
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
File: Swkt8QQoD0W8PyeW9AHMK0xhROk.mft (raw, json)
Hash identifier: kNJcOafxCWrBpCaduqIJ4OBW3+P0mno45uYo8wrcOok=
Subject key identifier: 48:CA:CC:C8:73:F6:8D:CE:1A:35:26:F5:73:E3:1D:AB:48:7E:51:53
Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
Manifest number: 014F
Signing time: Mon 21 Sep 2026 05:20:25 +0000
Manifest this update: Mon 21 Sep 2026 05:20:24 +0000
Manifest next update: Mon 28 Sep 2026 05:20:24 +0000
Files and hashes: 1: Swkt8QQoD0W8PyeW9AHMK0xhROk.crl (hash: FH4+etwb7El7aUFZoLgMnJRYFyI8SH2f03kg/kQZPVA=)
2: E5FC085A843011F0971BDC44C4F9AE02.roa (hash: dm3BcPGPdQuO5Idson2cH8Me4yvZsLSNX+U6zphRieA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Validity
Not Before: Sep 21 05:20:24 2026 GMT
Not After : Sep 28 05:20:24 2026 GMT
Subject: CN=6ab0be98-f719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:8c:20:00:26:56:b1:f7:5a:e7:6f:34:5b:
f1:bc:12:7d:12:1d:fc:b2:2e:2c:2a:ec:75:61:5f:
98:7a:82:25:a2:d9:68:54:b6:bc:53:a1:44:3e:f9:
c5:d8:e4:bd:4e:e0:2c:fe:18:47:58:19:61:a4:9b:
e8:5e:6b:ad:9b:8f:b9:8f:59:a7:44:96:45:92:88:
47:cb:2e:a5:9e:a1:a4:06:ca:f8:54:5d:20:72:0b:
77:8e:fd:55:0c:c4:52:66:20:16:69:e4:0f:08:f2:
06:d8:27:c6:d9:ae:fd:4b:f5:95:90:3c:d8:0c:5f:
91:a7:84:4d:6e:2e:1d:65:b0:51:95:26:1f:3a:c0:
86:83:f6:2c:ca:55:e4:f7:76:0a:7a:1c:b1:c4:65:
f6:20:6e:29:56:ba:22:c2:c1:52:d3:49:24:ce:f0:
ee:63:0e:c6:d4:f4:dd:ff:9e:55:d7:2e:1c:57:5e:
b6:8c:d4:fa:57:c2:b7:ac:ff:b6:cc:72:78:28:dd:
89:5b:21:40:00:d7:db:75:94:2f:49:4a:31:54:4f:
71:a8:8b:fb:15:ef:6c:16:8c:90:68:4c:29:87:35:
6e:51:71:e6:0d:cc:16:9a:fd:d7:34:2a:53:2d:9d:
3d:fc:5e:ad:99:8f:f2:c2:8c:76:8e:61:50:2a:45:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CA:CC:C8:73:F6:8D:CE:1A:35:26:F5:73:E3:1D:AB:48:7E:51:53
X509v3 Authority Key Identifier:
keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7f:88:d6:f4:b4:31:25:78:22:cf:4c:5d:68:cd:43:35:3f:
26:5d:fa:68:e4:cb:8a:8d:66:22:c0:6e:8c:11:db:35:e5:d0:
7d:a9:1c:de:20:d1:30:22:9c:a6:bf:cd:0f:f8:e3:6a:f6:34:
3a:df:69:0f:fa:cd:b8:ff:11:c7:af:de:ae:50:08:a9:fe:f4:
c1:d6:54:6a:79:a8:01:40:4a:1c:b3:60:99:76:21:58:95:f3:
fb:7e:90:b3:b1:43:d6:5b:db:f7:7e:a2:ca:9c:de:bb:b2:19:
75:d5:27:83:71:ce:10:5d:9d:06:a6:89:69:f8:cc:9d:a7:d7:
69:d1:41:7a:8b:f5:f0:42:a8:d9:ef:77:b5:a3:e9:e9:ac:c8:
4b:be:67:0a:70:84:8c:1f:e5:24:88:4c:e9:50:70:55:1f:22:
aa:3a:6d:47:45:60:28:47:72:32:eb:45:eb:27:37:5e:cd:36:
00:ef:27:36:02:73:71:c7:03:b8:df:32:cd:5a:a8:d4:9b:ff:
34:dc:df:1f:85:a3:21:33:0c:d8:64:50:7f:2e:f8:fc:0c:08:
c0:89:b6:46:d5:43:b9:ea:3e:69:2c:05:d0:e1:51:b8:56:8b:
5b:b1:09:4e:17:b1:d9:df:b8:8f:87:67:6e:b7:6c:c3:16:0d:
66:4c:27:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:20:24 2026 by rpki-client