
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json)
Hash identifier: rKgyJH+0H/+A4JlvRga0OVK76PB39Zjlm0OBnXSkvR8=
Subject key identifier: 43:36:DC:70:D9:17:83:99:AB:A8:DE:F4:A6:A4:73:EF:F5:9A:B8:DE
Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
Manifest number: 0111
Signing time: Fri 17 Apr 2026 05:40:15 +0000
Manifest this update: Fri 17 Apr 2026 05:40:15 +0000
Manifest next update: Fri 24 Apr 2026 05:40:15 +0000
Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: 4S3SxABzH9qFa9SXMLQpo36TIwllHLvim9noX8WyA4Q=)
2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: mSukAUMe5Lr3KzZ1M4lKG8ZcBcOq+sE7NJI6nlUpRwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Validity
Not Before: Apr 17 05:40:15 2026 GMT
Not After : Apr 24 05:40:15 2026 GMT
Subject: CN=69e1c7bf-891d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:86:67:73:00:62:84:84:f7:df:23:e9:67:
25:6a:af:c3:59:d1:cd:41:18:63:3b:46:b7:e1:e2:
44:6f:ef:43:c2:72:b6:c7:bf:bc:d4:48:26:3b:b9:
91:70:1b:e3:73:1c:84:92:e6:c6:6b:a2:70:e4:3f:
ad:18:a9:af:11:85:29:43:20:51:74:da:22:cc:47:
4f:4e:7f:03:66:85:ae:cb:02:1a:b1:a2:94:c1:d8:
c3:c7:62:50:3f:ce:8c:2c:83:49:cd:dd:01:8c:32:
0b:9d:77:4b:ff:91:b1:0a:b2:d3:07:f5:69:c9:3d:
63:3d:a7:2c:8d:47:5e:b9:1e:0f:57:37:98:80:7b:
35:bd:6c:31:e7:01:fe:1d:d2:2e:eb:20:81:41:6e:
98:19:16:8f:f5:7c:0a:02:15:cf:b9:fc:2f:00:ce:
8c:69:fd:5e:84:4a:f7:f9:bf:ed:72:af:f5:fc:d2:
f0:9f:5e:e4:72:5b:b8:c1:52:3e:1a:af:26:46:b4:
cf:14:81:5e:83:71:56:a4:7c:d5:25:9a:be:ef:3b:
bf:15:3b:5d:a1:1c:d4:05:19:c5:d0:b4:49:ff:16:
f1:dd:e4:98:26:4d:d5:0a:b6:f6:0c:6f:d9:8b:dd:
44:18:a6:b5:6b:04:62:7d:31:ab:19:ec:c2:e5:11:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:36:DC:70:D9:17:83:99:AB:A8:DE:F4:A6:A4:73:EF:F5:9A:B8:DE
X509v3 Authority Key Identifier:
keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:06:44:58:8e:94:10:e8:e1:4c:a2:7a:4a:f1:36:0e:b4:91:
8b:9f:b0:c5:98:d8:18:94:e2:a1:55:24:20:19:65:3a:9d:4f:
c9:ec:20:f5:2f:5b:b0:49:84:40:95:e2:f9:a0:1e:0c:d4:b2:
f9:31:f3:cf:c3:80:ea:f2:d5:f3:64:a6:14:cc:44:5f:ee:54:
1c:f3:40:5a:5b:d6:ae:07:a1:ba:7b:f6:59:28:a4:da:39:99:
36:64:ec:85:48:ac:4e:c3:36:ba:03:82:cc:04:51:e6:9f:6f:
82:2e:6c:46:36:28:10:b0:95:02:27:b5:99:06:ff:d5:1f:dd:
71:6b:95:15:98:ac:a0:a1:cc:18:57:30:a0:a4:91:8e:43:1c:
0a:2d:58:07:ee:54:d0:9d:22:c5:24:86:8f:2e:5b:26:de:6c:
5d:b9:f5:25:82:97:b1:26:9f:20:89:fa:73:ab:0b:53:51:5f:
ce:42:93:1c:94:10:f7:5e:b5:ec:35:f5:51:62:88:98:80:f1:
ca:73:64:4a:89:a8:a9:5b:93:bc:3a:68:1f:af:84:d6:c0:44:
2a:43:13:be:30:36:5d:f4:b5:8f:27:33:9b:db:4a:6b:9a:c7:
a9:85:d3:93:4d:c6:6f:ab:c0:34:3d:6d:11:f2:8d:c6:24:14:
f8:8a:55:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:38 2026 by rpki-client