
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json)
Hash identifier: 8rutoq9LcOTwdKsHQiAl4a9P0ieDS2F2kHM/vifYw2M=
Subject key identifier: C1:7A:BC:78:87:6A:20:4C:A1:17:A4:A5:8C:84:9C:57:D8:C1:CA:98
Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Certificate serial: 11A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
Manifest number: 1185
Signing time: Thu 08 Oct 2026 17:16:26 +0000
Manifest this update: Thu 08 Oct 2026 17:16:26 +0000
Manifest next update: Thu 15 Oct 2026 17:16:26 +0000
Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: fsyHlQIXXM/rPjVH0b7Y3w7nlSl3Oj1R5z3mnDUUW8k=)
2: WaFbwQxbOyD3Ef8DwUKf0uYIGOk.asa (hash: WmkKwCyoLkelYdHTogcqdSeu/IFs1eCzpqo1emK/ZUE=)
3: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: 3o6dj/XokqZdrY5E0NL8+hP2E/G8Ccuo1K+sm8MmmjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4514 (0x11a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE096, serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Validity
Not Before: Oct 8 17:16:26 2026 GMT
Not After : Oct 15 17:16:26 2026 GMT
Subject: CN=6ac7cfea-30c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:ec:53:b2:07:ab:1b:d9:01:b8:80:1d:ac:
8a:8e:73:15:9c:80:84:bd:fe:25:45:1c:30:60:c4:
e3:13:de:ad:1b:45:db:23:c0:3f:b6:7b:48:d8:63:
2c:e9:7e:36:7b:a6:2d:c4:58:92:d9:4c:6f:fc:53:
d7:88:de:f7:90:55:59:9e:7b:68:7a:5b:97:a1:7a:
27:17:2f:93:a5:05:f0:e4:f6:16:8b:15:93:e3:80:
e6:e2:93:a8:38:e7:58:5e:3e:34:38:dc:69:5d:df:
33:a2:98:be:31:b1:89:59:2c:cf:5a:43:26:d5:b8:
49:82:e9:c7:e5:d4:50:eb:04:9a:f2:58:69:b1:69:
6c:ef:7a:8f:9d:72:0a:93:92:91:09:45:f3:ec:f3:
e5:7b:34:64:e4:7c:b2:02:8b:ff:5b:2e:08:cd:19:
b7:13:be:8a:7c:ed:df:58:e4:53:ed:68:2a:3e:fe:
bd:fe:85:9c:8b:a9:3e:84:64:8b:41:e1:51:51:c1:
79:4c:8f:89:b2:08:11:ea:37:f4:ba:9b:a7:43:5a:
6c:99:ea:1a:d6:10:95:61:76:6a:e8:e0:e1:ba:df:
42:c8:ad:aa:fa:63:5b:7b:97:b8:b4:fd:c4:5d:49:
fa:6b:4c:01:2d:e4:4e:55:ad:87:6d:23:18:51:62:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7A:BC:78:87:6A:20:4C:A1:17:A4:A5:8C:84:9C:57:D8:C1:CA:98
X509v3 Authority Key Identifier:
keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b9:85:c3:34:c3:52:95:7a:b2:c1:3f:a2:06:dc:4a:27:bb:
90:28:ac:0e:cd:f1:88:bc:d7:3e:23:e6:93:ca:03:3d:8a:2a:
48:c5:ef:d5:aa:1d:e3:88:3e:83:73:44:b9:47:e8:e8:e1:a3:
24:b3:15:36:2a:a9:b2:fa:0c:14:68:b8:b4:e8:f7:ee:8c:59:
e1:42:98:e4:b6:28:cb:0a:dd:e0:fd:66:90:ec:9c:93:b5:56:
ab:0f:47:bb:53:4f:31:24:0c:08:a9:cd:c6:05:ea:94:51:d2:
40:cb:5a:6c:f8:54:68:81:d4:10:59:06:95:10:8b:48:eb:e1:
83:82:48:56:f3:39:e1:be:71:a9:74:e0:24:06:9e:f0:6d:6c:
95:82:76:20:48:76:3e:bb:e8:47:5e:72:89:64:5a:5b:78:31:
35:48:eb:f4:b0:53:ed:65:f3:53:08:91:38:87:d7:64:c3:9f:
82:14:ed:b9:1c:6a:99:0e:d8:c8:a9:61:fd:ef:56:42:ed:05:
2e:95:e2:79:44:87:f4:17:ec:43:34:8e:92:ba:6f:a7:90:b9:
a7:71:3a:64:39:6e:ab:4f:c2:d6:9b:78:4c:14:43:41:2b:e5:
f7:ca:a7:54:4f:0d:3a:5d:42:82:0c:33:6f:37:d6:2f:ac:8c:
c1:5e:06:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUwOTYxMTAvBgNVBAUTKDRBQkRBMjRBRDdCRDlFOEQ5Q0VGQjM1OTM4RDBBODc4
ODA0QzYyRTQwHhcNMjYxMDA4MTcxNjI2WhcNMjYxMDE1MTcxNjI2WjAYMRYwFAYD
VQQDEw02YWM3Y2ZlYS0zMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnBjsU7IHqxvZAbiAHayKjnMVnICEvf4lRRwwYMTjE96tG0XbI8A/tntI2GMs
6X42e6YtxFiS2Uxv/FPXiN73kFVZnntoeluXoXonFy+TpQXw5PYWixWT44Dm4pOo
OOdYXj40ONxpXd8zopi+MbGJWSzPWkMm1bhJgunH5dRQ6wSa8lhpsWls73qPnXIK
k5KRCUXz7PPlezRk5HyyAov/Wy4IzRm3E76KfO3fWORT7WgqPv69/oWci6k+hGSL
QeFRUcF5TI+JsggR6jf0upunQ1psmeoa1hCVYXZq6ODhut9CyK2q+mNbe5e4tP3E
XUn6a0wBLeROVa2HbSMYUWLtIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMF6vHiH
aiBMoRekpYyEnFfYwcqYMB8GA1UdIwQYMBaAFEq9okrXvZ6NnO+zWTjQqHiATGLk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA5Ni8yRkJCNDQwRTMz
NDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5vMmM3N05aT05Db2VJQk1Z
dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NyMmlTdGU5bm8yYzc3TlpPTkNvZUlCTVl1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTA5Ni8yRkJCNDQwRTMzNDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5v
MmM3N05aT05Db2VJQk1ZdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnrmFwzTDUpV6ssE/ogbcSie7kCisDs3xiLzXPiPmk8oDPYoqSMXv1aod44g+
g3NEuUfo6OGjJLMVNiqpsvoMFGi4tOj37oxZ4UKY5LYoywrd4P1mkOyck7VWqw9H
u1NPMSQMCKnNxgXqlFHSQMtabPhUaIHUEFkGlRCLSOvhg4JIVvM54b5xqXTgJAae
8G1slYJ2IEh2PrvoR15yiWRaW3gxNUjr9LBT7WXzUwiROIfXZMOfghTtuRxqmQ7Y
yKlh/e9WQu0FLpXieUSH9BfsQzSOkrpvp5C5p3E6ZDluq0/C1pt4TBRDQSvl98qn
VE8NOl1CggwzbzfWL6yMwV4G9Q==
-----END CERTIFICATE-----
Generated at Sat Oct 10 12:57:49 2026 by rpki-client