
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json)
Hash identifier: HSgG+r96g6mdQN6wVxsbSFTXgobjwZHWTfq7i0NYcbw=
Subject key identifier: FA:A6:CE:D6:26:67:AD:8E:D0:29:7A:08:53:65:47:2F:8D:D2:4C:0A
Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
Certificate serial: 085F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
Manifest number: 0858
Signing time: Wed 14 Oct 2026 21:11:47 +0000
Manifest this update: Wed 14 Oct 2026 21:11:46 +0000
Manifest next update: Wed 21 Oct 2026 21:11:46 +0000
Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: ZejGewFpDwadlRoYYZkeuCQv2/40p8sovJBaVRnzjOA=)
2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: AKDjbSZne5XxGKQtHpttzZyR3FFgT6uv/1fH/ygYHPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl
rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 21:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
Validity
Not Before: Oct 14 21:11:46 2026 GMT
Not After : Oct 21 21:11:46 2026 GMT
Subject: CN=6acff013-71f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:a6:86:05:ab:5c:a5:fb:03:60:b7:90:eb:
63:1a:93:06:9e:b8:4f:a2:c9:b0:20:fa:f4:77:3a:
37:ae:61:f9:99:6c:fa:03:89:de:11:b1:37:59:a8:
3b:2b:b6:7a:44:44:c1:bb:d0:d9:d3:7c:a8:87:5b:
f1:e1:42:b9:90:64:12:24:40:0f:b0:b4:92:0c:a1:
0e:81:ca:c6:e7:c1:c8:32:00:91:fd:43:a4:b1:a0:
25:83:66:cc:de:a6:e8:9b:03:64:62:98:06:0e:8b:
8b:bf:73:9b:54:a1:e6:9d:54:62:b9:fb:ec:c3:c2:
bf:71:7c:55:bd:d5:1a:86:7d:46:0c:62:6c:07:d7:
6f:0f:0e:9f:ce:84:8e:3e:a9:06:28:75:91:89:98:
32:3b:c2:9c:e7:68:f9:42:f5:fb:98:ee:af:54:a5:
dd:70:f9:e5:6c:e5:e9:36:38:24:92:f3:5c:4c:8e:
05:c8:9f:73:9c:a3:bb:bb:84:90:bf:34:ba:49:d8:
d1:b6:9f:41:c3:6b:48:98:1a:e1:5c:bd:0e:9b:21:
f5:5d:0e:81:94:85:cb:48:10:4f:86:ca:cb:e5:1a:
e5:bb:92:18:25:63:f5:5d:be:30:4b:1d:4d:bd:33:
28:e3:30:17:85:e2:71:c2:1e:dc:2a:83:e0:90:99:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A6:CE:D6:26:67:AD:8E:D0:29:7A:08:53:65:47:2F:8D:D2:4C:0A
X509v3 Authority Key Identifier:
keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d3:5c:4d:2f:2c:b3:be:2c:63:23:f2:1f:65:61:df:d3:29:
ff:8c:96:18:e0:98:2d:7b:0c:77:4c:9c:09:6e:32:ab:2e:1c:
15:bf:c2:5d:11:93:a8:b5:d4:a0:25:35:b8:59:6d:f5:24:cc:
91:99:85:35:aa:b4:08:59:a4:48:9d:4f:59:e3:3d:a6:ea:c3:
ac:6b:39:bd:c9:30:fb:3f:0b:d0:b6:24:8f:65:f7:92:83:71:
8c:8d:5c:d8:00:a7:4c:c2:4c:85:82:e3:3c:27:c0:44:e9:85:
c1:cd:47:95:1b:d4:82:57:da:27:f9:03:f5:a4:96:2b:ff:2b:
0d:d6:d8:39:49:15:d9:fc:33:88:ae:66:bb:be:3b:bd:5a:6c:
cb:f9:0a:ef:75:ef:9a:fb:47:03:77:96:49:4c:11:37:b0:a1:
d4:bd:66:1a:8a:48:44:76:40:bb:83:ff:e0:f5:e9:33:98:a6:
ba:fe:5d:85:5b:02:00:5e:44:b3:56:35:03:cc:bd:05:70:ee:
25:7b:0b:56:72:ed:be:bd:f5:91:52:4d:1f:0d:0c:78:b6:54:
e1:05:17:78:66:c6:e8:c9:fc:19:43:7a:27:56:cd:02:58:46:
8f:bc:b0:ca:28:dd:59:9f:2d:5f:8a:f6:b1:6d:36:98:8a:84:
f6:8f:90:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1
Qjg4MDk4RDEwHhcNMjYxMDE0MjExMTQ2WhcNMjYxMDIxMjExMTQ2WjAYMRYwFAYD
VQQDEw02YWNmZjAxMy03MWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqw+mhgWrXKX7A2C3kOtjGpMGnrhPosmwIPr0dzo3rmH5mWz6A4neEbE3Wag7
K7Z6RETBu9DZ03yoh1vx4UK5kGQSJEAPsLSSDKEOgcrG58HIMgCR/UOksaAlg2bM
3qbomwNkYpgGDouLv3ObVKHmnVRiufvsw8K/cXxVvdUahn1GDGJsB9dvDw6fzoSO
PqkGKHWRiZgyO8Kc52j5QvX7mO6vVKXdcPnlbOXpNjgkkvNcTI4FyJ9znKO7u4SQ
vzS6SdjRtp9Bw2tImBrhXL0OmyH1XQ6BlIXLSBBPhsrL5Rrlu5IYJWP1Xb4wSx1N
vTMo4zAXheJxwh7cKoPgkJly/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPqmztYm
Z62O0Cl6CFNlRy+N0kwKMB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy
NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt
TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS
aXUwaW9mdklvTFZiaUFtTkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbdNcTS8ss74sYyPyH2Vh39Mp/4yWGOCYLXsMd0ycCW4yqy4cFb/CXRGTqLXU
oCU1uFlt9STMkZmFNaq0CFmkSJ1PWeM9purDrGs5vckw+z8L0LYkj2X3koNxjI1c
2ACnTMJMhYLjPCfAROmFwc1HlRvUglfaJ/kD9aSWK/8rDdbYOUkV2fwziK5mu747
vVpsy/kK73XvmvtHA3eWSUwRN7Ch1L1mGopIRHZAu4P/4PXpM5imuv5dhVsCAF5E
s1Y1A8y9BXDuJXsLVnLtvr31kVJNHw0MeLZU4QUXeGbG6Mn8GUN6J1bNAlhGj7yw
yijdWZ8tX4r2sW02mIqE9o+Qgw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:01:53 2026 by rpki-client