
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
File: suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft (raw, json)
Hash identifier: eSWBfYvPs1+lxAv6T5K9GMNQktc/FEZB4QIEG/0ZO5w=
Subject key identifier: 7D:AC:7D:25:79:90:EF:00:9D:14:7E:F9:B8:33:EF:84:4C:6E:18:2B
Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
Manifest number: 0154
Signing time: Fri 17 Apr 2026 04:45:04 +0000
Manifest this update: Fri 17 Apr 2026 04:45:03 +0000
Manifest next update: Fri 24 Apr 2026 04:45:03 +0000
Files and hashes: 1: suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl (hash: fpaDHmMzJsSez0ZKcLqp4ldstKtlCI3Sb1oQX8/90GA=)
2: 0D38E31833A411EF82E92524C4F9AE02.roa (hash: pj9aUMZT0p0mxgs9aMMBAdtewJzXJebkeL4JCQr84hg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl
rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Validity
Not Before: Apr 17 04:45:03 2026 GMT
Not After : Apr 24 04:45:03 2026 GMT
Subject: CN=69e1bacf-98cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:9d:1f:6c:72:a9:ba:09:13:9a:ec:77:b9:
d4:b7:ec:c0:2d:10:5f:47:4f:8b:41:dd:a7:0a:21:
22:cb:4d:1b:1b:92:b9:9a:f2:44:99:a1:6f:6f:ee:
5f:dc:4b:47:77:43:a5:b6:0e:82:fc:b0:57:b0:1b:
8e:e1:f1:2d:86:9e:73:9b:db:2d:00:e7:2f:5a:cc:
34:25:ae:49:73:1b:92:84:2e:cb:dd:8f:4f:56:54:
85:24:db:c3:96:50:22:1a:3d:cb:e0:e6:a2:94:15:
6a:16:6b:3c:29:65:f7:5e:be:d3:fa:e8:fa:e1:df:
51:1c:cd:79:87:dd:5e:ea:be:06:04:b7:fd:58:18:
f8:e9:77:5c:b1:0c:2d:a9:74:da:30:b0:f5:76:d4:
d8:02:f2:5e:de:71:8b:a9:5d:99:c8:a7:1e:54:b9:
4d:ff:c4:58:9f:22:39:1f:fb:92:cb:e9:56:85:ae:
2d:b4:6e:9b:e2:db:2b:c2:07:83:09:e5:83:af:fd:
3c:a5:51:3d:41:94:78:7d:a5:79:22:f1:cf:5e:4c:
66:17:71:9c:8e:72:8a:54:8e:cb:18:a3:3d:c3:65:
a9:10:92:64:39:c5:47:7b:20:03:a4:41:16:59:e6:
f8:fe:46:84:53:a1:4f:19:02:5e:3c:7c:fb:a6:ef:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:7D:25:79:90:EF:00:9D:14:7E:F9:B8:33:EF:84:4C:6E:18:2B
X509v3 Authority Key Identifier:
keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:45:b4:02:af:fe:34:1d:e3:9f:ac:66:5a:7d:a4:61:a8:c1:
7c:77:5c:81:1c:b1:12:26:02:1a:82:64:c5:d9:69:f4:9c:6b:
17:d9:cc:93:eb:eb:02:93:e7:d6:22:11:97:be:89:8a:28:12:
06:bc:05:da:c8:88:c9:ba:22:01:99:5f:34:e6:01:4a:02:6b:
d9:e0:96:de:d8:c2:1a:91:18:fe:27:a9:3e:05:66:6e:28:05:
a8:8e:a4:c1:2b:17:16:d6:e6:e9:37:82:b6:c7:c5:99:bf:cb:
c7:d2:8c:89:29:7a:f4:11:34:e0:1d:41:21:73:fa:d8:19:52:
fc:50:98:8b:04:a7:63:62:29:0e:38:f5:f5:6e:dc:ef:1f:98:
c2:58:d6:ee:56:3f:16:27:89:23:06:bd:90:a2:cb:ba:ee:10:
96:b3:9e:e0:68:35:cd:b4:d0:18:14:4d:d6:f8:cc:0f:ad:14:
79:d9:64:a6:5d:8a:f9:44:c7:a7:41:2f:0a:16:c6:9a:dc:64:
15:6d:0d:d5:7a:e8:87:2d:f3:02:78:11:c3:5e:2c:ab:e4:00:
46:65:85:af:f3:12:81:b6:d0:d0:cc:90:13:12:a6:32:7a:11:
a9:db:b1:79:70:28:86:5d:2a:51:76:5e:1e:5c:cc:4c:20:1c:
3a:27:55:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:42:56 2026 by rpki-client