
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json)
Hash identifier: 8OQGO/olS+ihLj6jlbxebjofy5dBW+D9p2Vu3oTOk0o=
Subject key identifier: 2A:B1:3A:6D:B7:77:A8:4A:15:BB:35:4F:5F:17:08:75:63:9F:DE:E4
Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Certificate serial: 08F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
Manifest number: 08B3
Signing time: Fri 12 Jun 2026 21:24:22 +0000
Manifest this update: Fri 12 Jun 2026 21:24:21 +0000
Manifest next update: Fri 19 Jun 2026 21:24:21 +0000
Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: 7maJ/gfnmtHEHtvCs80bye4XYnoAIKXF7xP5mNcutVg=)
2: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: hhAQbiBusLUKt765Go4ceXpM5iS75GtSHTtWboHmI4A=)
3: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: 42y2IvwrLcP86ePHCf3Zl904O206V8onirE7M47u3Ug=)
4: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: BpbgeH/Vr/553sYirLn87E6dC8av6GNKTUUgGPnSWFc=)
5: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: Uv/v0jJRP1b/GKNvDesBCtfjzY1O3IX5XgFxcHY7TZA=)
6: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: CdE0wm1hQkaULrjbI4DvgCzOn/hrQ6Nkq8KmfPCKoy0=)
7: 67FF0960076911EF8569F157C4F9AE02.roa (hash: kux5oSfatn2oOCm3na/+0puHZ/uNesRh8WO7dtAzHlU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl
rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Validity
Not Before: Jun 12 21:24:21 2026 GMT
Not After : Jun 19 21:24:21 2026 GMT
Subject: CN=6a2c7906-24f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d4:ff:59:2c:12:2b:4c:1c:d6:89:40:9f:cc:
20:ae:3d:a1:39:c0:6b:64:e9:b5:d4:08:93:17:98:
e8:b1:92:43:6b:99:45:1e:c1:76:63:41:23:19:7a:
8f:73:0d:ac:04:2e:99:5e:67:00:32:04:71:f9:df:
7d:3c:aa:bb:73:91:35:f2:fb:52:ea:bf:16:40:6c:
66:ab:14:5d:54:d0:1c:0b:9d:c0:3d:56:0b:88:eb:
a6:4e:60:59:29:62:f0:11:77:39:8b:fe:1b:b6:7c:
7f:fa:c9:27:b2:bf:97:a7:88:bc:bf:80:e5:fe:ea:
d9:74:12:5d:2d:38:c6:07:b0:53:17:b4:a4:9f:52:
af:c5:27:4a:c4:bb:a2:71:b2:6c:6a:41:2f:b3:6e:
69:ab:25:c8:97:ed:45:5d:42:c1:e1:77:1d:9a:32:
6f:cd:83:c3:52:09:cd:6a:ab:fd:ef:df:44:a7:a7:
11:bb:ba:6a:e4:0d:83:f5:e4:22:20:3d:79:fd:c9:
96:90:2d:21:94:d1:f3:23:ed:fb:4b:5e:74:68:9b:
ee:10:1a:fa:e3:90:bf:31:ff:f4:f6:a4:fe:27:92:
f9:cb:96:b8:0b:cf:58:f5:39:68:9d:fe:38:f3:09:
b4:b0:27:a0:f1:8e:f5:6c:9b:e4:43:b4:5f:59:99:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:3A:6D:B7:77:A8:4A:15:BB:35:4F:5F:17:08:75:63:9F:DE:E4
X509v3 Authority Key Identifier:
keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4f:2a:ec:bf:88:6b:26:58:3e:8f:1c:05:72:38:0b:c0:d4:
f0:e7:1d:4a:d2:51:84:96:79:0c:e7:99:c5:8a:56:7a:10:02:
05:15:bb:c6:0e:d3:f5:dd:5b:89:a0:1a:9f:d6:91:aa:df:ae:
50:06:fd:0e:9d:49:c5:0a:c6:c3:94:db:43:17:90:09:28:30:
65:ee:3d:90:06:da:fd:e1:44:3c:a7:10:3a:1b:f4:f7:10:b3:
0d:db:05:93:a9:3d:0d:08:e2:aa:10:e6:17:b5:5d:ff:ab:71:
05:3c:a8:8b:26:ba:67:18:13:cb:7b:99:66:e7:ea:71:52:9a:
1e:36:a9:23:89:8a:a5:eb:b0:fc:4b:a7:e6:c7:c1:f1:98:26:
4b:de:c8:36:74:c1:8f:71:a4:6b:56:d7:32:d5:8f:96:6a:9f:
fa:98:c3:77:c4:15:5a:d4:76:f0:81:d5:41:e6:00:32:fa:03:
03:95:5e:1e:be:bb:2f:ed:c4:7a:28:b3:9c:44:7f:da:e3:88:
1d:80:25:90:fb:56:4a:93:5e:99:8d:32:e1:31:19:03:d6:9a:
53:5d:1c:00:cf:ab:47:4b:11:29:2e:10:6b:bb:91:6f:4a:e8:
c2:a4:f5:66:59:b5:7b:13:15:b4:02:c1:63:ef:30:a6:b1:de:
d2:ea:e2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:46 2026 by rpki-client