
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
File: -soSQJs8JskJ3Pqy874emPzo2oA.mft (raw, json)
Hash identifier: 4bDsbQH6u7Sb4SqE7tNwbj0zHV43blyhgkS+cZ4uDpY=
Subject key identifier: 5E:C8:2D:BE:96:2E:67:3E:C9:57:74:76:23:4B:48:19:03:E8:3D:78
Authority key identifier: FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80
Certificate issuer: /CN=A91EE8EF/serialNumber=FACA12409B3C26C909DCFAB2F3BE1E98FCE8DA80
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
Manifest number: 4B
Signing time: Thu 03 Sep 2026 08:34:46 +0000
Manifest this update: Thu 03 Sep 2026 08:34:46 +0000
Manifest next update: Thu 10 Sep 2026 08:34:46 +0000
Files and hashes: 1: -soSQJs8JskJ3Pqy874emPzo2oA.crl (hash: Xjg3Ltnwladxi/bv3AjOsfAL3Pv0TegKB3lxKYC961E=)
2: 4663706238A311F1973C08FAC9833773.roa (hash: Cm1HBvclOybdzNm8AH82qs/j/bXh5vrr9fMTzOhVfEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.crl
rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8EF, serialNumber=FACA12409B3C26C909DCFAB2F3BE1E98FCE8DA80
Validity
Not Before: Sep 3 08:34:46 2026 GMT
Not After : Sep 10 08:34:46 2026 GMT
Subject: CN=6a993126-abcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:d5:6f:57:3a:58:88:f5:49:2b:0b:59:1a:
68:03:da:73:49:44:21:f3:1d:e3:58:9d:21:5d:c9:
04:2f:8d:ae:77:f2:67:20:b7:1a:89:58:1e:a1:9e:
4a:44:27:8b:d3:dc:f6:4d:38:bd:6b:df:94:13:0b:
75:88:b9:f7:15:d5:04:ae:70:18:88:f0:7b:aa:a1:
06:be:61:11:f0:14:c5:53:53:0e:47:94:1a:97:7e:
23:61:2d:1b:02:6b:84:a8:49:a5:e8:92:f3:f1:e3:
10:cf:fe:7f:ef:aa:99:42:79:37:c6:80:a6:8e:12:
8c:01:a9:72:93:f4:2c:75:24:2c:5f:be:fd:25:e2:
e3:a0:16:35:f7:25:88:2e:79:95:f5:cc:7d:e5:bf:
67:4d:f0:ec:8e:fc:f0:ef:b7:0f:9f:b5:bc:24:11:
65:d0:aa:0a:dc:97:a8:b8:b5:84:b2:e9:99:b7:00:
ca:7b:68:67:4e:2e:10:f9:e2:81:7d:46:e9:72:ae:
0a:74:a1:f4:41:c4:77:9a:fa:1a:bb:ed:f9:5f:dc:
b1:17:30:e7:7d:14:d7:71:68:c8:fa:08:f5:92:ba:
41:40:4a:4a:11:c8:d7:08:86:31:2e:c9:54:20:87:
46:fe:bf:5b:b2:0b:35:28:cc:68:ef:c4:1a:7c:b8:
e0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C8:2D:BE:96:2E:67:3E:C9:57:74:76:23:4B:48:19:03:E8:3D:78
X509v3 Authority Key Identifier:
keyid:FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:71:72:16:d5:e9:4d:55:d8:9c:cf:55:ab:b4:0d:dd:14:27:
5c:b2:0b:1c:c5:8b:9e:64:6c:de:bb:32:49:56:85:f3:77:22:
82:aa:66:2f:6f:1d:b9:0e:65:e1:a3:3e:f6:c8:d4:8d:2d:f4:
36:59:44:ce:db:43:15:fd:3d:11:e6:f1:04:50:67:a7:1e:58:
0a:80:78:cb:c8:32:57:08:58:18:92:20:1b:2c:b5:e2:f6:32:
41:21:4d:c6:d4:f9:04:fb:c6:d2:ce:25:15:fe:e7:83:c1:fb:
9d:3e:ab:6f:77:1a:92:4e:62:37:21:45:2f:e7:cb:45:e5:c4:
4d:9e:d7:16:7c:a1:cf:da:bd:36:f8:05:a4:2b:25:1e:f7:1d:
7d:97:4f:c7:06:90:f3:4e:e0:6c:b4:e0:35:1f:15:85:47:c2:
16:e6:29:71:16:c2:1d:97:95:ae:1f:83:1b:41:97:60:88:14:
18:9c:25:be:cf:8f:de:00:50:72:3b:9d:7a:4b:6f:f9:14:29:
b7:5c:92:88:1b:57:67:bd:07:13:13:2c:14:11:72:46:d7:a2:
58:68:ab:74:88:35:1e:d6:d7:af:b1:62:69:6d:89:dc:64:cf:
1a:51:31:43:d5:9b:4b:39:b1:02:7e:d5:f6:63:e1:41:e7:c2:
cf:b3:bc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:56:46 2026 by rpki-client