
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
File: SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json)
Hash identifier: +c9fDKT3RXntDOuPMuEVTR674C1oj5fY7WSjXPPQ3Ik=
Subject key identifier: BF:6B:25:4D:D4:78:E5:92:C2:7A:F9:9A:06:B0:52:92:52:65:71:42
Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
Certificate issuer: /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Certificate serial: 03F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
Manifest number: 03F3
Signing time: Sat 03 Oct 2026 00:44:59 +0000
Manifest this update: Sat 03 Oct 2026 00:44:59 +0000
Manifest next update: Sat 10 Oct 2026 00:44:59 +0000
Files and hashes: 1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: cfR/RCVzTqgrGHFVe7wavxpWoZmcf+QfTUYkBtpIclE=)
2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: 8Hg/6bEHVG5wm6bRNXZ2MyaYHSXk0DkxhouM2LKNEnM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1017 (0x3f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Validity
Not Before: Oct 3 00:44:59 2026 GMT
Not After : Oct 10 00:44:59 2026 GMT
Subject: CN=6ac0500b-4c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:39:01:78:2d:8f:e2:48:65:c0:57:7e:5e:
64:14:e4:c3:74:5d:df:54:c3:72:6d:3a:0a:42:10:
f6:fd:9b:5c:8d:86:ed:c2:32:e6:23:0d:74:b8:bb:
cb:d5:ba:39:87:0b:ca:f6:80:e6:cf:75:fa:ea:59:
8a:96:d7:7b:ac:b2:41:ea:9d:99:a1:5b:20:2e:3c:
14:32:25:df:64:ce:01:fb:1b:b1:09:1a:44:af:82:
b3:11:4c:36:78:71:7b:83:c1:94:ce:45:63:4d:5a:
88:2a:40:21:d7:17:50:11:8c:ae:79:9b:12:83:84:
03:79:13:85:6d:f8:64:ab:69:aa:35:b3:71:ce:34:
4a:09:6c:06:6a:d7:27:cb:5a:4e:6c:50:ad:44:88:
3c:c7:fe:ef:46:44:8b:c2:5b:b3:12:c4:7e:4e:63:
36:af:05:f3:df:e6:be:02:52:ac:65:97:3b:e8:44:
8e:6e:c6:df:20:ae:83:e6:24:39:14:9e:5e:6c:ef:
c6:8b:e1:da:9c:75:56:54:ea:4a:a6:d9:bb:66:87:
64:30:18:53:0c:1c:5f:56:b4:f6:2a:b3:dd:f9:67:
a7:0b:14:3b:bc:7d:c1:13:b8:ca:d5:2f:22:02:92:
21:26:59:f8:81:dc:23:85:10:3e:7d:9f:b8:62:57:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6B:25:4D:D4:78:E5:92:C2:7A:F9:9A:06:B0:52:92:52:65:71:42
X509v3 Authority Key Identifier:
keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6c:63:97:17:83:b7:4f:7f:2d:ff:35:d1:5c:8a:dc:4f:8b:
89:95:80:46:50:1a:ec:49:03:18:a5:82:5b:21:b7:7f:ef:f1:
75:ab:7f:83:00:81:69:ce:9f:3e:0e:12:f5:ab:e4:1e:67:62:
36:21:54:0f:5a:35:6f:86:35:9a:fd:0b:0e:27:84:ee:5f:ae:
92:2f:e4:8d:39:3f:5c:f7:77:54:ad:e2:43:0f:b4:f0:e0:96:
d3:d0:3f:d5:f8:a0:5c:3c:e7:ae:15:94:68:f4:00:8b:7f:7e:
3a:a8:a0:94:e0:ae:61:b9:98:e6:6b:70:ba:35:1a:fb:1b:47:
86:eb:ed:a8:13:76:cf:5e:f5:01:8a:45:2b:ac:34:2d:bb:cd:
8a:91:ba:9e:ec:87:d7:0c:7e:e5:f6:ba:da:b4:2e:13:26:63:
4d:26:68:ff:78:8b:c4:5e:67:f8:d4:75:61:77:28:f0:14:fe:
85:1d:c9:a2:52:f4:6a:b4:20:65:32:1d:ae:2a:35:58:27:45:
c7:c8:cc:66:29:81:3d:4b:33:f2:07:8b:09:cc:38:a5:0d:14:
40:f9:eb:a5:a0:ba:da:77:0a:f7:18:6d:83:9e:35:1d:68:57:
2c:0f:35:5a:76:b6:50:fd:42:c5:35:82:29:8d:86:54:4f:83:
6b:d1:15:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIwRDAxMTAvBgNVBAUTKDRCM0M2OTU2QjA0NDkwMDEwMDg1OEMwREU1MEVCOUE0
NjJCMDhDQzcwHhcNMjYxMDAzMDA0NDU5WhcNMjYxMDEwMDA0NDU5WjAYMRYwFAYD
VQQDEw02YWMwNTAwYi00YzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvzQ5AXgtj+JIZcBXfl5kFOTDdF3fVMNybToKQhD2/ZtcjYbtwjLmIw10uLvL
1bo5hwvK9oDmz3X66lmKltd7rLJB6p2ZoVsgLjwUMiXfZM4B+xuxCRpEr4KzEUw2
eHF7g8GUzkVjTVqIKkAh1xdQEYyueZsSg4QDeROFbfhkq2mqNbNxzjRKCWwGatcn
y1pObFCtRIg8x/7vRkSLwluzEsR+TmM2rwXz3+a+AlKsZZc76ESObsbfIK6D5iQ5
FJ5ebO/Gi+HanHVWVOpKptm7ZodkMBhTDBxfVrT2KrPd+WenCxQ7vH3BE7jK1S8i
ApIhJln4gdwjhRA+fZ+4YleEzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9rJU3U
eOWSwnr5mgawUpJSZXFCMB8GA1UdIwQYMBaAFEs8aVawRJABAIWMDeUOuaRisIzH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjBEMC85M0ZCN0Y0RURC
RjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtBRUFoWXdONVE2NXBHS3dq
TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1N6eHBWckJFa0FFQWhZd041UTY1cEdLd2pNYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjBEMC85M0ZCN0Y0RURCRjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtB
RUFoWXdONVE2NXBHS3dqTWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjWxjlxeDt09/Lf810VyK3E+LiZWARlAa7EkDGKWCWyG3f+/xdat/gwCBac6f
Pg4S9avkHmdiNiFUD1o1b4Y1mv0LDieE7l+uki/kjTk/XPd3VK3iQw+08OCW09A/
1figXDznrhWUaPQAi39+OqiglOCuYbmY5mtwujUa+xtHhuvtqBN2z171AYpFK6w0
LbvNipG6nuyH1wx+5fa62rQuEyZjTSZo/3iLxF5n+NR1YXco8BT+hR3JolL0arQg
ZTIdrio1WCdFx8jMZimBPUsz8geLCcw4pQ0UQPnrpaC62ncK9xhtg541HWhXLA81
Wna2UP1CxTWCKY2GVE+Da9EV2Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:53:17 2026 by rpki-client