
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json)
Hash identifier: UqJh9YzoSw0Zt+K+JrVSz1uHMfgV2FuigKWtfmpZ79c=
Subject key identifier: 04:62:FC:D0:CE:A7:3F:8E:2E:61:6A:10:60:20:08:88:7D:AB:3B:E9
Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8
Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8
Certificate serial: 0DBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
Manifest number: 0DA7
Signing time: Tue 06 Oct 2026 18:02:43 +0000
Manifest this update: Tue 06 Oct 2026 18:02:42 +0000
Manifest next update: Tue 13 Oct 2026 18:02:42 +0000
Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: Sef8bwubbmG6Wxu6bY68ziCqBQClcmCrOQfSGSxVDD4=)
2: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: NXbiSnXZUjh8e0dCBVaR6mjHDOPkzJYQhnCA/dP5jgQ=)
3: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: OutccXiBEL/sQ024xr5UNL0COLFnkxGkB0q/nROLFaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl
rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3519 (0xdbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8
Validity
Not Before: Oct 6 18:02:42 2026 GMT
Not After : Oct 13 18:02:42 2026 GMT
Subject: CN=6ac537c2-3b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:70:a3:45:7f:97:db:19:32:b7:4d:85:6c:
d2:67:28:4b:f8:d5:dd:07:8b:7c:63:0e:e4:e9:3b:
64:3f:2b:1f:93:d0:73:3f:a1:e5:03:cd:cc:d8:de:
20:e8:35:9e:f9:a2:aa:b2:5a:15:bd:de:9b:83:f2:
c0:66:97:4d:9d:b0:48:5f:13:e4:5c:60:e3:af:3d:
c9:05:99:9a:38:5b:92:71:28:fb:5d:72:65:df:32:
29:10:ca:d9:9c:e8:52:21:25:fc:a1:e6:74:ad:c6:
ea:3d:d3:e5:f3:8d:3a:fd:d0:07:78:6f:a8:fc:d3:
cd:12:da:ee:ba:a3:22:b1:bc:4e:7a:22:7a:7e:6c:
06:26:7b:da:e3:89:59:2d:23:9b:0e:6e:a5:a2:c0:
f6:a6:9e:87:e1:ee:1b:21:49:57:c3:b4:62:35:53:
37:16:6a:f8:6a:f3:16:9c:1c:04:31:b1:1c:a7:65:
fc:18:56:c3:4d:f8:e7:52:df:b8:12:b9:e6:7f:0d:
46:15:4d:a7:c7:88:a3:49:6d:1c:43:21:47:04:5b:
d9:90:6e:40:83:b0:59:9a:48:40:1c:ec:df:7e:0d:
8f:2c:ad:74:a3:0a:b5:4e:9c:77:ec:20:96:59:ca:
06:c4:bd:4e:55:be:1a:f5:84:78:3b:b6:77:9e:44:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:62:FC:D0:CE:A7:3F:8E:2E:61:6A:10:60:20:08:88:7D:AB:3B:E9
X509v3 Authority Key Identifier:
keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:84:d6:59:00:a2:7a:af:8f:5f:70:e5:10:5d:dc:38:9c:b5:
79:0c:14:dd:8d:44:88:c6:e7:fc:6c:cc:3a:e0:40:f2:32:e8:
f6:a6:8a:39:19:03:4d:cc:c3:9c:c4:2f:18:bf:af:04:15:64:
7f:8b:ba:35:d3:96:8c:fa:b3:be:30:2a:51:7f:03:84:ec:3e:
72:5c:d2:8c:54:2c:4d:9b:31:67:ba:e5:24:d0:29:cd:bf:da:
29:70:33:4c:b1:3d:c8:b8:04:e3:4a:18:75:f6:20:69:c5:10:
50:09:67:03:32:db:f1:0d:37:de:39:f6:53:58:b5:cd:55:6f:
55:c5:4a:77:ba:8b:48:b7:66:8f:f9:74:82:8f:68:16:ea:fd:
68:38:81:ed:2c:14:6f:dd:d7:73:b5:4d:53:53:1b:27:20:71:
39:31:4b:36:91:7c:18:e4:be:b4:c4:6d:2c:62:23:f7:46:3b:
c5:42:84:9e:a5:2c:70:d8:74:8f:51:bc:93:85:9e:49:c8:9f:
6f:31:3e:24:3e:34:34:5f:a9:03:f6:3a:f9:e9:c0:86:0f:39:
be:39:c2:79:1c:4d:7a:90:cf:89:4d:7c:3a:df:b5:a1:7f:0a:
de:e1:a0:b7:49:84:6f:9b:e1:97:3c:c1:ac:db:8e:e8:ff:a4:
fa:30:db:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG
NTlENzNBQTgwHhcNMjYxMDA2MTgwMjQyWhcNMjYxMDEzMTgwMjQyWjAYMRYwFAYD
VQQDEw02YWM1MzdjMi0zYjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz3lwo0V/l9sZMrdNhWzSZyhL+NXdB4t8Yw7k6TtkPysfk9BzP6HlA83M2N4g
6DWe+aKqsloVvd6bg/LAZpdNnbBIXxPkXGDjrz3JBZmaOFuScSj7XXJl3zIpEMrZ
nOhSISX8oeZ0rcbqPdPl8406/dAHeG+o/NPNEtruuqMisbxOeiJ6fmwGJnva44lZ
LSObDm6losD2pp6H4e4bIUlXw7RiNVM3Fmr4avMWnBwEMbEcp2X8GFbDTfjnUt+4
Ernmfw1GFU2nx4ijSW0cQyFHBFvZkG5Ag7BZmkhAHOzffg2PLK10owq1Tpx37CCW
WcoGxL1OVb4a9YR4O7Z3nkS8nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARi/NDO
pz+OLmFqEGAgCIh9qzvpMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0
RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn
QlR1d214OG5TOWoxblhPcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAboTWWQCieq+PX3DlEF3cOJy1eQwU3Y1EiMbn/GzMOuBA8jLo9qaKORkDTczD
nMQvGL+vBBVkf4u6NdOWjPqzvjAqUX8DhOw+clzSjFQsTZsxZ7rlJNApzb/aKXAz
TLE9yLgE40oYdfYgacUQUAlnAzLb8Q033jn2U1i1zVVvVcVKd7qLSLdmj/l0go9o
Fur9aDiB7SwUb93Xc7VNU1MbJyBxOTFLNpF8GOS+tMRtLGIj90Y7xUKEnqUscNh0
j1G8k4WeScifbzE+JD40NF+pA/Y6+enAhg85vjnCeRxNepDPiU18Ot+1oX8K3uGg
t0mEb5vhlzzBrNuO6P+k+jDbkw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 22:57:49 2026 by rpki-client