
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
File: SDhChq65tguzQoR_K6dhL4TbQ7I.mft (raw, json)
Hash identifier: a2y+mpqEQHA7CUFaQkq08mV0WA6oiIKeabNEbuHPF1U=
Subject key identifier: 75:E4:9A:44:62:3D:61:EA:EF:52:1A:54:61:12:93:78:4D:59:0E:72
Authority key identifier: 48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
Certificate issuer: /CN=A91E6369/serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
Manifest number: 90
Signing time: Sun 25 Oct 2026 08:05:13 +0000
Manifest this update: Sun 25 Oct 2026 08:05:13 +0000
Manifest next update: Sun 01 Nov 2026 08:05:13 +0000
Files and hashes: 1: SDhChq65tguzQoR_K6dhL4TbQ7I.crl (hash: RIHMf4YyUwI+PXSC5Ozp5tK54W4wGoC4/McWB3xa8i0=)
2: F85CEC2417BC11F1A40B39FC393D8C67.roa (hash: Lk3LIKj/GiDK4MdOByMKxwMl2tprlDsVLGGIsH3ZkXM=)
3: 5CCD0A3C186B11F1A49ED6DE323D8C67.roa (hash: /T0qY7CsRtoFS+lodVUIgOp2mv9nPTD25O9ozCsvMyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl
rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6369, serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
Validity
Not Before: Oct 25 08:05:13 2026 GMT
Not After : Nov 1 08:05:13 2026 GMT
Subject: CN=6addb839-386e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:7b:24:05:7e:c3:d9:96:49:cc:f1:f4:78:
30:cc:69:43:36:63:64:2f:16:81:a6:ec:4b:50:5c:
a4:9f:b7:5c:d9:92:c6:93:ea:ab:be:5c:93:7a:93:
30:e1:f2:37:6f:db:81:ec:e5:5b:9d:33:69:92:b3:
9d:56:b7:08:c2:43:08:4f:08:84:cb:bf:75:b1:d6:
67:a4:b7:6d:86:30:ae:f9:b2:22:c2:c7:5d:90:e6:
f2:ba:13:af:61:3b:17:34:f1:56:7d:34:ee:9e:13:
6c:ac:0f:4a:c6:64:3f:b8:6a:32:c8:62:86:97:ea:
9a:e7:fd:49:d3:e2:78:77:71:eb:23:28:df:0d:33:
e1:02:2b:ef:97:ff:f1:ad:d5:c0:03:b9:49:18:0a:
64:40:96:4e:80:d8:7c:cf:65:0c:d0:c1:1c:bd:fe:
24:10:00:e1:01:63:e9:ec:9c:f8:cb:d9:48:60:f2:
fe:b5:8e:1a:69:46:43:39:64:3a:dc:5c:89:7f:df:
69:a6:c9:7d:77:25:d4:d9:33:c6:cf:52:d8:79:72:
e9:be:a1:79:d1:dd:c0:d1:4a:b8:73:b2:17:9c:4b:
b1:37:7d:46:3f:18:f1:bb:5c:9d:31:b5:33:2d:63:
37:25:60:98:b1:d1:3c:df:91:03:09:68:ce:05:8e:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E4:9A:44:62:3D:61:EA:EF:52:1A:54:61:12:93:78:4D:59:0E:72
X509v3 Authority Key Identifier:
keyid:48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:3e:19:e4:69:74:ec:fe:ec:7f:ce:d8:60:d7:2b:6c:57:37:
eb:7a:35:6d:d7:c9:c0:10:03:20:b8:7a:e9:9e:b1:af:59:01:
3d:8b:42:1e:c2:39:53:50:a7:f1:58:e4:d3:d0:59:11:62:2d:
60:3a:84:5a:d4:2b:27:21:33:5d:60:90:85:99:d2:4d:07:a8:
4c:8e:c3:49:de:12:aa:81:5d:57:28:2c:02:42:f3:84:33:75:
83:11:47:a7:02:75:67:44:ba:2c:80:9d:d8:75:83:f1:24:b8:
4a:58:07:9f:38:18:52:14:84:c8:cd:6a:f8:c7:1e:d8:97:43:
13:90:e6:b8:e5:b6:96:8d:65:74:ad:53:8e:d0:aa:89:88:a6:
d3:3a:e2:1d:de:89:3e:b0:51:72:ba:a9:7f:87:78:01:ec:41:
94:0a:af:82:e1:3e:dc:81:c1:6b:7c:21:02:f4:87:7b:77:b8:
94:d9:72:6c:c1:0c:5a:6c:12:f9:38:14:37:88:40:37:39:a5:
ea:85:6b:31:3e:c4:65:a5:d8:ef:cd:1b:d3:10:e8:a2:6f:c3:
5a:8e:31:34:20:4b:be:5c:bb:f6:fe:80:68:e0:ec:8e:db:e0:
2a:fe:e5:14:e0:04:c9:51:9c:ef:cf:a0:94:4d:db:29:48:59:
bf:2a:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:08:59 2026 by rpki-client