
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
File: S0QUrmheSI9CsbZH7qAd67DE86A.mft (raw, json)
Hash identifier: 71+6XPOjnpC7Ua1h2pvuuSKxSkUmmAa+C8zIuabBYTE=
Subject key identifier: DE:08:1D:DB:08:8E:3F:48:AB:9F:FF:A5:9B:53:37:84:7D:F0:80:C2
Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0
Certificate issuer: /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
Certificate serial: 037E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
Manifest number: 0370
Signing time: Sun 27 Sep 2026 00:53:26 +0000
Manifest this update: Sun 27 Sep 2026 00:53:25 +0000
Manifest next update: Sun 04 Oct 2026 00:53:25 +0000
Files and hashes: 1: S0QUrmheSI9CsbZH7qAd67DE86A.crl (hash: cECKM25inkyG3Ll2NVJtQxhW5yYQocWXqtDMFMoDq6w=)
2: B3F935160E0F11ED89E89675C4F9AE02.roa (hash: x4nzg1eiqnQ3xL+MBP6Ok4N2HAa+La4GXnfqybcguR8=)
3: B4A58FE60E0F11ED89E89675C4F9AE02.roa (hash: yJO+i+oPRpe2hJdrBjCi6ZjWjUnUDaX0mnbL3Z2r1os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl
rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894 (0x37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9B1B, serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
Validity
Not Before: Sep 27 00:53:25 2026 GMT
Not After : Oct 4 00:53:25 2026 GMT
Subject: CN=6ab86906-e1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bf:76:fb:af:4a:23:d7:28:8e:00:2c:ea:51:
2b:df:16:d4:1a:a8:0b:2f:5c:d2:36:96:36:81:3f:
6c:42:f2:a6:ab:7f:31:80:ae:9a:fd:c5:9a:5f:6b:
bd:e5:f6:87:ef:b0:bd:cd:ee:be:46:a0:05:a5:27:
61:70:31:ca:16:c6:95:c4:ff:f4:06:46:38:e8:10:
32:9a:04:f7:93:8f:e8:a4:6b:00:39:c9:f7:04:fc:
2b:cf:43:9b:8b:53:1a:7c:0d:79:3b:35:be:af:6a:
f7:34:ad:2a:6d:90:19:51:1a:08:04:07:11:38:9c:
66:cd:49:30:c3:00:e3:20:0d:6b:7b:78:50:83:e3:
ce:5b:2f:6e:b2:13:ce:3e:fd:a4:6a:8e:ac:e8:5e:
8c:ee:96:ed:5a:89:8c:5d:52:a6:85:cd:cc:d9:f1:
5a:02:76:7e:ae:2b:6f:bb:5d:7d:2a:12:9a:9c:33:
16:d1:be:06:a9:46:dd:3c:76:bb:e6:bb:41:42:ac:
e5:0f:7a:85:89:de:e4:c3:a1:41:8b:23:b7:ee:5e:
ea:23:af:dc:75:2a:c1:12:3f:fe:fc:2a:36:84:d4:
80:99:56:f8:92:1c:a0:b2:e7:82:c0:f8:fe:88:93:
3c:07:9d:7f:57:e7:64:29:9b:58:4e:73:9d:94:be:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:08:1D:DB:08:8E:3F:48:AB:9F:FF:A5:9B:53:37:84:7D:F0:80:C2
X509v3 Authority Key Identifier:
keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ad:85:90:26:41:e0:8b:25:75:06:94:8d:53:b6:96:3f:f9:
ef:f5:ec:28:58:06:a4:13:8f:a2:09:97:19:b3:83:08:de:76:
60:59:55:7d:cb:eb:86:97:cd:60:6c:8f:8e:47:27:52:c3:84:
c5:ec:b4:af:f0:20:f9:93:c3:a9:b7:82:07:cc:de:b9:10:27:
a4:c0:13:49:fb:ae:19:94:72:82:e6:ef:9f:8e:a9:87:9b:e6:
89:be:13:1a:7d:44:84:72:0a:ea:a2:62:7e:29:09:ec:da:a3:
0d:92:b4:89:85:61:88:cc:44:10:a4:dc:d1:ef:bd:bb:14:ac:
52:3e:d3:f4:35:a0:d0:31:61:7e:6a:f9:8d:5a:c9:e2:02:2f:
93:c9:7f:db:98:47:59:f5:4c:d0:aa:0c:5b:61:46:69:2d:2c:
c4:7f:98:0b:f0:69:26:54:de:2e:c0:2e:b8:03:c4:53:cf:19:
38:50:2e:80:7e:1a:e0:6c:d0:5a:46:a6:09:eb:dd:90:2d:a3:
c0:79:ae:3f:b8:85:f9:0c:21:cf:ba:69:99:0c:26:c6:43:41:
b2:5d:64:37:a3:c0:35:af:b8:99:36:71:0d:2b:74:d0:47:6b:
af:b7:1e:dc:76:f2:d8:24:a7:9f:7c:6b:a1:ef:01:e8:cf:a0:
e1:4c:d3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:56:14 2026 by rpki-client