
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json)
Hash identifier: osZhDC+8trPbxSFuo2of6NLz9jh2yQpgUUuGkfg4u/0=
Subject key identifier: CE:25:B0:CE:45:90:9C:66:8B:6B:5B:5F:E9:20:97:60:D1:F3:8F:71
Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
Manifest number: 011E
Signing time: Wed 13 May 2026 05:55:21 +0000
Manifest this update: Wed 13 May 2026 05:55:20 +0000
Manifest next update: Wed 20 May 2026 05:55:20 +0000
Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: 94taw2coj3XpXNpKQTpQSIMdYRyiiT4dWYA2r8Fgfw8=)
2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: mSukAUMe5Lr3KzZ1M4lKG8ZcBcOq+sE7NJI6nlUpRwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Validity
Not Before: May 13 05:55:20 2026 GMT
Not After : May 20 05:55:20 2026 GMT
Subject: CN=6a041248-855b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:f0:49:81:c8:4e:9f:0c:7b:ba:f2:40:06:
77:5f:18:db:dd:46:ea:7e:91:8e:94:e9:55:48:52:
a0:e1:9f:04:37:c4:6a:55:6f:05:2d:0b:66:b5:66:
c3:2a:01:aa:48:2b:b5:23:11:81:c3:65:c4:64:30:
b3:23:1c:b3:03:b7:2a:74:b2:2b:f5:11:4c:05:19:
d3:e0:00:3b:6a:17:7d:e8:d1:66:ab:ce:18:42:66:
cb:2f:b6:7b:e5:e2:ee:33:90:0c:69:7d:18:a3:c5:
65:b7:9d:5f:d0:87:34:f0:75:74:5a:98:39:cc:ca:
20:c4:31:2f:0a:c3:3f:fc:2b:50:8f:82:50:41:7d:
3e:43:5a:ae:2e:6c:11:ae:77:45:88:f5:76:35:7d:
4f:ba:8c:50:a1:fe:69:6a:c0:88:ff:73:49:65:80:
b3:d3:8a:0a:45:f1:c1:76:b3:1d:d3:18:05:70:67:
b8:15:b7:10:0f:b1:9e:ca:7e:25:8b:08:30:de:ec:
70:c1:5b:f2:35:25:91:c1:cf:5e:77:1c:08:44:3c:
34:b1:c4:1a:da:35:94:d9:29:83:a1:5c:2a:88:02:
92:17:26:95:81:29:e6:48:de:59:09:47:1e:0e:e9:
df:db:70:e9:c8:90:66:c5:f6:e8:4e:33:83:3d:72:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:25:B0:CE:45:90:9C:66:8B:6B:5B:5F:E9:20:97:60:D1:F3:8F:71
X509v3 Authority Key Identifier:
keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:11:b6:01:60:9e:ca:7f:ac:f5:2c:9e:9c:94:d0:f2:35:a5:
1c:b8:03:dc:61:da:75:0a:ba:77:82:c7:b7:2a:31:16:b9:4a:
a9:6e:06:d1:a8:dc:35:88:e3:95:83:d8:ad:0c:1b:c8:cf:50:
8b:7b:db:dc:74:0f:c1:0b:c2:61:33:38:05:52:d5:b9:8c:52:
33:0d:b9:cc:a3:cd:0d:24:8e:bc:bd:67:7f:c2:00:87:0f:f8:
38:f1:7d:aa:a7:c2:d2:9c:0d:51:4a:55:ac:47:2d:2b:48:cc:
6f:1c:f7:39:db:8f:0f:56:99:79:74:14:02:70:2c:2f:ae:de:
75:61:5d:fc:a0:33:66:e0:6c:69:d4:71:11:cb:a6:ba:9b:53:
8b:28:dd:f4:5e:81:15:8d:a6:38:4c:5f:58:08:90:d1:87:cf:
77:3a:51:34:de:f7:e2:3f:ac:0c:4c:1e:fd:61:aa:8c:dc:1a:
c0:41:db:62:f5:13:10:48:58:4d:d5:21:e7:de:bb:ad:14:7f:
35:0c:7c:09:d7:a6:db:d0:62:d8:b4:bb:66:26:d7:c7:6e:52:
28:6b:d6:50:f8:1f:9c:75:f4:eb:d1:e9:a5:7a:1a:fd:1e:2a:
0f:81:56:2f:34:60:0d:49:ca:78:35:4f:5c:6f:01:22:0a:0c:
82:d9:61:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:20 2026 by rpki-client