
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier: uwD9SyglNTsxCxvTYZ0cvdmSEMVKgCsLYzxKQ7OZuFM=
Subject key identifier: 07:3E:20:32:92:E8:5D:6E:1E:39:8A:94:38:A0:65:1D:DE:E1:F1:CB
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial: 08A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number: 0896
Signing time: Sun 20 Sep 2026 20:37:10 +0000
Manifest this update: Sun 20 Sep 2026 20:37:10 +0000
Manifest next update: Sun 27 Sep 2026 20:37:10 +0000
Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: VM3nKSt45YA3SmXJQlpAC4RJdU+YxiGflyaU5zBkKJI=)
2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: qtMYIEnbiq7hnTXu83dyb1pR6Ew8tkioJCqNAvjo/dk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209 (0x8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Validity
Not Before: Sep 20 20:37:10 2026 GMT
Not After : Sep 27 20:37:10 2026 GMT
Subject: CN=6ab043f6-bfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:87:2b:83:e0:84:25:67:f4:76:11:de:17:
69:10:37:47:fe:e5:72:b6:b9:f3:9b:bb:33:c0:cf:
c7:cc:5f:8e:e2:9f:3a:17:05:ad:44:f9:b7:7a:7d:
a4:3a:d4:16:27:3f:f9:13:f3:69:94:43:51:6d:9c:
bb:ff:8d:eb:13:c8:2f:39:19:7b:ce:18:60:c9:e3:
26:ef:a5:a0:d8:ec:7c:c3:d3:5b:4a:47:55:06:c6:
52:92:53:a7:13:61:34:16:31:5f:67:36:56:4d:71:
88:da:8d:6c:4e:2f:be:b1:6f:f0:a1:0a:1f:8c:c1:
e5:c0:5c:65:d5:47:93:11:35:88:96:8d:76:ff:f3:
0a:7d:8c:2d:18:50:5e:58:27:68:e1:89:47:46:af:
84:b3:af:c9:a2:a8:c0:51:de:4e:a4:7a:07:7b:f5:
e1:7e:62:4c:ab:46:e4:f2:7a:db:e3:f2:80:5c:48:
44:0f:b1:99:a4:f7:e0:31:02:a1:2e:0b:df:c6:e5:
d1:c9:a3:ba:2d:a4:75:86:63:33:5c:bd:61:e4:e9:
1e:29:da:61:44:8a:36:7a:41:e6:8e:62:f3:ae:a4:
eb:82:c8:66:ab:a3:52:c9:9a:e3:d1:fb:f2:b5:f8:
99:31:77:85:0f:4d:91:3a:c1:06:86:70:74:17:f6:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3E:20:32:92:E8:5D:6E:1E:39:8A:94:38:A0:65:1D:DE:E1:F1:CB
X509v3 Authority Key Identifier:
keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:15:5f:00:05:5b:08:ff:18:2e:96:a7:13:a8:00:89:9c:77:
b3:77:c2:89:28:53:c2:b7:a1:b3:9b:79:43:a6:c4:10:50:47:
73:cc:d4:7b:2f:45:7b:1f:94:bf:2e:ff:1a:94:18:71:9f:d9:
b6:12:9a:41:57:af:cc:35:fc:51:62:b9:94:2e:b9:e8:1b:c5:
af:67:51:c1:24:aa:c6:0c:17:93:00:e8:0a:dc:b8:cd:de:0c:
ed:d2:fc:d8:8e:2f:32:6d:99:55:6e:76:90:78:f0:ab:ce:e1:
bf:45:38:46:2c:d3:66:f8:d6:df:32:57:8c:5b:1c:22:cc:a6:
4a:ae:87:c8:48:ff:b1:6e:a5:57:6f:10:c9:08:aa:e4:58:99:
62:44:01:8d:fa:6c:ef:0d:47:00:a5:fd:df:d6:cf:5a:a8:35:
45:c3:52:06:e2:a8:8e:21:40:2b:51:06:0a:b2:1e:93:be:a0:
ee:a5:13:1a:21:ab:62:fe:95:a5:3e:da:d1:13:1b:94:b4:4e:
52:f2:ff:51:b2:f4:91:7d:ff:19:40:48:22:1e:58:c4:27:82:
d4:3b:03:bf:de:70:61:d2:32:24:db:f2:3b:96:cb:1a:ac:9c:
89:ba:f7:7f:53:bd:34:cb:d3:bd:41:30:9c:37:6b:8f:b2:97:
11:36:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:12:06 2026 by rpki-client