
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
File: suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft (raw, json)
Hash identifier: 886zRBVi33pKUMTJDZFXHV1+M0jvC5r84kKo64aY2eU=
Subject key identifier: 5E:1F:F8:DE:69:88:D9:33:A0:D8:AC:29:A0:EB:2C:22:9B:F1:6F:8A
Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
Manifest number: 01B2
Signing time: Sat 17 Oct 2026 04:38:12 +0000
Manifest this update: Sat 17 Oct 2026 04:38:11 +0000
Manifest next update: Sat 24 Oct 2026 04:38:11 +0000
Files and hashes: 1: suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl (hash: VHTdyy66UxtAyIzWuEdMOhYCdslYLXyuRg9+YcBA8As=)
2: 0D38E31833A411EF82E92524C4F9AE02.roa (hash: dMfHfrbTyibI/vfMvch+qwnCQAs6chEo73/KA4HRzas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl
rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 04:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Validity
Not Before: Oct 17 04:38:11 2026 GMT
Not After : Oct 24 04:38:11 2026 GMT
Subject: CN=6ad2fbb4-3a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:f3:a9:cd:0d:67:e1:5d:d6:95:f5:d2:10:
32:15:40:ea:d8:31:3c:6b:40:11:77:94:4e:6b:f4:
0e:27:53:30:4e:05:3f:9d:67:ed:44:5d:dd:b1:c6:
84:3d:0a:ff:9a:94:9d:0c:c0:94:44:b9:8d:b4:e2:
14:e6:a3:d3:f2:3a:a6:d6:8c:55:49:c8:15:4e:ec:
a9:15:22:a1:78:4f:ec:c5:32:7a:61:42:bc:80:7d:
c8:4a:0f:b1:e2:a6:19:c0:1a:05:21:2d:44:f4:f3:
4a:12:83:0f:71:56:e6:95:53:90:44:13:19:4d:65:
01:0b:4e:4e:78:31:ef:9b:5b:2f:fd:ad:08:9b:d5:
a6:d1:2d:ae:b7:50:09:44:59:a2:18:6f:42:6e:42:
aa:cd:b2:2d:ea:84:e5:22:a7:aa:5c:66:9b:e5:d4:
66:50:8e:27:44:87:18:2c:16:53:57:95:08:98:5a:
2b:92:25:57:9a:57:b3:86:a9:24:bf:08:a6:7c:0e:
c9:cb:65:d6:57:f9:f8:c7:c8:97:c7:28:8e:66:18:
20:7c:3f:a6:a0:71:37:80:db:28:26:28:aa:db:84:
24:9d:3f:21:75:0b:fa:15:e0:07:71:66:f2:e0:c5:
75:ac:b0:64:06:90:1d:72:15:45:a2:0c:93:e9:1f:
bb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1F:F8:DE:69:88:D9:33:A0:D8:AC:29:A0:EB:2C:22:9B:F1:6F:8A
X509v3 Authority Key Identifier:
keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:11:d5:a5:03:17:70:35:b4:79:1b:d8:60:d3:fb:25:c8:61:
ce:60:b6:15:ca:39:6f:f4:ce:eb:f5:cf:a0:81:e0:d5:3b:25:
2a:94:ec:ac:17:4a:64:4c:b4:a2:43:c6:35:ef:6e:46:fa:d3:
c8:42:c5:a5:d9:9d:a5:fe:e3:e1:12:d1:b8:d3:fa:58:d2:3b:
d8:49:91:1a:fb:2c:77:84:22:ba:8d:8d:98:0f:56:9b:92:5c:
ea:24:af:6b:f3:d6:f2:b7:bb:26:d7:2a:b6:19:3e:0a:70:e4:
a4:3b:a3:7a:bc:bb:e7:6f:dd:c4:ee:70:26:d7:60:b7:51:03:
f5:2e:92:c4:31:c3:5c:0b:f7:58:14:3e:a6:61:45:e7:7a:07:
a5:45:95:09:fb:13:5a:7b:94:69:17:b0:78:55:4b:84:10:26:
dc:1a:22:22:b0:27:00:0f:d0:22:a5:52:96:b7:67:41:87:5a:
bc:30:5d:5a:07:bc:b9:b7:5c:db:2b:97:c1:48:d2:b4:7c:7a:
0b:0a:89:ef:87:11:b2:5c:fe:00:2e:f7:42:ac:79:c2:1a:00:
d7:01:9d:50:e9:e3:d7:0a:5c:04:6b:0f:4c:29:e9:c8:53:f3:
bf:4e:b2:e9:5d:3f:6c:d9:d3:62:7d:08:16:97:67:93:c6:b4:
0c:1d:1e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:36:07 2026 by rpki-client