
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
File: sxbAG3t1QxTi8Y9zen19iayrfmg.mft (raw, json)
Hash identifier: DfePM38DOwURPV7JhBwYxnME/KUgDzUevmOqt0hcLYQ=
Subject key identifier: 21:A7:17:1E:C3:C6:D4:06:A7:77:A6:A8:BB:14:DA:43:A2:76:37:B8
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
Manifest number: B5
Signing time: Sun 11 Oct 2026 07:51:08 +0000
Manifest this update: Sun 11 Oct 2026 07:51:07 +0000
Manifest next update: Sun 18 Oct 2026 07:51:07 +0000
Files and hashes: 1: sxbAG3t1QxTi8Y9zen19iayrfmg.crl (hash: sMer12EpSFsuisIrd913HOJgWvTv7vomFgLLmZQRe78=)
2: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (hash: QrH4+yF/QV8+PWn2diJ35OJkx405jDujszCVYOanSfQ=)
3: 8BB48B56CCFB11F0B624EC45C4F9AE02.roa (hash: idkvQzFYbdsBSjCaqZAU9RiEXtrOEJOl+VsJAR0ESu4=)
4: F6921460F58D11F0BCCF7FE5756F56BC.roa (hash: i5A7HWZGNtrSFGme8+cE96qqxQwsNoTCyoGxwxhU1Wk=)
5: 2601F1CEEB7111F0839E97F34E6F56BC.roa (hash: o3eQkFa5jtvSJm8EBegehGZ2Pgp62KSE/WHa6T+g7zc=)
6: A8F5E5EE21BE11F183C1AD111C3D8C67.roa (hash: Ieln71UjZ6UVyBBDQ/jNR5EcXnNAYyh6zzX3XZ/UHBM=)
7: F715DFB6F58D11F0BCCF7FE5756F56BC.roa (hash: WffA2epMcf/4JtgYGOrtunzCtgpaDBD29cCesds3GwQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 07:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Validity
Not Before: Oct 11 07:51:07 2026 GMT
Not After : Oct 18 07:51:07 2026 GMT
Subject: CN=6acb3fec-f83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:da:f5:29:5c:ed:db:7a:da:cb:93:66:bb:72:
ed:05:fe:77:96:fd:87:43:18:53:ac:d9:bb:38:68:
e3:b9:e5:64:c7:14:c9:7f:e9:8a:32:7a:12:d7:9b:
6e:62:b2:77:6d:e1:d2:a0:34:07:1e:e2:8b:a4:ea:
bc:3c:5d:03:40:42:aa:50:ef:97:5d:cd:2d:21:b9:
31:e4:3d:47:88:15:e2:85:7c:74:c8:71:00:b1:fc:
97:58:1a:cb:3e:3b:e1:5e:24:3d:ff:92:64:b5:13:
eb:e5:99:97:5e:05:53:e4:e6:5f:01:07:ac:6a:62:
3f:05:f5:d7:ce:f0:ca:72:d8:f1:e1:51:38:ca:21:
25:76:cc:91:c1:27:1a:a9:33:3c:dc:6d:45:d4:39:
1f:06:cf:31:ab:7d:b6:8b:ea:2a:1f:07:2a:88:bf:
6e:c0:fc:e9:a4:2f:b8:77:ae:f3:87:71:f3:1d:20:
09:e6:10:46:77:a6:e1:76:8b:35:5d:33:41:4a:10:
86:c6:fe:c2:d7:02:da:2d:86:f7:c7:ea:88:2b:d5:
90:fa:f8:6a:6b:2f:71:34:38:7f:ae:ea:92:d4:5d:
3b:04:a6:a3:94:2a:4b:4d:a5:ec:9a:15:f0:e4:cf:
18:7a:ca:1f:61:bb:7d:0d:8c:95:c7:b8:01:9a:31:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:17:1E:C3:C6:D4:06:A7:77:A6:A8:BB:14:DA:43:A2:76:37:B8
X509v3 Authority Key Identifier:
keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:e7:7b:3e:b7:f2:32:08:2b:54:20:73:9a:df:b3:14:62:f0:
db:0b:26:c3:a0:d6:7c:d0:48:4a:ec:18:f2:30:44:4b:4a:13:
70:f2:cd:c9:57:8a:16:b6:95:80:28:69:4e:40:20:93:f0:98:
41:a1:f1:16:1b:12:54:6c:2e:5d:93:31:0a:5a:fb:98:6d:8e:
98:e6:d6:0c:70:15:ba:f6:5e:58:2a:b0:4b:83:9c:dc:24:ce:
6f:ef:f4:12:a4:67:e0:58:8b:5c:95:32:62:5b:c9:92:26:0c:
9f:03:49:b3:18:2e:1c:ad:50:cd:ee:05:62:89:a1:f6:c7:a1:
6d:df:0b:53:f0:49:25:9b:61:dc:44:97:c9:e1:28:94:a2:49:
ee:1e:ca:9a:6a:68:a7:b6:26:a7:60:50:c4:0b:85:4a:fa:9d:
ff:d1:00:1d:2d:2c:8d:f9:6c:8e:d2:f0:53:d9:f8:36:cd:06:
fe:00:df:cc:98:13:8d:8f:c7:44:d8:dd:fd:7f:a9:cd:fd:30:
36:09:54:aa:46:67:a5:46:c1:53:48:2d:02:6f:77:68:6e:07:
c9:5f:f9:b6:e9:af:0d:55:a8:16:b1:13:eb:05:40:ae:37:ef:
0b:c9:97:31:13:96:d2:a7:ee:83:51:61:05:41:0e:7f:22:1e:
61:e5:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:54:07 2026 by rpki-client