
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
File: SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json)
Hash identifier: alh6ycMCxOjjVap+cJWd3t3wZG6QFMqN9G555MdoqMY=
Subject key identifier: CE:42:EE:CC:5A:D0:8C:EA:57:62:3B:7F:AA:42:0C:F5:5D:10:FE:5F
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
Manifest number: 010A
Signing time: Sun 01 Mar 2026 07:04:59 +0000
Manifest this update: Sun 01 Mar 2026 07:04:59 +0000
Manifest next update: Sun 08 Mar 2026 07:04:59 +0000
Files and hashes: 1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: W8ktm85Us+EZuEFLJmJVlIZwlDQUhZn6fmUdTWsdzQA=)
2: 35525B92845611EFB053C341C4F9AE02.roa (hash: nap5DwScCHSxl7+vobvju05szU4kvHjXe5lhp9A3q7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Validity
Not Before: Mar 1 07:04:59 2026 GMT
Not After : Mar 8 07:04:59 2026 GMT
Subject: CN=69a3e51b-127a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:ca:4c:fd:aa:91:e1:07:e3:fa:db:a8:0c:
4b:87:fe:23:34:b6:78:be:aa:c6:4a:56:a4:b3:19:
6b:4f:59:e4:44:0a:b1:3f:03:0b:dd:03:df:a6:d6:
6b:19:db:30:54:10:1e:36:28:cb:ef:20:ff:d0:ec:
3c:63:2c:cb:79:2f:bf:85:ed:eb:2d:bb:e2:76:a4:
79:f4:32:60:9c:54:45:0a:bc:27:28:53:59:25:05:
dc:9d:c1:c0:d1:34:a4:bb:54:1b:76:23:de:5c:1a:
62:fb:3f:e7:45:c1:a5:e6:1c:14:2a:38:8a:86:91:
c3:e1:f1:52:ad:76:12:a4:72:87:44:7f:62:58:bd:
5a:93:59:68:f3:1e:87:80:aa:c8:ac:9e:e7:68:13:
2e:2f:5e:97:15:54:75:83:e2:0b:2e:8f:81:6b:5a:
84:c7:39:04:05:aa:a9:b8:02:f9:eb:ea:b3:03:c8:
58:70:1a:b9:b4:84:a1:ae:35:0c:1a:bd:58:91:9d:
a1:df:42:d9:91:f5:ed:c1:57:f4:fd:98:a6:a1:56:
c6:2d:14:c4:69:86:dc:6d:b6:b0:23:93:61:14:ed:
ec:9c:22:eb:67:61:75:22:d3:31:0c:45:3c:45:eb:
14:a4:f1:ba:79:f9:85:d7:89:6b:9d:2c:a5:61:a0:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:42:EE:CC:5A:D0:8C:EA:57:62:3B:7F:AA:42:0C:F5:5D:10:FE:5F
X509v3 Authority Key Identifier:
keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:18:1d:9f:9f:79:64:cb:95:e2:fc:55:4a:2c:69:df:c1:fb:
a9:3b:3d:c8:bd:ef:c6:f1:2c:c4:5f:d6:78:4a:d5:be:84:7c:
31:6d:32:78:d5:42:01:d4:b1:eb:94:9c:33:72:48:78:f9:4d:
56:a6:1d:75:1d:e1:05:77:47:5a:af:28:55:99:55:a9:fc:ff:
1b:c6:3a:32:71:d2:8f:ab:b4:4d:be:65:5b:3e:49:1f:73:16:
a9:1c:24:76:01:f6:a2:63:80:b3:f1:cb:c4:cf:f9:3d:5c:25:
a3:b4:55:51:26:6a:3a:58:9b:a3:f7:68:f0:76:06:4f:e4:45:
7d:bf:5c:dd:14:2c:67:9c:c6:b2:04:10:aa:20:93:63:5c:6d:
b9:7d:9f:60:ba:57:64:d8:02:bd:83:a7:4d:05:76:1c:77:94:
aa:c8:91:3c:de:c6:85:14:5b:90:ff:4e:41:81:f6:15:56:7f:
4e:a7:d0:63:1a:8a:77:d1:c0:28:4f:7f:f0:b9:21:5e:29:cf:
c4:02:7c:37:fe:d1:8f:99:04:8e:9e:83:f2:9a:27:b9:3b:e4:
35:6e:79:d6:f9:ad:e3:6a:e9:9e:66:e6:e0:06:0a:a3:c6:86:
a2:95:23:13:84:83:ca:d3:32:c3:fb:9a:ff:6d:84:ae:e1:6c:
e0:8c:6d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:53 2026 by rpki-client