
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
File: sJELB8hrD_owClKsfDH8tSwFMtc.mft (raw, json)
Hash identifier: dYVNUjn03wZTNPrgJhNhN4UURKBtIfvT7EqUKxIZ/jU=
Subject key identifier: CF:43:6F:DB:68:54:68:9D:E2:74:60:59:9B:F8:3B:B4:CA:DD:37:7F
Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
Certificate issuer: /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
Certificate serial: 06EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
Manifest number: 06E3
Signing time: Sun 20 Sep 2026 22:07:48 +0000
Manifest this update: Sun 20 Sep 2026 22:07:48 +0000
Manifest next update: Sun 27 Sep 2026 22:07:48 +0000
Files and hashes: 1: sJELB8hrD_owClKsfDH8tSwFMtc.crl (hash: w+vL2CvBBVv0qnXuBSoLdoFuWhm1169+jLZ+e9Ppqyw=)
2: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (hash: xZwoqxfOayEV992muPvVHQ2Q6o2AK6AHasTqY2PsFBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl
rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1772 (0x6ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B777C, serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
Validity
Not Before: Sep 20 22:07:48 2026 GMT
Not After : Sep 27 22:07:48 2026 GMT
Subject: CN=6ab05934-f705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:41:9c:80:c3:c9:b6:89:18:cb:71:0a:2f:c7:
ec:93:99:eb:15:f8:42:1f:cd:cf:b0:dc:30:0b:fd:
87:88:16:db:32:67:b9:23:8f:e7:19:f1:54:84:7c:
96:bc:27:8a:6f:e1:83:a4:4d:98:17:b7:c2:d4:be:
ba:c2:30:a5:c4:bf:b6:a7:87:1f:d9:e0:97:7a:3a:
f0:b0:4b:aa:0d:dc:29:3e:f5:2c:8e:86:6a:ec:de:
8c:80:1e:14:44:d1:57:c2:41:af:84:a9:69:47:bf:
92:5c:d0:0b:89:7f:f6:3c:cc:af:d0:53:ab:fb:6b:
17:8d:ac:4c:bb:bb:75:86:14:d5:9a:30:50:c7:8d:
ad:2b:0a:cb:a3:9a:63:77:07:73:62:12:76:95:42:
17:c0:f3:11:54:c3:bf:9c:0f:ab:7d:85:49:d0:d6:
08:45:6d:08:75:77:0f:d2:98:f9:3c:26:b4:ff:03:
fb:ee:54:64:7d:1e:d7:70:7e:b8:d3:e1:d1:0b:f8:
fb:12:2a:27:9e:be:1e:73:c5:f7:01:a9:7a:c8:f5:
b4:a1:e5:9b:08:96:f1:48:7e:eb:57:a3:ae:fb:1c:
52:07:9d:72:30:e5:3d:17:8e:64:5b:ee:92:75:70:
25:f9:41:1d:1a:50:46:10:81:c3:8b:6f:25:8c:23:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:43:6F:DB:68:54:68:9D:E2:74:60:59:9B:F8:3B:B4:CA:DD:37:7F
X509v3 Authority Key Identifier:
keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:14:6c:aa:ae:cf:31:63:26:56:ff:66:f4:29:d6:e4:da:46:
6c:4e:8d:1f:4d:45:82:5d:85:c1:32:1e:03:67:46:ef:51:8a:
fc:3f:b5:83:bd:77:f4:dc:88:4c:47:d9:ff:7f:f4:bd:2b:b4:
20:1f:63:ae:36:fa:71:62:9a:b4:9b:6e:59:82:71:e5:12:bd:
7a:bc:c3:82:56:6a:27:38:a6:8b:c4:27:02:b2:d1:8c:ca:4f:
77:9c:c3:52:51:a5:8a:89:48:aa:9b:ba:af:17:cd:2c:6b:ce:
64:d1:7d:a2:46:0d:c4:f9:6c:6f:fe:4e:29:d6:6d:1d:49:bf:
0a:ca:31:04:44:a0:65:e8:42:46:80:b1:e8:72:f8:e5:90:6d:
ac:47:f4:6c:36:cc:e5:ca:09:8b:10:98:df:21:1e:67:2e:55:
0d:ae:ec:10:72:5f:98:63:57:bf:eb:6f:7e:a8:ca:55:be:d3:
59:83:2d:d5:fa:ae:26:a9:3a:7b:37:08:c3:cc:d7:f7:a1:21:
2b:e4:b9:97:b1:72:ad:2b:c5:ea:6d:72:65:03:43:24:87:cd:
be:7b:48:f4:c3:e3:7f:23:f1:c8:53:20:59:50:5b:41:5e:eb:
80:a0:b0:5a:ab:ed:4d:6a:21:a6:3a:69:09:4f:da:9f:2c:26:
d6:c3:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:50:49 2026 by rpki-client