
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File: u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier: dmyfJYTxypnVsdW0KqRiUCjHheLY8bw7p3KOXUx8OFs=
Subject key identifier: 34:64:92:24:80:58:44:80:65:54:47:85:2B:70:AC:0C:06:B4:41:C3
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial: 094E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number: 0931
Signing time: Thu 16 Apr 2026 20:06:57 +0000
Manifest this update: Thu 16 Apr 2026 20:06:57 +0000
Manifest next update: Thu 23 Apr 2026 20:06:57 +0000
Files and hashes: 1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: G3QVgTGjRYKZ3uTf5xjTYp+UCaO/tOrk4yE3M6XJc3o=)
2: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: S1YQDpfRZfYWxWzS0yYZYUtJLVH3RsmKcbHcWJLLIjw=)
3: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: J5TlVE9TaJMgIGEY3wJEZY2JAbPuoZdGlfLWjr6sNVQ=)
4: 660823EABF3C11EAAF328582C4F9AE02.roa (hash: 0g7hH+h0wqgO5cXR1NqKAhi3KI5E1WOC5tykieUczg0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Validity
Not Before: Apr 16 20:06:57 2026 GMT
Not After : Apr 23 20:06:57 2026 GMT
Subject: CN=69e14161-b1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:cb:97:66:f6:0c:9d:98:ac:92:9b:58:52:
d1:16:69:ee:68:80:7c:6f:8f:31:ec:63:75:35:75:
10:a6:22:ec:cc:f4:2c:79:3d:c5:82:93:64:1e:e2:
aa:90:2e:e9:c6:14:f2:6f:c3:a1:d4:cb:87:23:e8:
75:5d:1e:b9:67:78:e4:29:60:d2:58:ca:6e:2b:16:
67:23:36:83:ec:9a:4f:96:64:ab:b0:81:59:a0:d3:
bd:e3:1c:4d:4b:25:5d:bb:b4:07:c9:1c:39:1d:72:
8e:76:aa:55:78:b8:0a:f0:21:d2:64:66:d9:49:f2:
74:dd:18:84:f1:78:3a:9c:23:28:93:ac:f8:a8:94:
1e:4b:cf:6a:2a:3a:1b:3d:92:f0:92:da:f6:ab:99:
6c:53:4e:30:ff:68:fc:8e:95:7f:47:6f:e8:e5:ab:
b1:b7:0e:4e:dd:cb:03:05:7a:f7:f2:29:3d:59:df:
64:64:70:45:e0:16:eb:98:60:3b:f7:b3:a8:56:6e:
60:89:ce:11:2b:c6:5f:88:e8:05:c6:fa:d3:d1:48:
c7:ea:d2:73:a1:95:66:d3:4d:c6:4a:1b:49:47:e6:
87:85:16:b2:f7:15:65:5b:4a:04:e3:67:ce:23:c7:
6e:ec:34:52:06:dd:29:8c:f2:bb:2b:d2:dc:d2:3e:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:64:92:24:80:58:44:80:65:54:47:85:2B:70:AC:0C:06:B4:41:C3
X509v3 Authority Key Identifier:
keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:8e:0d:cd:5e:6b:bc:29:7d:e9:c9:a4:37:e5:cc:e7:c6:9e:
84:4b:e8:35:c7:31:98:3f:36:61:4f:f4:2d:94:07:a3:d9:f7:
35:d4:10:16:35:21:9a:a0:5f:c4:05:5f:18:82:a4:bf:02:d0:
6c:d1:d1:55:b0:47:59:7a:46:eb:9d:8b:43:83:69:9f:35:50:
32:b3:d1:63:98:07:68:4e:db:3c:a4:de:f3:4b:14:cf:c5:06:
81:0a:d6:d2:ac:56:5b:35:00:00:c3:6a:53:de:49:00:2c:e7:
f1:50:a7:cc:db:07:5a:a6:b6:26:05:f8:a9:c0:ec:c7:4d:0b:
db:fc:69:47:95:e4:ea:c3:0b:7d:70:1f:21:de:df:0b:87:75:
ff:a0:11:6d:62:07:d1:9f:dd:b5:3b:18:ad:b3:78:a7:71:d6:
59:6a:0a:6a:7a:d1:04:83:10:d4:61:df:23:55:7f:33:11:54:
4b:ce:26:ce:f8:c9:09:5b:4b:75:c2:7d:4c:53:28:0b:c7:56:
98:03:c8:af:6e:1a:b2:aa:65:56:c6:43:d6:23:f5:f2:64:90:
b7:52:be:ad:c0:85:95:df:49:b7:b7:fa:d2:25:9d:a7:b7:9c:
0b:59:49:98:2c:59:cc:92:11:c9:cf:1a:d8:fa:01:d4:d9:74:
73:06:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:07:04 2026 by rpki-client