
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
File: sBO5crQspa2fahYr87XHT5M8HgU.mft (raw, json)
Hash identifier: E8v1aRYANxgDXz26Etd4/8Ak+n5/MQOk/iGszLUdzCY=
Subject key identifier: E3:12:8F:C6:88:11:D0:6A:11:1A:A4:B8:84:FB:85:58:91:41:70:82
Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
Certificate issuer: /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Certificate serial: 068F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
Manifest number: 0681
Signing time: Tue 06 Oct 2026 22:40:01 +0000
Manifest this update: Tue 06 Oct 2026 22:40:01 +0000
Manifest next update: Tue 13 Oct 2026 22:40:01 +0000
Files and hashes: 1: sBO5crQspa2fahYr87XHT5M8HgU.crl (hash: eK0Y0XvSx3LWr8gtjiZdjATvcaEW03OuR0ebLbyX4nY=)
2: 5334D20CDA5E11EBA323F462C4F9AE02.roa (hash: wpTOnbFzHuZykJ8pDXVXmzxxqZkD4nI9a0iplVk0s2M=)
3: 53AD6F32DA5E11EBA323F462C4F9AE02.roa (hash: cye1hIVFGwa2LCmeYD2ib4pZaHJ8xh8Jr5cItjYasmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1679 (0x68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2B66, serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Validity
Not Before: Oct 6 22:40:01 2026 GMT
Not After : Oct 13 22:40:01 2026 GMT
Subject: CN=6ac578c1-4d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:0f:9d:de:aa:94:6b:58:0a:6d:fc:06:52:
54:3f:3d:3a:19:0c:e3:db:9b:6d:70:23:2e:0f:72:
b1:e0:86:c7:17:20:8a:42:da:26:81:f3:d4:4a:5a:
ab:03:b0:fc:47:5f:57:ed:06:71:b5:c3:a2:b8:a3:
3f:97:4f:83:e8:08:1d:98:46:86:fa:cc:e0:3e:76:
81:31:e7:e1:db:b6:3c:4b:01:29:fa:d5:63:11:08:
6e:4f:5c:da:cb:1a:21:e6:b6:8e:2f:35:db:d1:40:
5b:8f:2e:d3:f4:f9:c1:4e:21:e7:54:25:a8:0f:f3:
0c:1c:64:4b:3d:ba:ad:8c:a0:66:8f:3d:9c:8a:f5:
37:dc:6d:f9:97:ea:dd:c6:e2:7a:bb:63:5b:ef:52:
79:48:28:c6:a2:f3:24:fe:26:48:ba:8f:73:2a:1c:
aa:c9:92:6c:5e:67:84:2c:00:5b:c5:7e:8b:a6:82:
6e:1b:f3:84:28:27:06:64:1f:e9:bf:c8:f7:2b:25:
0f:87:a2:5b:01:d8:ad:f2:c0:1e:84:45:78:a0:51:
48:00:13:14:15:89:2a:ca:fe:83:d6:c4:76:5b:25:
be:94:9c:09:6f:e3:9b:57:de:01:0f:56:2d:c9:46:
41:77:0c:04:6e:2e:f6:57:d6:88:a2:51:60:7c:50:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:12:8F:C6:88:11:D0:6A:11:1A:A4:B8:84:FB:85:58:91:41:70:82
X509v3 Authority Key Identifier:
keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1c:54:26:9f:76:f1:b9:06:00:60:e2:85:5a:52:61:37:39:
aa:75:15:da:9c:5a:d2:07:bb:f1:a6:42:1a:bb:e6:8e:12:06:
e6:0b:a7:52:e8:40:27:46:05:fb:9d:8d:b0:ee:bd:60:6c:40:
f1:54:5b:51:b4:6f:c0:1a:e5:4c:8e:db:ac:0c:a8:ac:9b:ec:
f3:05:7b:93:2e:50:30:2e:a1:50:c3:da:3c:35:c9:5e:f5:2e:
44:6f:0b:27:d6:d4:e0:9a:06:b1:cb:38:ad:4a:33:0c:26:bc:
db:6d:ae:75:e4:9a:21:d9:93:98:b8:bd:86:97:f8:07:52:25:
b2:2f:90:e8:8d:01:09:80:ff:42:fa:6c:7d:77:d5:86:b3:e9:
ff:32:e5:dd:01:dc:97:a3:c5:7a:19:c2:ef:a2:9a:5c:a2:d8:
55:70:7c:af:63:f9:68:50:08:20:c1:87:d2:01:b3:5c:7b:2b:
17:7e:85:51:68:1d:30:5e:22:cc:d1:aa:b4:17:ba:75:08:d4:
96:7e:e9:55:a2:b4:96:ee:3e:22:36:6c:93:a6:0a:d4:b9:2b:
5a:3f:39:26:2d:d3:3c:f0:ab:10:fb:2f:60:38:0a:14:b0:82:
70:de:38:79:0e:ed:a7:75:4f:90:e2:5e:6d:9d:bd:2d:6d:4f:
b7:ab:94:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:08:45 2026 by rpki-client