
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json)
Hash identifier: GgT0FDHlSh+gmFJfSHDowrA8COypiYmBifjQXCZla58=
Subject key identifier: 5D:4B:28:A9:63:4A:FC:9C:18:28:64:DB:D9:34:64:17:9A:AA:AC:25
Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
Manifest number: 0106
Signing time: Wed 09 Sep 2026 06:36:58 +0000
Manifest this update: Wed 09 Sep 2026 06:36:57 +0000
Manifest next update: Wed 16 Sep 2026 06:36:57 +0000
Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: xKhkXlYTSeHFsPE5bY/2ew1of49XS0ejOFAKXqv+7xg=)
2: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: ZAcnv2B2glJNz/amDzlP0oQS8f8IykGzbvOZt8DAQOY=)
3: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: V0jiGWcisCYeYKJhJdPZNpTEwuLUAeBQE/p7M60AP1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 06:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Validity
Not Before: Sep 9 06:36:57 2026 GMT
Not After : Sep 16 06:36:57 2026 GMT
Subject: CN=6aa0fe8a-f6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:f1:a6:15:91:fd:15:89:13:27:0f:d7:d0:
fb:66:93:e7:00:d0:dc:b9:81:05:a3:35:c4:05:52:
33:bd:48:b4:04:2c:0d:0e:98:8a:67:5d:6d:b8:69:
4a:f8:ad:97:ef:47:11:9c:29:d8:cc:32:d1:58:23:
9f:57:40:da:f6:ac:35:9c:66:f0:46:ed:87:0e:d0:
ea:3d:77:61:fd:00:e7:c2:8e:da:ac:f1:f1:8e:9d:
7d:da:1f:5d:c5:52:dc:1c:61:d2:45:b4:41:9a:47:
59:87:d7:7b:45:20:68:c9:06:3d:c2:22:39:65:f5:
29:42:90:59:2f:18:8f:f3:df:aa:d2:20:64:d8:39:
0f:ef:3c:61:14:c9:84:c8:ed:88:d4:5f:45:e2:46:
48:a9:f8:cd:06:4c:1b:55:a1:fc:b0:48:81:4b:6f:
8b:1c:d7:3d:11:19:fc:ea:7e:d1:d0:fc:f2:62:b2:
bb:fe:ac:9d:51:1d:c1:73:c2:a4:11:24:e3:47:21:
6f:45:00:a2:e9:13:8e:7a:8c:a2:a5:4f:a6:a3:bd:
ad:56:19:85:73:4d:11:4c:5d:be:69:6f:a3:de:0a:
6c:73:4b:e6:8f:ef:48:8a:54:22:0c:56:10:08:c0:
38:9b:f7:be:32:5e:e3:e1:21:92:d4:2f:fd:39:b7:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4B:28:A9:63:4A:FC:9C:18:28:64:DB:D9:34:64:17:9A:AA:AC:25
X509v3 Authority Key Identifier:
keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:54:c4:9a:20:ec:ff:6a:d2:5c:22:99:85:74:7c:80:06:46:
25:08:ac:46:77:1f:2c:dc:69:c3:ed:5f:da:15:be:56:c4:e6:
c6:e0:f6:b0:43:60:57:df:d5:34:75:2f:46:57:91:6d:37:da:
17:f7:ae:23:b7:45:84:a3:8a:bd:b1:ca:33:d1:de:32:e7:77:
5e:c8:0a:cf:f8:3b:76:a6:2c:c3:6a:a7:36:ae:44:7f:30:6c:
e8:bb:7e:56:01:07:7b:bd:72:22:69:10:a4:23:30:2a:88:cb:
ae:c9:66:55:a6:43:ed:25:44:43:78:5c:8a:77:de:94:5f:19:
c7:06:c9:0f:f5:68:77:b7:53:ea:ea:e0:90:ec:04:4b:c8:ff:
b8:25:52:8a:c4:60:b0:36:8e:de:8d:9f:a3:12:fb:c0:6b:70:
7e:5e:97:c0:21:43:4f:8a:79:17:97:06:d4:f2:46:29:85:39:
87:26:5c:d1:3c:a0:0d:df:e1:12:82:7d:96:66:a5:ae:c0:69:
7c:07:73:51:04:54:51:3f:5f:ec:d5:1a:16:11:ec:36:62:78:
8f:17:72:7e:e0:74:a1:b1:8a:4d:07:1c:42:6e:bc:74:ec:2e:
cf:30:de:09:67:05:aa:d1:87:e7:ac:ea:71:ee:7d:46:60:9d:
fe:73:91:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 22:25:09 2026 by rpki-client