
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
File: SBcgosjubOySR3dhkymcEP63ykQ.mft (raw, json)
Hash identifier: spZJqY1Lq1XZJvDDFarLsvW0SXUqa2fjvAYjqWbIoU8=
Subject key identifier: AB:72:29:EC:69:E5:D8:C0:35:C0:77:BE:38:0C:D1:84:3A:49:B1:B1
Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44
Certificate issuer: /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
Manifest number: 0211
Signing time: Wed 19 Aug 2026 03:34:28 +0000
Manifest this update: Wed 19 Aug 2026 03:34:28 +0000
Manifest next update: Wed 26 Aug 2026 03:34:28 +0000
Files and hashes: 1: SBcgosjubOySR3dhkymcEP63ykQ.crl (hash: GbA4yvL6TP2PCJEsmiFBsHKLXF1E3dMTFmbrXcqTopI=)
2: A38F041873C011EEB1A68245C4F9AE02.roa (hash: HPmVyYKtLcFExM8piBe7+ZZtOvggOUmjJGRPn2DOqcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl
rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD2E3, serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
Validity
Not Before: Aug 19 03:34:28 2026 GMT
Not After : Aug 26 03:34:28 2026 GMT
Subject: CN=6a852444-af22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:b3:07:51:ef:d4:ab:5c:78:7d:27:57:43:
17:0f:52:24:82:84:9f:e9:a9:f9:a6:da:fe:1e:ba:
d6:9d:82:0c:77:c3:f1:b2:02:35:90:df:1c:9d:9d:
a6:47:b7:4b:e9:1a:a1:2b:1c:2d:72:ad:62:b8:44:
29:c3:0c:bc:4d:e4:d2:e4:20:25:2e:d5:67:a5:a9:
ff:d4:ef:7d:ac:cf:7e:ec:87:e3:09:d0:ea:93:1b:
08:7d:6e:e1:48:f7:ad:14:25:f8:78:21:25:4e:c6:
b3:15:38:b8:21:90:36:f4:60:fc:ff:b5:4f:75:b1:
ec:0b:7f:83:41:ea:57:94:c8:40:54:d1:e5:64:87:
25:c4:51:10:d9:b2:42:95:23:59:97:70:f6:a6:fd:
99:17:f6:12:a3:6e:02:8a:77:32:27:14:bb:f8:d9:
f3:f0:b8:06:9c:ce:94:37:00:82:11:a1:31:92:6c:
c1:59:d7:36:72:2d:68:cd:d2:57:06:1d:ba:9b:d4:
0f:83:e6:9f:0b:63:df:c8:e6:38:d2:0d:97:21:cd:
f5:3b:ca:c6:3f:48:14:75:95:73:60:7f:16:d0:8b:
5b:32:de:5f:61:9a:3f:a5:c3:6c:df:0d:d0:8f:a5:
d5:b6:56:5c:21:46:49:c0:78:c2:37:89:cb:2b:36:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:72:29:EC:69:E5:D8:C0:35:C0:77:BE:38:0C:D1:84:3A:49:B1:B1
X509v3 Authority Key Identifier:
keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:89:f0:81:94:d8:4e:c1:7a:46:66:2d:30:35:91:aa:82:83:
ec:84:8f:2f:88:dc:24:96:77:a8:64:ce:99:0d:94:c7:c6:57:
3e:23:32:9f:a9:9b:2e:80:8f:1f:f2:c5:69:4c:92:6b:4b:af:
fa:7e:dd:9f:39:1f:1b:bc:bb:19:a5:72:5e:d7:0d:62:f3:df:
50:b7:4e:79:55:22:84:7e:8f:f5:68:08:b7:c1:84:8a:0e:28:
a3:6c:88:fa:28:2c:b4:f4:e9:9d:1b:6c:e7:77:16:b2:4d:78:
bb:b9:0a:a2:8b:a3:e7:60:90:5d:d1:9e:24:92:d4:00:e7:ae:
6f:58:09:fe:77:c2:f0:a6:48:04:68:2d:d5:7d:62:31:c2:34:
31:0c:d8:4c:fc:10:32:a1:21:0b:39:73:74:68:95:df:cd:a9:
9f:a9:70:69:1c:29:fc:3f:55:18:95:be:a0:a9:e7:45:16:53:
7c:d0:25:91:38:b5:0c:f4:20:6c:a2:67:48:ba:ea:7c:32:3a:
e9:5a:c7:42:d3:a5:94:45:88:6b:a0:55:02:9c:31:62:3a:d1:
4f:ae:c9:35:7b:63:a8:98:15:81:6d:bf:23:fe:a8:7e:67:11:
64:f4:ec:df:ce:40:3c:4d:ff:69:63:db:fc:2a:f3:a1:a4:ef:
3b:39:a1:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQyRTMxMTAvBgNVBAUTKDQ4MTcyMEEyQzhFRTZDRUM5MjQ3Nzc2MTkzMjk5QzEw
RkVCN0NBNDQwHhcNMjYwODE5MDMzNDI4WhcNMjYwODI2MDMzNDI4WjAYMRYwFAYD
VQQDEw02YTg1MjQ0NC1hZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAotyzB1Hv1KtceH0nV0MXD1IkgoSf6an5ptr+HrrWnYIMd8PxsgI1kN8cnZ2m
R7dL6RqhKxwtcq1iuEQpwwy8TeTS5CAlLtVnpan/1O99rM9+7IfjCdDqkxsIfW7h
SPetFCX4eCElTsazFTi4IZA29GD8/7VPdbHsC3+DQepXlMhAVNHlZIclxFEQ2bJC
lSNZl3D2pv2ZF/YSo24CincyJxS7+Nnz8LgGnM6UNwCCEaExkmzBWdc2ci1ozdJX
Bh26m9QPg+afC2PfyOY40g2XIc31O8rGP0gUdZVzYH8W0ItbMt5fYZo/pcNs3w3Q
j6XVtlZcIUZJwHjCN4nLKzYjJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtyKexp
5djANcB3vjgM0YQ6SbGxMB8GA1UdIwQYMBaAFEgXIKLI7mzskkd3YZMpnBD+t8pE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDJFMy80RjQxNzlBNDcz
QzAxMUVFQjgyN0Y0NDRDNEY5QUUwMi9TQmNnb3NqdWJPeVNSM2Roa3ltY0VQNjN5
a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NCY2dvc2p1Yk95U1IzZGhreW1jRVA2M3lrUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDJFMy80RjQxNzlBNDczQzAxMUVFQjgyN0Y0NDRDNEY5QUUwMi9TQmNnb3NqdWJP
eVNSM2Roa3ltY0VQNjN5a1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN4nwgZTYTsF6RmYtMDWRqoKD7ISPL4jcJJZ3qGTOmQ2Ux8ZXPiMyn6mbLoCP
H/LFaUySa0uv+n7dnzkfG7y7GaVyXtcNYvPfULdOeVUihH6P9WgIt8GEig4oo2yI
+igstPTpnRts53cWsk14u7kKoouj52CQXdGeJJLUAOeub1gJ/nfC8KZIBGgt1X1i
McI0MQzYTPwQMqEhCzlzdGiV382pn6lwaRwp/D9VGJW+oKnnRRZTfNAlkTi1DPQg
bKJnSLrqfDI66VrHQtOllEWIa6BVApwxYjrRT67JNXtjqJgVgW2/I/6ofmcRZPTs
385APE3/aWPb/CrzoaTvOzmh5Q==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:03 2026 by rpki-client