
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
File: sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json)
Hash identifier: KmbqsrYrc35QLRBUmd+GuWTNulMJ74cE4z06nEwAZKs=
Subject key identifier: 35:F2:63:F5:57:40:67:9A:E9:78:09:30:3B:80:2A:42:4B:F5:E5:E4
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Certificate issuer: /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial: 088A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
Manifest number: 087E
Signing time: Tue 06 Oct 2026 20:58:31 +0000
Manifest this update: Tue 06 Oct 2026 20:58:31 +0000
Manifest next update: Tue 13 Oct 2026 20:58:31 +0000
Files and hashes: 1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: jji4c5eyU+kdHlZR2a2g0tLCl/CsehF4Lf6i8NHuIfY=)
2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: FMhnIc90pddEzGL9zAFu7bvMU2fnCMfZT1efmQrFywk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Validity
Not Before: Oct 6 20:58:31 2026 GMT
Not After : Oct 13 20:58:31 2026 GMT
Subject: CN=6ac560f7-e77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:fe:64:17:9a:18:b7:90:0b:a3:01:30:db:
ea:77:88:1e:29:90:bb:2a:61:21:fa:39:eb:ad:5e:
3c:9c:30:99:54:6b:e7:e0:72:9b:7f:f9:8e:47:1b:
b6:41:c3:6c:34:3f:cf:6f:3b:1e:2c:98:ed:74:2e:
ea:aa:6e:c5:e9:12:de:e7:fe:f9:b3:3b:36:16:f6:
29:bb:37:93:d3:8d:b1:3c:5b:55:17:99:87:98:b6:
11:db:41:e1:03:d2:3c:50:51:84:7f:63:aa:c0:de:
2d:c2:17:af:ae:10:f7:25:32:e0:dd:2a:c0:7e:b7:
bd:dc:ba:cc:4f:ad:48:6d:8e:18:e1:c3:c0:b5:05:
fb:7f:b3:f9:85:0c:5e:f0:d0:37:29:f2:68:60:db:
ed:5a:c2:48:eb:96:9c:e4:47:83:db:89:d4:d9:77:
04:27:0a:68:c6:ea:5f:2d:b1:bd:d7:c4:08:d9:b9:
26:ca:50:71:6b:cd:0c:23:e7:91:4c:b7:fc:4d:63:
3f:bf:8c:09:e3:fe:55:cb:1d:bb:c3:a8:5e:02:66:
8d:d1:da:d3:89:5b:90:18:63:17:7c:70:63:f7:02:
1f:4e:89:cc:19:10:16:d4:cf:b8:75:c6:fc:0c:af:
ba:34:94:07:8f:be:2d:47:3d:d5:8b:b8:ac:31:56:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F2:63:F5:57:40:67:9A:E9:78:09:30:3B:80:2A:42:4B:F5:E5:E4
X509v3 Authority Key Identifier:
keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a0:01:79:1d:de:97:22:49:a1:04:cb:d0:5d:75:65:41:10:
0e:5c:7c:ae:b6:12:c3:94:b6:df:b8:d4:db:71:57:3a:9a:6c:
e3:76:22:41:07:99:50:f3:e4:b8:e2:5c:e4:c6:14:7c:ef:50:
d1:de:7f:6b:55:69:27:57:93:b8:17:9b:d3:95:5a:62:73:3a:
cb:7a:06:c6:21:be:5c:7f:a4:4a:6f:c8:6f:d7:11:c5:e3:04:
21:5f:66:b1:35:4b:82:5f:5c:f7:02:0f:f3:dd:80:1b:75:2b:
30:2b:53:e0:cf:83:5c:2d:bb:7e:ad:89:c8:5f:da:18:e1:06:
96:77:b9:cf:c2:ba:7a:8c:a3:3f:0a:0f:77:7d:6c:a0:88:9d:
3a:5d:e6:d5:df:50:79:a7:8b:b8:1e:6a:bd:7c:45:fb:29:d4:
7a:9e:e3:29:15:36:6b:50:53:59:51:e9:46:dd:72:4a:42:09:
eb:9a:de:02:b1:bd:4f:63:4e:e0:22:e9:01:39:c9:03:ca:1a:
11:16:a3:94:24:92:fc:86:8b:bf:05:09:97:bf:a2:d1:df:c9:
10:9e:d9:c4:34:6b:7c:bd:31:70:61:77:b4:93:d2:3a:16:b2:
41:a3:75:34:01:80:7a:f5:5b:58:48:48:9e:b0:4b:52:32:f8:
b1:a8:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:16:31 2026 by rpki-client