
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json)
Hash identifier: BzpDP+4U5YrRE8A99QIfn/jqFbgJpp9+a140hd1g0WA=
Subject key identifier: BF:3D:20:0E:DE:F4:6C:73:C5:33:58:8F:11:89:FC:20:DA:AD:36:F7
Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
Manifest number: 0115
Signing time: Fri 09 Oct 2026 06:42:13 +0000
Manifest this update: Fri 09 Oct 2026 06:42:13 +0000
Manifest next update: Fri 16 Oct 2026 06:42:13 +0000
Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: zYD6ewnzEgWR9x7XDG8kseGViJ2Jh4GJX7Ui4YGfoUE=)
2: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: ZAcnv2B2glJNz/amDzlP0oQS8f8IykGzbvOZt8DAQOY=)
3: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: V0jiGWcisCYeYKJhJdPZNpTEwuLUAeBQE/p7M60AP1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Validity
Not Before: Oct 9 06:42:13 2026 GMT
Not After : Oct 16 06:42:13 2026 GMT
Subject: CN=6ac88cc5-5404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:dd:00:31:5b:cb:d9:3a:02:e6:b8:10:a7:
7f:ad:d9:6b:30:26:16:d8:a6:5c:b2:68:29:b0:03:
3f:fa:d4:3e:44:c1:5c:bc:fe:4e:96:47:b6:5c:97:
a5:af:6c:64:1a:7a:dd:b5:db:ad:84:30:cd:1a:82:
ff:aa:ce:5a:75:ed:89:53:8a:77:04:45:e5:5a:6a:
a6:5a:05:51:14:de:c3:b6:fa:3b:de:a4:16:41:a4:
62:90:bd:6c:fc:0b:48:ed:9e:d3:45:d2:d9:c7:80:
53:fc:d6:67:22:a9:eb:91:79:4c:03:e5:ba:47:b9:
e4:fc:7d:9e:47:9d:0b:bb:55:73:a3:2a:ca:4b:45:
09:4d:99:96:5a:be:bd:63:c9:2f:6c:22:57:9b:c9:
5f:77:4b:1a:1e:25:68:76:eb:5e:48:47:cf:4d:1b:
8b:0e:d6:af:6b:94:a6:9a:7c:38:f1:40:7f:9b:ac:
8d:09:5b:05:91:6b:c4:b5:61:66:a0:c5:c1:8f:5a:
8b:3b:85:67:cd:92:7c:7d:1f:82:48:24:3b:b0:a2:
b4:38:e5:e1:86:c0:1f:9d:b8:45:48:07:82:cb:d6:
a5:5a:01:ac:43:e9:c6:d1:3e:43:49:58:53:cc:df:
1b:79:e0:82:cc:f3:c2:83:9b:fa:e0:85:31:cf:5d:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3D:20:0E:DE:F4:6C:73:C5:33:58:8F:11:89:FC:20:DA:AD:36:F7
X509v3 Authority Key Identifier:
keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:da:4e:14:9e:fb:d3:4a:70:e6:05:35:43:c6:29:bb:7d:95:
88:d5:d2:16:b1:cc:d7:5a:7b:aa:78:7b:68:25:de:5d:fb:43:
eb:bc:0d:4e:02:a6:87:25:8f:56:b6:e6:1e:33:5b:63:17:fa:
db:a8:2c:4f:31:e0:2d:2a:18:60:f4:0c:87:5a:ce:e7:96:34:
2f:4b:cb:9f:b0:f7:e8:8c:c9:08:8e:cc:e4:ec:56:52:25:96:
a7:3f:b4:1e:ab:4b:d7:a7:dc:08:66:c0:9a:95:a3:50:64:02:
ed:70:59:11:e7:d6:46:36:11:f7:71:80:c4:dc:39:18:ed:c6:
f2:46:c2:b4:7b:44:9d:74:75:04:8e:f7:e8:7c:1a:be:ef:bc:
9c:8c:3b:e5:9b:f3:a6:b5:32:ff:1b:49:b4:83:43:4f:88:5b:
57:53:f9:23:95:64:4c:4b:97:f8:cb:75:19:d3:b5:6c:fe:67:
52:71:e6:75:fd:37:5e:e7:8a:54:9d:a7:44:46:d3:1d:bb:3e:
8f:83:1e:2c:29:74:96:cb:c5:5f:17:21:e0:bd:b6:87:5d:9e:
a1:88:04:82:5f:76:7a:5f:2d:86:e3:09:e3:12:05:44:b7:45:
49:6d:35:73:fb:90:fc:81:83:dd:49:e6:e1:29:c1:2c:e4:dc:
4c:55:d5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:36:25 2026 by rpki-client