:40:56:1a:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:58:9A:8D:F4:B2:8D:67:53:3B:22:58:31:2C:09:08:87:38:2D
X509v3 Authority Key Identifier:
keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:bc:47:9e:2a:c7:2d:55:8f:29:f6:da:67:09:24:38:f0:88:
3a:6d:ad:46:a7:ec:02:14:3f:e2:81:f2:b8:f9:da:98:1a:f7:
ea:cf:9e:36:84:a8:70:45:35:09:ef:2a:a7:8a:3b:cd:a3:4a:
d7:d4:62:54:cc:8f:4f:94:88:a9:f0:92:e5:fe:69:07:0d:ac:
e4:ce:fa:88:ee:4f:9a:0b:12:39:c0:ba:0a:aa:25:99:f5:f2:
ca:3b:46:bd:6d:80:40:3a:85:66:5a:6c:64:da:21:78:27:89:
98:bd:c4:c3:2c:03:6b:c0:c0:39:c4:ff:fc:40:4b:84:7c:99:
72:19:c4:1e:82:e5:c9:96:31:d1:26:1b:bf:cf:a5:15:58:96:
15:6f:ab:3c:c6:c0:af:85:a9:e3:b0:3b:e7:19:0c:0d:8e:c7:
68:c8:82:6a:2c:4a:6a:cd:07:48:0b:09:67:dd:fc:01:44:fd:
66:f1:02:a1:d5:32:4d:36:c7:64:c2:3e:cc:46:76:22:7f:75:
8f:1d:23:41:90:d9:b2:39:c4:53:2c:d1:17:af:ce:48:d1:ff:
85:da:5e:af:bd:a0:80:86:dd:5c:51:24:0a:52:13:6a:2f:70:
e8:fd:b7:bf:f2:7a:f0:7a:59:a1:7a:82:70:9d:5c:c1:f1:cf:
d5:f5:00:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDk4M0IxMTAvBgNVBAUTKEIzMTZDMDFCN0I3NTQzMTRFMkYxOEY3MzdBN0Q3RDg5
QUNBQjdFNjgwHhcNMjYwOTIzMDcwNjQ5WhcNMjYwOTMwMDcwNjQ5WjAYMRYwFAYD
VQQDEw02YWIzN2E4OS03ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmjb01++cmsanSTiHsMOrBRSrGWIbdjVK3eD4tUOAK3CeqRT70eh8bUGION7H
gOugjThX8DPl3xaLRKuMxzc5y9TBuRlSgLXusSw73cAYR1UkevAOEh4qKdMn5hRY
0Cl8hE6c1bOuvykcYRNOyoy29q5+iDL0XVe/8B69xriolXUYlmyhEh6MgQZlfWQ9
c1RUiNvm6mqHtjJDnkV5qxUTJ4V7FM/pP+1vQpqlSEnqr61b3Vpssd0SJmswT3v+
7aEzXoPn7BuVzpVsXj3vplC63gseTtmL/5yIOTq5w9NyUzpLeD5+SlHupNtTcozC
WrGg9ErIPCCKrf9jk2BAVhq2VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBgCWJqN
9LKNZ1M7IlgxLAkIhzgtMB8GA1UdIwQYMBaAFLMWwBt7dUMU4vGPc3p9fYmsq35o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTgzQi9ERkFGOTk5MkND
MDMxMUYwQjFFMjVCNDFDNEY5QUUwMi9zeGJBRzN0MVF4VGk4WTl6ZW4xOWlheXJm
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N4YkFHM3QxUXhUaThZOXplbjE5aWF5cmZtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTgzQi9ERkFGOTk5MkNDMDMxMUYwQjFFMjVCNDFDNEY5QUUwMi9zeGJBRzN0MVF4
VGk4WTl6ZW4xOWlheXJmbWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKbxHnirHLVWPKfbaZwkkOPCIOm2tRqfsAhQ/4oHyuPnamBr36s+eNoSocEU1
Ce8qp4o7zaNK19RiVMyPT5SIqfCS5f5pBw2s5M76iO5PmgsSOcC6CqolmfXyyjtG
vW2AQDqFZlpsZNoheCeJmL3EwywDa8DAOcT//EBLhHyZchnEHoLlyZYx0SYbv8+l
FViWFW+rPMbAr4Wp47A75xkMDY7HaMiCaixKas0HSAsJZ938AUT9ZvECodUyTTbH
ZMI+zEZ2In91jx0jQZDZsjnEUyzRF6/OSNH/hdper72ggIbdXFEkClITai9w6P23
v/J68HpZoXqCcJ1cwfHP1fUAXQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:26:40 2026 by rpki-client