
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
File: SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json)
Hash identifier: yga9tRg1B4Dy+hE+eAKfbbECPO2WkHBAdO78hnVxJp4=
Subject key identifier: 2D:D2:58:6C:CC:A5:64:CA:33:5B:86:72:69:6D:31:1D:DE:1F:44:CA
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial: 017B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
Manifest number: 0175
Signing time: Fri 25 Sep 2026 04:49:55 +0000
Manifest this update: Fri 25 Sep 2026 04:49:55 +0000
Manifest next update: Fri 02 Oct 2026 04:49:55 +0000
Files and hashes: 1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: sz+DtM2V2qN/BjmBawt/IkTBFTgT+kuDiz6zisaE26Y=)
2: 35525B92845611EFB053C341C4F9AE02.roa (hash: ZevCcNNQ+Cl/hbcakseWpBDq3A4TOtczE3OSaShrKcE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Validity
Not Before: Sep 25 04:49:55 2026 GMT
Not After : Oct 2 04:49:55 2026 GMT
Subject: CN=6ab5fd73-63c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:20:2e:5d:44:fd:de:af:24:9e:76:ca:5a:
1c:fb:de:65:d5:62:7f:66:57:59:9d:e0:ca:25:d9:
5b:8e:9e:65:0f:73:f9:62:1c:19:18:c5:88:e0:b8:
bb:83:f2:27:6c:5a:0f:99:6b:96:f3:00:34:67:18:
31:1d:fd:19:fc:fe:f0:b1:22:d2:9d:fa:2f:ea:dd:
fa:e1:ac:58:a7:f0:f8:4d:50:9f:96:3f:bc:83:3e:
24:ca:2e:89:dd:9f:3a:2b:3c:b5:d0:79:6a:2d:00:
62:3e:32:ef:37:76:d0:46:4d:07:e2:fc:0d:a1:c7:
2d:8d:4c:06:8d:4d:b6:6e:56:81:13:23:7f:51:5e:
94:6e:c9:3f:40:1b:b2:e7:f5:77:28:16:d8:b6:02:
a2:3b:d2:c7:53:5b:89:ae:4e:44:6b:86:16:76:48:
a1:51:d9:88:a0:8f:40:a4:2b:2b:4b:04:f4:56:02:
6e:42:e1:9d:97:90:59:1d:7d:a0:15:17:9d:a2:93:
3d:cd:4b:af:18:93:2f:22:72:d8:d8:ae:a5:5f:4a:
4c:f7:cb:15:30:a7:45:75:b5:5a:f6:b6:2c:61:0e:
b2:ff:e4:25:f7:b8:90:2c:1d:62:e6:a4:b3:ae:80:
ab:18:7b:4f:cb:f1:08:09:df:fb:c6:b5:44:2f:6a:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D2:58:6C:CC:A5:64:CA:33:5B:86:72:69:6D:31:1D:DE:1F:44:CA
X509v3 Authority Key Identifier:
keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:86:d9:df:5f:6c:4c:31:1b:10:c6:c6:f8:e1:27:9b:a7:5b:
a8:9f:c5:89:57:99:7e:30:ba:b5:67:77:d5:5b:ae:8d:67:95:
78:c6:1b:7d:6f:dc:fc:4a:5f:ef:b2:d2:8f:cf:c9:cc:b6:f2:
e2:44:db:1f:16:82:6d:78:45:ce:79:89:d5:c2:5a:dc:bd:5e:
17:11:28:ac:62:ba:ad:c3:9e:22:29:ff:ae:ec:43:0e:61:ca:
06:72:ee:5a:a7:18:df:3e:bb:ca:47:e0:55:da:73:60:c1:be:
ca:0f:d5:d1:8e:c9:35:a6:8c:2a:16:be:4a:ad:c1:b4:70:18:
2d:40:92:82:1b:65:6b:bf:86:47:28:d8:79:67:1a:82:53:8f:
da:60:20:a2:ee:1f:20:bb:0e:82:a1:99:0e:51:48:8f:8a:85:
2c:d0:44:20:5a:2c:77:01:c6:dd:1c:09:95:c3:e8:1c:55:1f:
df:d2:51:7c:ed:17:93:9e:fd:4a:51:08:fb:85:25:8f:92:2e:
c7:97:02:f5:eb:0f:84:35:fb:ab:62:f5:fa:ee:a7:c5:bd:08:
ea:90:0f:4c:5b:f4:33:52:3a:dc:77:a1:55:84:c2:82:42:2b:
65:1f:0a:9c:d0:86:f0:e5:04:a6:a5:0c:1c:a8:67:50:d6:bf:
11:4c:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:50:22 2026 by rpki-client