
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
File: sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json)
Hash identifier: 6Hh82i3rtK+dbA2PoLq3Fs8X/AvvELRabC2H5oCl8mg=
Subject key identifier: 92:04:41:BD:40:89:C0:36:FF:E6:13:96:73:5A:6F:F4:BE:26:04:2D
Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
Certificate issuer: /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
Manifest number: 014A
Signing time: Wed 07 Oct 2026 06:06:59 +0000
Manifest this update: Wed 07 Oct 2026 06:06:59 +0000
Manifest next update: Wed 14 Oct 2026 06:06:59 +0000
Files and hashes: 1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: Gw9rJCVRvmDHedx+Kq0LvdjI8YUT9fq794ZeRICgZwc=)
2: 84E249E030D711F1A9283A38AD833773.roa (hash: aZtgUaUAy3lxVZGUWdm5XWesfC7FySUXNi8hLQd8w2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Validity
Not Before: Oct 7 06:06:59 2026 GMT
Not After : Oct 14 06:06:59 2026 GMT
Subject: CN=6ac5e183-aec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:c6:de:9f:d5:e3:ab:b8:78:1e:e4:13:74:
45:86:e5:05:3a:64:fd:24:b9:f6:0e:26:bb:cd:ba:
18:88:49:5f:31:92:4c:5d:7b:76:11:a4:f2:8c:18:
91:ae:02:b5:b5:14:a1:5b:b3:9a:b5:52:5b:36:59:
55:31:30:f0:9c:f5:22:ce:bc:96:6a:c0:01:e0:f3:
f8:b7:5d:87:d1:89:3b:cd:c8:b4:93:5b:72:f7:ca:
aa:ed:34:05:82:1d:1c:44:61:4d:04:80:f6:98:00:
89:1d:15:dc:86:02:c9:5d:88:35:3a:47:e4:84:c2:
67:ab:67:9a:5a:87:16:c2:5a:96:79:e4:51:aa:89:
eb:57:5f:99:d3:c2:94:5c:c3:4b:5c:7d:1c:bb:15:
da:c7:1a:b5:4f:ea:57:e1:b0:e7:54:25:c4:89:9b:
79:5c:79:1d:3c:3f:9c:07:03:28:05:19:dd:66:73:
42:75:a7:24:3b:c8:f0:eb:a6:b4:02:f5:00:9e:35:
5a:b3:6d:af:ba:83:78:e1:ce:c2:1f:8a:00:7b:68:
6b:ce:56:da:fe:71:dd:8d:35:03:0f:cb:1d:8b:b1:
64:d1:4c:de:87:8e:7e:49:f9:db:ea:7f:81:fc:8b:
86:fd:cd:af:f1:ff:83:4f:84:55:af:1b:8d:84:82:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:04:41:BD:40:89:C0:36:FF:E6:13:96:73:5A:6F:F4:BE:26:04:2D
X509v3 Authority Key Identifier:
keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:00:c8:14:ec:84:ea:de:27:9b:6e:cc:1e:f2:59:79:09:dd:
9f:39:c0:be:02:78:de:83:8b:2f:df:f3:ec:49:5f:c8:e8:d3:
2a:7d:89:99:05:e4:08:e9:7c:b2:9e:bc:2b:a7:20:29:61:19:
be:93:15:0a:97:38:1a:cd:9b:83:24:28:4c:e3:e6:e7:78:29:
42:ec:65:1d:38:90:e7:c3:43:f1:2d:14:ab:ed:ff:26:21:d5:
47:93:61:68:90:c9:7f:54:4e:de:0a:1c:ea:07:ea:76:86:ec:
e4:94:c6:70:91:3d:a2:91:e9:2c:06:eb:80:9e:d3:92:09:c5:
97:16:c8:df:21:da:4c:1c:9c:94:e0:9a:59:a5:3a:47:d8:e9:
db:4d:40:3e:c8:27:de:7a:71:10:d6:f7:99:bc:49:da:f6:18:
50:79:fa:00:e7:9e:a4:ad:95:8b:e2:0c:65:70:c4:04:a4:d7:
30:d4:63:6c:5c:43:95:76:b6:5b:87:0b:f6:dd:b1:9d:a5:21:
b8:a4:33:3b:76:60:96:1c:06:3c:16:3e:9a:7b:f5:1e:3e:4e:
2a:6f:21:c0:21:53:b6:ba:75:20:a8:8c:2e:2b:b3:5f:d1:eb:
c9:d7:82:7f:62:35:d3:73:fb:5f:fc:4e:ce:78:ad:47:eb:17:
49:8a:91:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJDODkxMTAvBgNVBAUTKEIxNzRBM0Q0QkE5QjQ3NkUyQjMxRTQ3QzcyQTI5OEQw
NDREOTg3ODUwHhcNMjYxMDA3MDYwNjU5WhcNMjYxMDE0MDYwNjU5WjAYMRYwFAYD
VQQDEw02YWM1ZTE4My1hZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnSrG3p/V46u4eB7kE3RFhuUFOmT9JLn2Dia7zboYiElfMZJMXXt2EaTyjBiR
rgK1tRShW7OatVJbNllVMTDwnPUizryWasAB4PP4t12H0Yk7zci0k1ty98qq7TQF
gh0cRGFNBID2mACJHRXchgLJXYg1OkfkhMJnq2eaWocWwlqWeeRRqonrV1+Z08KU
XMNLXH0cuxXaxxq1T+pX4bDnVCXEiZt5XHkdPD+cBwMoBRndZnNCdackO8jw66a0
AvUAnjVas22vuoN44c7CH4oAe2hrzlba/nHdjTUDD8sdi7Fk0Uzeh45+Sfnb6n+B
/IuG/c2v8f+DT4RVrxuNhILGXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJIEQb1A
icA2/+YTlnNab/S+JgQtMB8GA1UdIwQYMBaAFLF0o9S6m0duKzHkfHKimNBE2YeF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkM4OS85RTcyNjJCRUVG
Q0UxMUVGODkzRkY3MEVDNEY5QUUwMi9zWFNqMUxxYlIyNHJNZVI4Y3FLWTBFVFpo
NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NYU2oxTHFiUjI0ck1lUjhjcUtZMEVUWmg0VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkM4OS85RTcyNjJCRUVGQ0UxMUVGODkzRkY3MEVDNEY5QUUwMi9zWFNqMUxxYlIy
NHJNZVI4Y3FLWTBFVFpoNFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjwDIFOyE6t4nm27MHvJZeQndnznAvgJ43oOLL9/z7ElfyOjTKn2JmQXkCOl8
sp68K6cgKWEZvpMVCpc4Gs2bgyQoTOPm53gpQuxlHTiQ58ND8S0Uq+3/JiHVR5Nh
aJDJf1RO3goc6gfqdobs5JTGcJE9opHpLAbrgJ7TkgnFlxbI3yHaTByclOCaWaU6
R9jp201APsgn3npxENb3mbxJ2vYYUHn6AOeepK2Vi+IMZXDEBKTXMNRjbFxDlXa2
W4cL9t2xnaUhuKQzO3ZglhwGPBY+mnv1Hj5OKm8hwCFTtrp1IKiMLiuzX9HrydeC
f2I103P7X/xOznitR+sXSYqRkg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 21:25:23 2026 by rpki-client