
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json)
Hash identifier: FLN3HGv3O2dqIS4XaDswRrk17+rrqxngogdzRyFHDVA=
Subject key identifier: 2B:78:A0:B2:26:CF:B2:7B:3B:32:4F:C5:CD:B7:E2:59:B3:68:40:01
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial: 0572
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
Manifest number: 054D
Signing time: Sun 01 Mar 2026 00:07:33 +0000
Manifest this update: Sun 01 Mar 2026 00:07:32 +0000
Manifest next update: Sun 08 Mar 2026 00:07:32 +0000
Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: 2p8tBIBl74u9ckksn3y/hUAYgMY/maZhTz0HwYndygM=)
2: 25E05BFAE59911F08BE09E95496F56BC.roa (hash: 2U1GEFtQb6N5UWQCPZfAqkeRTmL/nMptsXy7c4HqcW0=)
3: 6E6FEF28DC1311F0BA8FDA195F6F56BC.roa (hash: mo1wOSg3aRPO3RbCWNG9vySpJfn0iy8HAMqJ5Ud1CP8=)
4: 9F890910DA3C11F088DF33818DD3641D.roa (hash: xzSi1UuzNWpD6HyPJQ8fyYnG2jejbsfTjsT5VO2sPn0=)
5: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: uvWCOvomLN/7hlVYLp/jcmXt9zO2kyVBg9I1lGQNm1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Validity
Not Before: Mar 1 00:07:32 2026 GMT
Not After : Mar 8 00:07:32 2026 GMT
Subject: CN=69a38345-2fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:63:ab:d5:d7:38:9e:39:70:74:c6:16:1b:
cc:23:3e:04:7b:c3:28:d2:b6:2c:5c:50:ed:49:ab:
34:be:c0:56:0a:ae:0e:20:c9:6a:c4:7c:96:85:e4:
41:a2:9e:b6:af:a7:b4:ca:ee:55:3e:3e:f4:3b:71:
74:44:94:2f:aa:67:b9:17:8f:37:d4:d7:e0:2b:f7:
33:17:9c:f0:47:52:16:45:15:a5:0a:c2:1b:05:60:
d7:6c:f6:8c:91:bf:2f:a9:03:38:35:d2:7c:46:49:
71:d4:53:dc:4c:cc:e2:69:7f:42:c1:57:b8:fe:55:
77:c4:68:44:af:6a:c8:43:c9:1c:28:b5:e7:6c:0d:
37:83:dd:91:a8:f5:d3:d4:dd:fc:cc:13:64:9d:80:
49:5f:fe:63:00:c1:a3:9d:bf:26:7a:22:7b:ae:52:
7c:b3:ed:ea:ce:16:92:7a:27:2c:f0:ae:24:df:ca:
8d:09:08:fa:bb:3f:4c:68:31:75:03:09:73:0b:fd:
cd:11:ae:19:ff:81:da:03:14:1b:8a:74:db:24:07:
3d:93:46:b6:ed:02:f1:5b:e5:45:01:5e:6e:f5:ef:
6a:12:a5:2c:01:24:18:e1:20:a8:2b:a8:30:f2:06:
d3:d6:c0:86:bb:9c:76:6c:f1:52:8b:58:d4:74:c1:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:78:A0:B2:26:CF:B2:7B:3B:32:4F:C5:CD:B7:E2:59:B3:68:40:01
X509v3 Authority Key Identifier:
keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:d0:2a:10:06:8b:11:89:d0:f7:9f:f9:ef:0d:81:1c:37:2a:
95:bb:fd:3a:ec:a9:f7:59:f4:00:ff:18:68:70:65:b7:bc:f2:
ee:1e:9e:3c:00:14:38:f6:82:29:21:ab:a3:23:a2:15:6b:89:
79:db:d8:5f:5a:48:05:e1:06:4b:e4:6d:85:89:94:1c:36:19:
2b:b0:d3:91:d5:b3:08:3d:8a:ca:06:33:b0:76:63:52:6c:59:
d9:b1:30:37:91:1c:be:31:40:94:35:a9:45:16:c5:16:27:0b:
9d:84:95:71:4c:5e:f7:e6:3b:8c:d4:66:de:28:9c:14:b7:93:
bf:e3:3f:90:81:4a:c8:bf:d7:e1:50:42:3e:0f:24:e3:52:bc:
1c:58:5c:bd:98:88:38:ff:d7:37:21:68:75:ab:86:09:5a:69:
d2:66:95:1a:16:f3:0f:80:53:a4:02:6d:26:cf:cb:4c:de:00:
ef:d9:b1:df:ff:1a:71:02:d3:82:4a:a5:eb:a6:58:6b:f7:7e:
15:12:e0:d5:a1:17:54:7d:d8:cf:9f:08:47:f5:49:a4:b0:2a:
6a:69:57:23:a1:2a:27:f7:46:3f:bc:76:3c:18:43:a7:43:e4:
ef:5a:3f:69:77:0f:71:a9:10:b7:09:fd:06:da:ed:93:b9:98:
65:9e:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:39 2026 by rpki-client