
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File: u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier: zKY2dcZJ1vhI4kTcu5BBKMoiFg3vGWNa9Bg0ON9+v1M=
Subject key identifier: 81:E4:7E:AE:DF:87:A5:6F:00:04:3F:15:96:F7:18:A0:60:68:B3:33
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial: 0937
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number: 091A
Signing time: Mon 02 Mar 2026 20:06:54 +0000
Manifest this update: Mon 02 Mar 2026 20:06:53 +0000
Manifest next update: Mon 09 Mar 2026 20:06:53 +0000
Files and hashes: 1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: J6BBCYntDRN4NdeHnLMVnlCetEs3PLeUn85C8lvuR+o=)
2: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: J5TlVE9TaJMgIGEY3wJEZY2JAbPuoZdGlfLWjr6sNVQ=)
3: 660823EABF3C11EAAF328582C4F9AE02.roa (hash: 0g7hH+h0wqgO5cXR1NqKAhi3KI5E1WOC5tykieUczg0=)
4: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: S1YQDpfRZfYWxWzS0yYZYUtJLVH3RsmKcbHcWJLLIjw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 20:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2359 (0x937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Validity
Not Before: Mar 2 20:06:53 2026 GMT
Not After : Mar 9 20:06:53 2026 GMT
Subject: CN=69a5eddd-ad20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:04:e6:99:c3:99:85:89:35:1d:4c:11:d8:
21:f1:d8:3e:91:95:f7:22:94:0f:9e:3b:97:39:5d:
6c:51:50:5e:39:44:b9:3a:71:92:72:1e:63:2e:ec:
a1:3b:fb:0c:d2:2d:32:fe:17:0d:e0:f6:b8:12:d9:
eb:8e:cc:2d:4e:0b:af:b3:03:77:f8:58:93:7e:c2:
e5:bd:cb:03:08:4d:e4:f5:f8:1c:4d:e9:26:8a:fd:
a1:96:08:ea:20:20:18:d3:b7:2e:1d:41:24:93:c2:
6d:dc:58:90:34:be:46:fb:b2:0b:0f:7d:16:a3:1a:
2d:b8:35:ed:dd:00:5f:66:3a:7d:82:6f:65:24:fb:
62:b5:fb:b5:3e:93:8c:28:48:52:a0:3f:db:3d:16:
b9:6c:34:a5:a5:d8:fb:0b:30:46:f4:99:4a:bf:43:
65:08:f2:09:d9:ff:1b:aa:21:4c:56:4f:04:25:ab:
80:56:20:af:a3:18:6c:2d:b7:26:35:41:0d:fa:78:
85:e5:28:e3:ae:9a:a8:00:ea:78:1b:7f:89:90:ce:
02:1e:91:84:75:d1:b7:a5:a1:e1:56:c4:7d:18:c2:
9d:5e:a9:89:e7:f8:f1:07:d4:60:e1:4d:eb:78:b2:
0d:46:60:bd:8c:a1:b3:3b:f9:ae:54:43:98:2f:58:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E4:7E:AE:DF:87:A5:6F:00:04:3F:15:96:F7:18:A0:60:68:B3:33
X509v3 Authority Key Identifier:
keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:51:3b:a9:68:f5:82:e6:b1:a9:6e:3e:e3:41:1c:da:90:48:
2d:a2:40:b6:5c:5a:45:3c:e3:30:50:01:eb:8a:c2:5d:ec:eb:
43:e0:a2:0e:80:a6:53:04:d9:ba:07:3e:2f:a4:71:e8:8a:8f:
4a:6a:54:65:01:e8:b4:b1:1b:ce:5f:23:0e:a8:39:4a:35:86:
61:3a:f5:4e:69:74:0a:a9:ac:ef:d5:ae:cd:ff:48:71:3f:33:
59:2c:11:b6:e9:9f:60:fd:09:17:f8:d1:d2:22:52:9c:9a:36:
02:23:ec:31:ec:38:32:e7:85:be:41:99:2e:7e:58:f4:b8:13:
0f:44:96:81:0f:6c:25:e7:e3:1e:37:ab:81:bf:19:2f:27:7f:
5f:8a:2a:2e:80:ca:2a:13:d5:c1:ce:05:2f:6d:43:a9:d8:60:
f8:99:b1:c1:60:b3:af:f8:18:7b:26:d2:bf:d5:83:b5:23:76:
63:97:83:bd:d1:d0:4c:da:d9:38:b7:e3:59:4e:21:84:8e:3b:
c7:f0:34:02:33:83:50:3c:2a:fb:6f:63:d6:40:69:86:14:30:
7d:fd:33:4b:15:44:d9:4c:86:f8:fe:9e:d0:74:26:4b:6c:5f:
b8:ca:46:36:7b:d6:93:db:4a:46:0a:13:0b:1c:fd:43:a2:49:
ec:f6:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 23:56:09 2026 by rpki-client