
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
File: S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json)
Hash identifier: iQlnpfT4eamoHUfICXPVsd8k2UJYsCS+98fCD8EXeeE=
Subject key identifier: D7:A6:B7:9E:3C:E1:41:A1:5A:7A:6D:53:00:BC:E1:B9:02:4D:14:25
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial: 06FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
Manifest number: 06E6
Signing time: Thu 10 Sep 2026 22:10:11 +0000
Manifest this update: Thu 10 Sep 2026 22:10:10 +0000
Manifest next update: Thu 17 Sep 2026 22:10:10 +0000
Files and hashes: 1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: 9leQn/5myf5/Qj+qvw8nPVCduKROcd5hmOd6LnI6nRc=)
2: E898D0F2A57711F190C4BF715811F970.roa (hash: 9sXZijGFnIBXRK1K09OHFsr106RisC+Rzkh8g0lLCiw=)
3: 79F19E0A5BDA11F0980FE961C4F9AE02.roa (hash: Q5xlJCAiF8KCnEHIB5dc5jerjCip28+WlID9p/XyUfA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1788 (0x6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Validity
Not Before: Sep 10 22:10:10 2026 GMT
Not After : Sep 17 22:10:10 2026 GMT
Subject: CN=6aa32ac2-f0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:78:6f:23:6c:90:2f:41:e3:22:a9:4a:ff:
93:b0:1d:3f:e5:50:79:b5:f1:7d:de:0a:83:85:2b:
1f:3b:e4:5f:a1:71:74:42:3c:37:f4:ad:ff:c7:60:
6e:df:b9:2c:a2:38:db:14:f4:b3:bf:d3:78:7a:2f:
bc:6e:b5:c8:1d:49:18:bc:fe:b0:c8:80:6d:a5:10:
4d:92:e4:0d:c4:c4:1c:2c:72:4a:c3:c9:88:d5:2f:
a7:f8:c4:bf:32:e0:03:82:f7:34:04:53:90:02:77:
7f:38:fd:7e:e5:19:f2:a0:2a:3c:7d:da:f7:bc:bf:
e3:0f:35:4f:43:73:f5:1d:0a:37:67:e5:f1:40:47:
6a:6a:ea:99:49:5b:f7:76:c5:f7:b7:1b:30:8e:c5:
d8:38:e9:2e:e2:ab:08:4c:1e:be:d9:ea:60:db:38:
68:c9:6b:2b:39:c0:bd:a4:7a:9e:23:9b:8c:cc:62:
2f:59:69:81:bb:54:ca:d8:1b:b9:2b:1e:af:27:99:
31:67:58:6d:c4:52:cc:ce:57:b9:aa:c3:6b:e5:70:
19:ed:c9:54:fc:9c:73:ef:f1:48:72:ab:e2:90:ce:
8f:b0:71:e4:d8:12:1e:86:4e:dd:96:bf:77:97:df:
b4:95:31:6a:d5:b0:cc:b2:ca:4c:65:88:e1:40:31:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:B7:9E:3C:E1:41:A1:5A:7A:6D:53:00:BC:E1:B9:02:4D:14:25
X509v3 Authority Key Identifier:
keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:bc:59:8a:c1:b0:15:54:ad:8c:55:7b:98:73:8f:dc:8b:d6:
dd:5c:46:21:2d:31:0d:25:cb:ff:20:c5:fa:18:a3:c6:a1:a1:
de:1d:54:98:46:92:31:a9:f1:c5:70:87:36:a8:96:0d:ec:76:
aa:71:19:b8:40:32:4b:d3:44:88:0b:34:e8:7c:d4:5d:8f:25:
45:4c:14:a8:9e:45:92:ad:78:88:67:14:80:e2:d2:ea:36:85:
0d:9d:ff:24:e7:37:a6:92:3c:49:8f:2b:3b:df:5f:71:e3:ab:
90:89:ff:b5:b4:16:f3:fb:25:ad:ff:1d:f4:f3:6d:6e:98:f0:
34:67:15:5a:31:50:e8:3a:40:cc:94:a7:10:fc:53:b7:0d:fd:
f9:7a:03:3b:03:9a:9d:49:99:95:91:aa:73:1c:78:c1:b4:48:
ea:62:4f:ad:07:dc:3a:53:b7:3e:9c:78:f2:dd:6e:7d:ec:6b:
8d:89:61:98:22:57:d1:16:c2:3e:7f:2e:d0:d0:bf:28:ab:98:
ca:37:c3:51:8f:5d:d7:a1:8a:94:be:33:43:8d:66:e0:8f:d9:
44:28:6a:8c:e9:95:e2:2e:5a:89:ae:1f:9f:ba:85:a3:84:9c:
1c:14:aa:7a:0a:a5:a7:14:b0:98:fd:dc:2d:1a:9e:f1:f7:48:
e6:74:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:54:31 2026 by rpki-client