
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
File: sJELB8hrD_owClKsfDH8tSwFMtc.mft (raw, json)
Hash identifier: TOU86Axo9yj5FDEykymfmcaY/fJ3+5x1WwTzutAGwQ8=
Subject key identifier: 34:DA:1F:3F:77:79:59:28:FA:CC:D9:2C:30:80:2C:C4:C5:F2:82:DC
Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
Certificate issuer: /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
Certificate serial: 06ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
Manifest number: 06E4
Signing time: Tue 22 Sep 2026 21:57:20 +0000
Manifest this update: Tue 22 Sep 2026 21:57:20 +0000
Manifest next update: Tue 29 Sep 2026 21:57:20 +0000
Files and hashes: 1: sJELB8hrD_owClKsfDH8tSwFMtc.crl (hash: /lqDKtmMR32y/46M2w4OcPhzhwd9Mueh/8/RY36o/hU=)
2: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (hash: xZwoqxfOayEV992muPvVHQ2Q6o2AK6AHasTqY2PsFBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl
rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1773 (0x6ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B777C, serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
Validity
Not Before: Sep 22 21:57:20 2026 GMT
Not After : Sep 29 21:57:20 2026 GMT
Subject: CN=6ab2f9c0-3e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:a8:59:20:ef:fe:bc:46:8c:ae:b9:ad:46:
08:0b:74:66:e6:25:4e:0b:a2:a1:d2:a4:4a:68:f6:
de:02:4b:7a:d6:db:0a:06:11:d6:3a:a4:93:56:00:
9d:43:a9:b0:4f:49:47:d1:cc:9a:bf:ac:43:09:ac:
6c:3a:ea:7f:49:6d:4b:27:76:3f:91:9c:3b:cc:28:
3c:9b:56:ba:b7:0e:99:0c:f0:c8:e1:36:2f:05:ae:
f2:d3:53:54:4c:51:c4:1d:69:0a:87:a4:73:5b:96:
54:a0:27:72:77:9a:d6:cb:f8:db:c3:26:55:f0:58:
43:a2:bd:b1:2c:ae:03:85:69:1a:6f:00:ca:ec:65:
f1:b0:8d:34:11:c5:6f:01:30:9d:66:cd:26:d9:f4:
f9:65:14:4c:9c:85:c6:eb:fe:a5:e8:d8:2c:1a:8b:
21:83:f9:f8:27:bd:52:3b:2b:16:ad:bc:3e:dd:86:
ae:5e:1b:1c:97:5b:97:d0:08:26:91:bc:34:68:a5:
d3:b1:7a:a7:ca:a0:a4:62:e1:18:fe:f0:a5:4f:fa:
e3:d9:2d:a2:aa:ac:56:e2:61:0b:7a:a7:19:9e:ca:
5a:43:86:a7:a2:ec:54:42:32:31:ec:e3:78:96:10:
f1:33:9e:5e:86:de:7a:a3:ae:42:46:7d:9f:f5:7d:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DA:1F:3F:77:79:59:28:FA:CC:D9:2C:30:80:2C:C4:C5:F2:82:DC
X509v3 Authority Key Identifier:
keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:39:86:ee:7f:c9:3c:85:c2:e4:8d:f6:fb:1f:fd:50:67:cb:
d9:76:9f:b7:e0:8b:5d:8f:37:db:35:0c:31:a5:6b:52:7e:53:
db:b8:6e:06:95:06:7f:37:42:ef:01:06:62:73:7a:5d:d1:19:
cc:b3:44:29:23:d0:9f:88:b5:7d:9d:ff:ad:3d:70:d9:ee:35:
d0:7f:08:17:93:90:07:da:a3:6f:f9:aa:d9:f4:53:75:b6:91:
da:60:60:26:fd:1a:99:17:df:0c:16:67:a1:8f:a9:fb:dd:f3:
df:e4:44:bf:0e:52:5a:2b:d0:ad:a8:d7:0b:69:02:5d:15:ee:
35:f7:23:a1:62:ac:cd:7b:8d:99:81:31:17:0c:f8:7e:be:26:
3d:13:1a:ef:3f:4d:92:6c:da:62:34:27:ca:cd:ed:9f:00:42:
f2:97:58:75:b2:75:b8:46:dd:55:32:1c:0d:43:0b:d0:ec:40:
a4:6c:d5:57:a3:47:16:8d:e8:18:fd:22:d5:3c:9d:2e:b0:62:
1a:3a:0e:82:53:a9:6a:c4:bc:3a:0f:bd:78:35:4c:1e:c0:5e:
09:77:50:ef:eb:f2:b5:5f:7f:a3:ac:8f:51:e2:c2:87:e3:cf:
1a:75:3b:2f:f0:6a:ce:ac:6b:4f:b4:b4:ff:c5:7d:e8:85:0a:
d6:1d:38:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:09:10 2026 by rpki-client