
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json)
Hash identifier: upf8guWU9dR6oYpHRZujsEJytu1QLJ+v/djOnc+3TEE=
Subject key identifier: 0C:C7:02:C6:34:4D:9E:45:98:10:05:8D:C1:72:BD:38:C9:1F:F8:C8
Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Certificate serial: 1198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
Manifest number: 117B
Signing time: Fri 18 Sep 2026 17:11:14 +0000
Manifest this update: Fri 18 Sep 2026 17:11:13 +0000
Manifest next update: Fri 25 Sep 2026 17:11:13 +0000
Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: 1mSBGpthcpuHrfHXP5kaUlsCnsKh71OVn1wRZuxgFSQ=)
2: WaFbwQxbOyD3Ef8DwUKf0uYIGOk.asa (hash: WmkKwCyoLkelYdHTogcqdSeu/IFs1eCzpqo1emK/ZUE=)
3: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: 3o6dj/XokqZdrY5E0NL8+hP2E/G8Ccuo1K+sm8MmmjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4504 (0x1198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE096, serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Validity
Not Before: Sep 18 17:11:13 2026 GMT
Not After : Sep 25 17:11:13 2026 GMT
Subject: CN=6aad70b1-2078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:96:95:49:26:a3:57:7b:ea:a5:bf:36:ff:
7a:33:46:7d:44:64:51:cc:e6:58:fa:25:b5:f7:64:
3f:16:70:6c:65:fd:ed:80:42:f1:fe:b5:bf:d7:57:
d4:08:e6:ff:50:7f:57:21:2e:e6:83:e0:6c:43:d9:
47:f1:2f:d6:03:61:d0:e7:3c:52:3c:f4:dd:d6:f7:
72:5d:de:1d:94:55:f7:9c:11:2c:82:cc:f0:3a:22:
cf:ee:5a:ba:72:04:16:4b:78:34:4a:3a:5d:a5:75:
dd:71:21:6f:7d:b5:01:a6:3e:a9:15:20:ad:0d:49:
6d:d1:cb:d8:d3:52:15:a2:27:bf:cf:9a:dd:f9:fc:
bb:57:87:5b:96:3d:aa:f4:1f:ed:2e:b4:fc:a6:65:
a6:61:56:eb:bb:21:c9:a4:3b:6b:61:6c:cd:c4:fe:
5c:41:60:3d:53:88:41:1b:dd:e5:5d:de:d3:b3:ff:
17:14:08:2d:08:34:e0:93:c0:74:b1:6a:60:2b:f2:
cc:47:d9:ba:bd:6a:2a:56:9c:75:16:fe:3a:41:87:
06:40:7b:be:df:c0:fa:04:ec:9b:af:ed:90:3a:a9:
15:07:99:af:57:a5:69:96:fc:48:1c:f6:3e:c5:c3:
35:0b:2b:91:d4:c2:9a:79:10:65:ba:5d:50:5c:2a:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C7:02:C6:34:4D:9E:45:98:10:05:8D:C1:72:BD:38:C9:1F:F8:C8
X509v3 Authority Key Identifier:
keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:37:6f:02:2b:1a:44:b0:8e:0c:6c:ff:fb:ce:7d:66:b2:4e:
ea:b1:da:2d:85:11:6c:53:aa:7e:cd:34:8d:30:c2:fc:62:f6:
8f:aa:f8:da:34:33:c3:81:d6:32:e9:a7:f2:be:09:51:bc:6a:
83:4e:06:96:00:7d:71:2b:b6:08:2c:2d:34:ef:fc:8d:b3:3a:
be:0f:ca:db:ea:ce:3a:73:b5:7b:8f:dc:ce:49:bd:94:ad:4b:
80:b0:69:c5:cc:75:ca:78:74:c4:65:8b:da:66:7f:f5:37:60:
92:1f:fc:e0:07:1d:aa:b1:04:d8:46:f9:19:f3:c7:7a:83:a6:
9a:f5:28:df:29:2e:21:70:6f:07:21:40:b6:b4:66:88:14:a6:
88:69:22:5b:55:6f:e2:e3:98:de:a9:39:d8:d2:33:fa:61:32:
bf:e5:c7:1b:5b:4b:fc:f8:9b:f6:57:a8:6c:bb:ab:0b:36:28:
42:f9:07:0b:89:74:96:02:94:c1:7a:6e:bf:5f:85:30:b3:72:
24:6a:9e:3b:69:c2:8d:13:3a:1c:ce:43:97:fa:e1:32:91:4f:
56:93:a7:d7:04:9d:bc:fe:ea:d1:88:61:12:fe:b8:ba:a1:4f:
2a:2f:d1:bd:8c:68:9c:64:24:c0:e8:68:9b:88:46:00:75:06:
fa:da:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:20:34 2026 by rpki-client