
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
File: sxbAG3t1QxTi8Y9zen19iayrfmg.mft (raw, json)
Hash identifier: rJO63QCAWwkztX3QEXrGRgJ/hfS/HJIbXyz8mxo6QeY=
Subject key identifier: 91:D5:7E:32:A3:1F:7F:CC:F8:DF:85:79:F3:0B:21:9B:0C:2D:68:89
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
Manifest number: 3B
Signing time: Sun 01 Mar 2026 10:04:10 +0000
Manifest this update: Sun 01 Mar 2026 10:04:10 +0000
Manifest next update: Sun 08 Mar 2026 10:04:10 +0000
Files and hashes: 1: sxbAG3t1QxTi8Y9zen19iayrfmg.crl (hash: CfrjheL3oCgxEbkawRkHj1+aVuNsiwNE2wMJPI/3e28=)
2: F6921460F58D11F0BCCF7FE5756F56BC.roa (hash: pMD/GHJGLubTp0PpPOjyflk922Gz+1O37/zrmRW8WCQ=)
3: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (hash: QrH4+yF/QV8+PWn2diJ35OJkx405jDujszCVYOanSfQ=)
4: F715DFB6F58D11F0BCCF7FE5756F56BC.roa (hash: PeJla8eoBWwUJgQxEstU1E2su1skE1min+boSaLfihI=)
5: 2601F1CEEB7111F0839E97F34E6F56BC.roa (hash: E07ldg3v3DN0Yw10RFkEuAEAUbz8ZBv51AcBSf3INAU=)
6: 8BB48B56CCFB11F0B624EC45C4F9AE02.roa (hash: idkvQzFYbdsBSjCaqZAU9RiEXtrOEJOl+VsJAR0ESu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Validity
Not Before: Mar 1 10:04:10 2026 GMT
Not After : Mar 8 10:04:10 2026 GMT
Subject: CN=69a40f1a-ab88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ab:83:b0:48:d2:f6:7b:87:26:76:7b:35:62:
d6:2b:c9:5b:2c:ca:54:01:ea:a7:ad:17:21:18:80:
65:6e:60:43:b6:54:05:5c:37:b6:7a:11:31:42:6f:
b2:e3:01:d3:68:14:d5:5a:27:76:9c:b0:62:22:ae:
8e:01:64:f4:7d:17:e4:ff:5e:83:a4:b9:ed:9d:45:
0b:f6:08:08:2f:f8:49:94:f6:a5:d3:9c:02:f3:2a:
42:74:2e:a8:86:a3:69:37:c1:80:1e:7a:7b:35:25:
eb:ac:bf:05:f1:11:3a:21:79:ba:83:12:49:0a:86:
3a:03:8f:12:78:40:a3:af:de:41:65:ae:d5:13:04:
db:2c:3d:fb:94:c4:7d:f9:13:46:a1:d8:34:38:27:
8b:50:f3:02:f9:aa:85:a3:fa:de:eb:b8:33:c6:6f:
ff:1c:26:3b:33:af:50:f6:ed:66:f2:02:fa:7a:9a:
c4:8c:ec:87:1f:26:bc:a2:14:69:49:d3:81:05:21:
cd:b6:00:ef:bf:00:58:4b:3f:da:82:72:1d:d9:3c:
1b:1b:30:f8:78:b2:55:8e:8b:43:e1:d1:92:76:94:
38:45:65:23:b0:47:53:9b:08:a9:96:84:98:32:d3:
61:8e:93:c2:64:1f:19:43:01:2d:8f:e1:a4:b2:70:
60:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:7E:32:A3:1F:7F:CC:F8:DF:85:79:F3:0B:21:9B:0C:2D:68:89
X509v3 Authority Key Identifier:
keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:df:71:c9:63:11:54:a1:37:28:7e:28:5b:0b:74:21:f4:40:
ba:78:d7:0c:b7:21:fe:3c:69:22:09:c2:4c:f6:9e:23:75:df:
18:2f:aa:86:c9:ae:e6:3f:0c:62:1f:7e:fc:af:ca:f9:65:f0:
68:db:26:16:94:bd:c1:f3:b0:a3:37:9a:16:8d:98:38:63:c5:
ae:e8:2b:13:92:5e:07:c1:fb:ca:2c:63:57:dd:55:ce:a3:ad:
1e:b7:4d:50:1b:24:79:3c:e3:24:b1:76:b4:88:36:6c:02:a1:
01:c4:2e:33:92:f5:ea:3e:a6:b4:44:0e:ce:de:49:00:bf:7b:
2c:35:ae:9b:31:d6:48:13:48:d9:a8:81:5c:66:68:26:e9:a8:
a8:9b:cf:4b:c5:16:ba:71:9c:b0:71:ed:13:7a:78:34:38:b6:
d4:9e:81:31:8e:40:f0:d0:43:e6:1c:9e:f7:db:78:86:67:57:
42:d6:46:60:f8:aa:b3:d3:1d:e7:bd:22:a8:42:9f:4e:ae:c6:
82:df:b9:c2:7b:18:3a:e2:5c:19:a5:c8:2c:b4:0c:1f:43:be:
a1:95:86:72:75:5c:05:dc:61:80:49:5e:56:0c:7d:af:d3:4f:
53:be:fd:77:c1:ae:76:15:1e:10:75:cc:e3:07:6f:15:e7:1c:
3c:5d:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:30 2026 by rpki-client