
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
File: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json)
Hash identifier: JToPTV95xyVPo6ohHu2wmBZL0Ex+MHUGv9yyKJY39tc=
Subject key identifier: E7:E6:41:EE:15:38:EC:06:76:0D:1C:9C:B1:97:48:F0:28:AD:CD:DE
Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Certificate serial: 05BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
Manifest number: 05B2
Signing time: Fri 02 Oct 2026 23:28:52 +0000
Manifest this update: Fri 02 Oct 2026 23:28:51 +0000
Manifest next update: Fri 09 Oct 2026 23:28:51 +0000
Files and hashes: 1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: IbnHno3KSW/Kho3PL/uwLL3FxuCAkE2ytglzL/77Ofk=)
2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: f53D5d+q3fUodPkmYKhBtis6mgmJc3a1K68eaX3leUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl
rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1469 (0x5bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Validity
Not Before: Oct 2 23:28:51 2026 GMT
Not After : Oct 9 23:28:51 2026 GMT
Subject: CN=6ac03e33-2aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:95:e6:0e:87:6d:b0:17:dc:00:90:ef:63:
f0:c0:c6:df:11:07:99:8c:9d:03:1e:16:06:a7:7e:
a1:f6:00:fd:a6:4d:c1:e8:69:3a:d3:fa:f6:df:03:
3f:90:43:c6:46:a5:b6:f4:3f:ba:f5:2c:f5:bb:8d:
9d:6d:e2:37:7a:93:b3:1c:6e:97:72:26:b9:32:3b:
48:86:d1:a2:2d:02:62:50:51:fb:66:07:01:5d:71:
f6:50:dc:1b:b7:05:cb:a4:c0:6b:3b:16:22:a5:19:
fd:ac:15:c9:31:d8:6b:44:d8:49:c4:38:54:0d:f0:
01:66:53:71:ec:d6:a9:d7:41:b2:8d:a5:58:23:23:
17:91:0c:e5:6b:61:74:2a:7c:58:14:fe:df:c0:a3:
47:89:73:fc:d9:f4:fc:6a:b1:18:c0:e2:7a:13:14:
39:91:c8:39:3e:28:bf:5a:ad:2e:7c:84:07:21:67:
f3:e2:a1:cb:e6:58:0e:67:f8:1c:35:f7:2b:ce:3c:
b9:d6:47:ce:1f:6e:09:c2:3b:17:97:7b:cb:ad:1f:
6e:77:ec:38:ab:ff:0d:15:b6:c6:9b:18:f7:93:49:
d5:dd:ad:01:fd:46:7e:97:69:17:0b:12:56:02:8c:
c0:cf:34:7b:ee:71:11:38:34:b0:ee:bd:e7:f9:60:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E6:41:EE:15:38:EC:06:76:0D:1C:9C:B1:97:48:F0:28:AD:CD:DE
X509v3 Authority Key Identifier:
keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:74:54:a0:ef:b7:3c:ad:29:35:a9:33:cb:9a:31:9b:ce:b2:
47:56:b3:c6:fd:ae:4c:bc:38:2f:d3:07:6f:e2:7c:07:bf:68:
6d:89:0e:45:16:95:8b:e4:e7:45:a0:2d:e6:d2:36:c7:ba:e5:
14:63:27:30:6b:3d:d6:86:5c:ca:dd:47:e3:90:7e:81:94:aa:
f2:2f:46:ba:a1:c8:b0:bb:c8:31:75:74:d3:5d:d7:9e:b0:82:
ce:eb:6e:9b:55:e6:25:5b:65:43:6a:f9:5d:16:9c:75:b4:b2:
ed:e0:07:c0:c3:1b:2d:7b:e6:e6:a5:7c:9c:bb:05:98:35:9c:
c8:2e:19:10:87:59:92:0a:9d:ea:3b:2b:5f:76:9b:50:2b:a9:
07:d1:49:66:1a:df:bc:51:76:8c:3f:04:e9:e9:a9:2b:b4:5d:
c5:c7:70:bd:fa:83:d1:06:d2:88:f5:2e:46:ab:b9:eb:37:00:
ef:e6:a1:fd:23:ff:3b:77:ff:4e:70:7d:e7:16:20:7d:98:16:
fd:29:6b:57:bc:db:71:29:55:b5:f6:72:ca:9a:e3:71:ac:1c:
14:15:58:71:9b:2e:0f:47:3e:4e:7b:09:32:7e:03:f0:6e:a8:
11:c0:d8:3b:71:b3:42:10:17:ca:81:9f:91:5b:7a:64:a9:c6:
5a:06:73:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:49:35 2026 by rpki-client