
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
File: sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json)
Hash identifier: 50AKrw+Qhq0j/Wwb6knkKD/1XR3MEdfvqVf5QLt0xbI=
Subject key identifier: 40:10:B5:42:EB:5B:C5:CA:86:41:9F:34:F6:4E:DF:0A:B6:53:43:EF
Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
Certificate issuer: /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
Manifest number: 0131
Signing time: Wed 19 Aug 2026 06:34:01 +0000
Manifest this update: Wed 19 Aug 2026 06:34:00 +0000
Manifest next update: Wed 26 Aug 2026 06:34:00 +0000
Files and hashes: 1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: 4wf7xN4/fblT3HEMh3QaHC6yC7hwAN8m5s0x62Wl8uI=)
2: 84E249E030D711F1A9283A38AD833773.roa (hash: aZtgUaUAy3lxVZGUWdm5XWesfC7FySUXNi8hLQd8w2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Validity
Not Before: Aug 19 06:34:00 2026 GMT
Not After : Aug 26 06:34:00 2026 GMT
Subject: CN=6a854e59-bdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:56:15:e4:2b:b6:81:16:a4:99:9c:e2:1b:
eb:0c:c4:5c:e9:e7:1b:ca:98:fe:e4:3b:7f:69:01:
1a:1b:f0:36:bf:c3:48:5b:be:46:81:67:bd:41:19:
1e:4c:9d:25:ed:40:0a:57:0d:cd:15:54:58:48:69:
0b:b6:b1:e9:16:65:54:99:69:9d:11:68:f0:3a:be:
7f:88:d4:e1:68:8e:cd:94:7e:9f:dc:6a:b0:17:54:
2c:43:0e:a8:63:fe:b7:0a:9e:fd:c8:13:df:66:21:
ff:ec:96:73:61:f9:28:e7:92:bb:6f:c2:83:4f:e6:
9f:9d:9d:c8:ed:d8:ab:18:b8:9e:1c:2a:d0:d8:56:
db:35:50:37:f6:ff:0e:1d:7c:e9:3d:47:da:62:cd:
97:90:63:bf:75:b0:11:bf:6e:e8:0e:8a:5b:82:50:
7d:12:5b:33:ac:1a:45:05:d3:7b:c0:69:d4:7c:27:
9d:22:c3:60:0a:82:06:d0:a8:cd:9f:9a:af:b3:5d:
5e:74:8c:cc:21:0f:4e:3a:55:e0:fb:97:a1:c3:f0:
af:33:8a:70:91:88:bb:c9:6c:23:10:42:96:76:9c:
83:8f:41:f7:9b:b9:29:ea:14:68:7b:8f:23:a2:22:
71:a2:92:3b:76:dd:4b:08:31:4c:69:b0:ca:1c:84:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:B5:42:EB:5B:C5:CA:86:41:9F:34:F6:4E:DF:0A:B6:53:43:EF
X509v3 Authority Key Identifier:
keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9c:40:0a:85:2e:90:f7:f5:af:8d:53:01:83:e4:14:b6:62:
61:35:58:49:f2:d3:13:46:ae:d9:44:16:8f:9b:0e:70:ad:a3:
c3:5e:fe:16:34:c9:9e:7d:9e:13:48:ca:3f:1a:64:c5:4e:56:
05:f7:e1:c3:40:a3:a1:fd:fa:c9:27:4e:0c:08:84:28:00:9c:
fb:3c:f5:22:df:54:d0:e9:3e:a0:97:00:75:42:53:61:53:71:
2b:97:18:b5:a5:1d:a9:ea:94:14:62:64:54:5e:a2:fe:02:62:
98:ce:8b:1c:85:a3:ed:33:8d:0a:49:5f:34:ed:8f:b9:22:5d:
ed:25:d3:ff:21:92:bf:e4:fb:88:59:27:80:89:34:4e:bb:90:
f4:41:9e:fd:cc:0d:35:7e:86:0f:ec:c4:a7:89:37:0e:d4:90:
1d:de:80:71:73:63:c4:ee:06:04:6f:7b:77:6f:37:93:f2:9f:
fe:6d:a7:c4:39:0f:a3:e0:80:f8:c7:d0:e8:70:a7:b2:26:92:
b2:f9:c3:c9:5e:f0:63:1e:d6:05:21:94:ff:57:d4:b8:21:ba:
fb:cd:e1:32:14:10:b8:26:4b:25:67:ce:31:0f:43:b9:74:96:
46:50:25:bd:e3:53:b6:7d:15:59:a6:b7:31:e9:75:87:3a:18:
5a:95:7f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:54:06 2026 by rpki-client