
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
File: sejBHBQOD6dR6L-mWlnHFd1-HFM.mft (raw, json)
Hash identifier: Z/e0QTn9WFbjcONreE3ZoLGJTzSdl+Wsyrsm56dm8V4=
Subject key identifier: 76:78:00:DE:85:51:DD:8C:81:26:84:CB:13:5E:A7:6E:D3:F4:64:F6
Authority key identifier: B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53
Certificate issuer: /CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
Manifest number: 01D3
Signing time: Sun 15 Nov 2026 03:53:23 +0000
Manifest this update: Sun 15 Nov 2026 03:53:23 +0000
Manifest next update: Sun 22 Nov 2026 03:53:23 +0000
Files and hashes: 1: sejBHBQOD6dR6L-mWlnHFd1-HFM.crl (hash: hz0sFpIL0WSFHRNZxJ1MddykDOemY5EB9Ivq2T2zNB4=)
2: 4D45F08C1E3B11EFB02B0184C4F9AE02.roa (hash: o/R0jEjjnB/zFb12F0yOXo0IMZH9+3ea7WsJdD7D1DM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl
rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 03:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE9F6, serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
Validity
Not Before: Nov 15 03:53:23 2026 GMT
Not After : Nov 22 03:53:23 2026 GMT
Subject: CN=6af92cb3-57b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:f5:c1:12:8e:1d:68:d4:a4:60:b5:7e:c2:
e7:2c:2a:42:7b:6b:c9:ea:7b:12:84:b0:02:b2:70:
7b:1d:e1:22:69:14:01:ad:72:65:22:8d:74:1d:07:
43:3f:6f:9a:d1:4b:a1:a5:61:07:f1:d4:2e:70:8c:
a0:f8:2d:ff:ac:54:58:8d:5f:40:2f:e6:d9:5b:c0:
9b:43:8f:f6:77:5e:04:00:bf:aa:a8:29:5c:50:67:
fc:61:fd:8d:2b:8b:91:4b:59:b8:1f:c6:37:77:7d:
7b:26:05:38:34:03:74:ba:23:d4:c8:dc:33:2d:14:
08:00:9c:9f:c6:fc:1b:8c:d8:73:45:e0:77:84:49:
03:bc:06:63:75:04:ac:24:3a:0f:01:0e:16:98:ad:
db:31:dd:cf:f7:fb:ce:01:82:f3:2f:6f:f7:34:8b:
56:cb:56:e3:46:37:de:2a:af:d3:4b:0a:40:90:86:
1a:cb:9e:8c:c7:9c:fd:49:b9:42:c2:a0:aa:75:b7:
16:c9:d0:f1:c9:1e:12:e0:ed:24:3b:9f:60:e2:a7:
b2:65:be:3b:3e:df:fb:5f:38:f6:5b:21:68:c7:83:
57:89:b6:64:c1:3a:16:46:d5:db:bc:80:d5:f3:8b:
fe:fc:b6:d2:76:08:b2:74:51:6e:74:4e:42:23:28:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:78:00:DE:85:51:DD:8C:81:26:84:CB:13:5E:A7:6E:D3:F4:64:F6
X509v3 Authority Key Identifier:
keyid:B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:d4:ce:db:09:41:38:2a:16:d8:b1:c7:72:ed:8c:fd:d1:0a:
43:f5:71:5a:bd:b7:af:f1:e5:64:b1:86:ef:99:5e:1c:8d:db:
eb:84:1e:e8:11:90:ff:be:91:ac:62:83:46:71:9d:31:73:7d:
60:f7:4f:8e:05:00:ef:fd:98:d5:61:8f:47:b4:85:79:5b:d4:
16:e6:5d:10:87:84:8f:72:2b:bd:2d:0f:22:da:5c:dc:38:35:
97:f8:65:22:9d:97:f1:da:df:4c:a6:01:44:55:2e:45:ff:19:
32:6a:e3:dd:f6:e1:90:66:12:41:93:94:07:18:ea:52:00:00:
06:2b:ac:e4:02:26:19:ea:9f:2d:4e:8a:38:27:6c:20:03:b3:
40:41:6c:69:78:ec:1c:94:bc:38:23:71:e7:e7:a9:9b:e6:4f:
0f:f0:31:57:8a:a7:a2:1c:33:e9:ae:30:bf:57:e0:fa:d7:07:
a0:82:a1:7f:a3:98:fe:e7:f0:8d:e4:94:db:f7:2f:13:90:36:
83:a3:71:67:95:cd:5d:4b:2d:7b:ce:24:d5:1d:4c:a8:e7:8a:
71:2a:56:0d:2b:c5:ad:df:15:af:0b:d6:58:ec:0b:9f:85:66:
ad:55:63:48:3d:36:09:c4:6a:ec:ce:ac:0c:b9:23:64:a9:13:
1b:2f:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:16:34 2026 by rpki-client