
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json)
Hash identifier: Y6XIULqoPdZLAISzZ4t9gYJ+zu15kQPaAUcSLvTZkNE=
Subject key identifier: 88:03:33:77:99:FA:0E:9B:44:92:E9:F2:B6:55:B3:07:14:66:0B:23
Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
Manifest number: F9
Signing time: Mon 02 Mar 2026 12:33:43 +0000
Manifest this update: Mon 02 Mar 2026 12:33:43 +0000
Manifest next update: Mon 09 Mar 2026 12:33:43 +0000
Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: SwUHrUpjOW/fjAiB7dkgyGgrO7wNaP+rLT1ZEzb30hQ=)
2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: mSukAUMe5Lr3KzZ1M4lKG8ZcBcOq+sE7NJI6nlUpRwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Validity
Not Before: Mar 2 12:33:43 2026 GMT
Not After : Mar 9 12:33:43 2026 GMT
Subject: CN=69a583a7-9623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:f0:2a:57:16:a7:54:d2:f1:35:13:34:a3:
7a:10:fd:d6:a8:15:d0:aa:a1:90:e8:a0:ce:8d:a4:
d5:d2:f4:64:0f:64:1b:92:1d:3e:af:95:13:b0:31:
86:b6:6e:40:a8:91:83:5d:4d:9f:74:0c:d4:18:a0:
34:6d:16:00:5c:ba:d7:2e:36:73:ab:5d:f3:9e:db:
b5:da:a4:06:62:0a:fe:3b:83:60:79:53:9a:f8:01:
dd:aa:38:34:5d:4f:29:ea:36:c1:59:4b:8e:43:da:
e8:87:bf:40:da:1f:4b:81:82:69:5f:d0:31:31:d0:
14:d5:ed:2e:fe:32:65:1c:80:91:ee:c8:5b:34:02:
e8:bb:ff:6d:fb:0c:e2:d7:5b:fc:7a:84:cd:42:9e:
f5:ac:be:24:10:d2:c7:0e:52:74:95:ff:95:46:c1:
7b:d2:35:8a:66:33:05:64:6a:cf:df:1c:f8:82:73:
22:c1:6e:47:c2:e0:e2:f4:37:c5:4b:68:58:d7:a1:
7a:5e:cd:b6:44:cb:fd:50:a3:a5:59:e6:c8:ce:45:
3a:40:86:99:55:f0:e1:19:c5:17:3f:a3:f2:33:57:
f4:bc:4d:a4:50:80:9a:7a:cf:22:81:0f:88:5e:70:
c4:83:a2:21:82:89:99:e4:5d:98:8e:37:50:8a:08:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:03:33:77:99:FA:0E:9B:44:92:E9:F2:B6:55:B3:07:14:66:0B:23
X509v3 Authority Key Identifier:
keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:cd:db:3d:2b:29:ce:ec:cc:d7:9f:68:57:96:b8:69:d5:14:
98:5f:e9:f3:14:70:cf:0d:1e:62:44:20:90:41:15:e3:a9:b8:
34:d2:9d:9d:52:ae:9e:5b:e8:c7:e9:7e:82:24:2a:18:02:3c:
97:b6:71:92:6c:59:2e:c7:4f:48:f7:a9:18:8f:39:e1:07:18:
d7:e6:6e:bc:ba:33:03:8f:07:03:f6:6f:e3:c4:ae:86:44:a5:
b4:6f:10:33:95:38:8f:9a:c4:32:fd:ca:2e:ae:ef:57:30:0f:
0b:11:87:43:96:4e:18:8c:a0:e7:3b:32:de:25:bd:1b:cb:d1:
dc:fb:58:c7:43:9b:d8:51:d7:d3:56:50:0c:6b:e4:f3:2a:c8:
1f:63:81:ad:87:39:fc:92:95:ab:b8:81:ad:a7:88:77:b8:5c:
e5:c5:d1:e1:b1:38:8a:c3:4c:84:08:62:a3:74:46:70:59:29:
5f:a4:db:3b:d3:7b:c2:0f:aa:96:59:80:bf:0b:21:42:39:52:
89:13:8e:8d:45:26:bd:1f:a8:51:81:db:90:e2:6f:28:27:5d:
e2:4d:12:6a:7c:1c:80:15:31:1f:ba:0c:66:af:ee:67:1d:a2:
d3:89:5b:e9:d1:b3:8e:83:2a:27:8a:35:ec:f7:ee:f7:b8:25:
6d:b8:51:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE5NDExMTAvBgNVBAUTKEIyRTlEQTVFQjM4OTZCRUZDMERGRDVBN0VCMzBEQjI5
MzE0QkJBMTIwHhcNMjYwMzAyMTIzMzQzWhcNMjYwMzA5MTIzMzQzWjAYMRYwFAYD
VQQDEw02OWE1ODNhNy05NjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvRbwKlcWp1TS8TUTNKN6EP3WqBXQqqGQ6KDOjaTV0vRkD2Qbkh0+r5UTsDGG
tm5AqJGDXU2fdAzUGKA0bRYAXLrXLjZzq13zntu12qQGYgr+O4NgeVOa+AHdqjg0
XU8p6jbBWUuOQ9roh79A2h9LgYJpX9AxMdAU1e0u/jJlHICR7shbNALou/9t+wzi
11v8eoTNQp71rL4kENLHDlJ0lf+VRsF70jWKZjMFZGrP3xz4gnMiwW5HwuDi9DfF
S2hY16F6Xs22RMv9UKOlWebIzkU6QIaZVfDhGcUXP6PyM1f0vE2kUICaes8igQ+I
XnDEg6IhgomZ5F2YjjdQighcjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgDM3eZ
+g6bRJLp8rZVswcUZgsjMB8GA1UdIwQYMBaAFLLp2l6ziWvvwN/Vp+sw2ykxS7oS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85M0FDQUI2NEEw
QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9zdW5hWHJPSmEtX0EzOVduNnpEYktURkx1
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3N1bmFYck9KYS1fQTM5V242ekRiS1RGTHVoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTk0MS85M0FDQUI2NEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9zdW5hWHJPSmEt
X0EzOVduNnpEYktURkx1aEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAc3bPSspzuzM159oV5a4adUUmF/p8xRwzw0eYkQgkEEV46m4NNKdnVKunlvo
x+l+giQqGAI8l7ZxkmxZLsdPSPepGI854QcY1+ZuvLozA48HA/Zv48SuhkSltG8Q
M5U4j5rEMv3KLq7vVzAPCxGHQ5ZOGIyg5zsy3iW9G8vR3PtYx0Ob2FHX01ZQDGvk
8yrIH2OBrYc5/JKVq7iBraeId7hc5cXR4bE4isNMhAhio3RGcFkpX6TbO9N7wg+q
llmAvwshQjlSiROOjUUmvR+oUYHbkOJvKCdd4k0SanwcgBUxH7oMZq/uZx2i04lb
6dGzjoMqJ4o17Pfu97glbbhRPQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:43:09 2026 by rpki-client