
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
File: sb1NsCH1THJj88NTX4g2hJui5g4.mft (raw, json)
Hash identifier: VWxTykgpWiA3rflALc/viB25/cBN3L281gQ7uhTThn4=
Subject key identifier: 80:55:B4:E0:F8:C1:55:61:04:D0:34:DA:94:FE:1F:00:E5:79:B5:46
Authority key identifier: B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E
Certificate issuer: /CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
Manifest number: 0163
Signing time: Fri 09 Oct 2026 05:39:36 +0000
Manifest this update: Fri 09 Oct 2026 05:39:35 +0000
Manifest next update: Fri 16 Oct 2026 05:39:35 +0000
Files and hashes: 1: sb1NsCH1THJj88NTX4g2hJui5g4.crl (hash: osjaqnUXKz/8Nu6F4aSMPyLR5I33imoAsLrY5363Fmw=)
2: A30B17FAA81911EF862F3A56C4F9AE02.roa (hash: vVE/wYQljIOEW6qq0MvXd9SjBMo9AS5Tw8SXEPHuwyo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl
rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 05:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E520F, serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
Validity
Not Before: Oct 9 05:39:35 2026 GMT
Not After : Oct 16 05:39:35 2026 GMT
Subject: CN=6ac87e17-06ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:b7:42:c1:9a:80:df:39:87:7f:44:d8:58:
10:cf:65:ac:da:22:03:1d:ce:82:16:10:39:07:85:
91:59:69:4a:55:2b:c6:39:53:d2:f4:1b:09:d7:49:
10:21:69:60:10:5c:2b:ba:d2:c5:93:b0:d4:23:9e:
72:0b:26:8e:62:12:da:14:eb:92:80:f0:cf:9f:d8:
e0:90:01:b0:8b:42:95:93:25:1c:0f:0b:87:85:6b:
01:a8:3a:52:a7:a1:4f:73:ba:5c:7e:98:d7:14:08:
12:68:a9:ee:db:02:60:79:90:61:50:ba:34:c9:f6:
70:55:f8:de:1c:5a:e1:9f:d2:1d:5d:f6:cb:ba:cb:
5f:70:48:61:56:6d:3e:02:f1:fc:9a:5a:99:a5:90:
7e:1f:14:89:57:96:79:00:7f:61:40:92:d2:6c:25:
dc:d5:41:7a:69:44:84:4a:bb:3c:61:3e:7e:17:0f:
75:83:51:34:0e:3f:02:d3:87:93:09:6e:62:57:c9:
42:82:8b:bf:f7:63:d6:eb:cc:08:90:fb:3c:64:b8:
ac:99:60:e2:0c:9a:72:27:14:4e:68:4e:8c:53:6a:
6b:34:51:81:c5:65:8f:e5:9f:e6:06:54:15:11:da:
1a:f4:37:5a:ce:55:1d:c3:cd:1d:a2:91:85:9e:2a:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:55:B4:E0:F8:C1:55:61:04:D0:34:DA:94:FE:1F:00:E5:79:B5:46
X509v3 Authority Key Identifier:
keyid:B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:dd:f1:bb:8f:78:01:e1:f4:11:f6:1d:de:bb:85:85:a3:3a:
2c:7a:bd:fb:4e:fb:57:da:df:56:56:81:4c:ea:40:ea:bc:3a:
b1:81:c4:38:4b:89:c2:ce:5b:9f:ac:a9:00:ad:2e:6d:6f:46:
04:2a:50:f1:4d:e8:64:be:e1:2c:9b:20:ff:9b:56:33:02:17:
b5:d3:2d:c0:0a:5b:6a:44:37:c0:05:f3:c2:f7:f5:73:a2:0c:
ec:7e:6c:18:63:a4:06:a6:bf:67:88:d0:78:7f:ff:f3:60:4a:
5e:e0:24:6f:a3:3e:cf:f8:18:31:3e:93:5c:7d:b1:4a:8b:9a:
bc:cc:0a:8a:68:f2:b5:39:c5:ad:7c:28:87:a4:9c:46:95:2b:
55:8c:90:8e:c9:6e:98:eb:35:db:66:ef:1c:76:11:08:2b:ba:
94:4a:ed:83:dd:9d:2a:fe:d7:99:52:19:21:67:63:15:7d:2e:
bd:9c:b1:c5:94:e8:0b:de:85:e7:2b:fa:c2:38:df:b2:6a:b0:
f0:b1:f3:14:36:f4:68:dd:80:47:a5:29:63:6c:4e:a5:b2:58:
ef:15:c5:b6:10:b0:ca:e6:ac:ca:fe:82:ff:14:3c:bd:06:56:
bc:0a:6c:f2:4f:cd:f4:48:c7:8c:b9:98:44:a8:bf:6c:05:20:
0b:4d:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:24:37 2026 by rpki-client