
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
File: Swkt8QQoD0W8PyeW9AHMK0xhROk.mft (raw, json)
Hash identifier: 9XEu4lO3U7TPV9pDTnK0icN2cjaMfO7VykJbS/+CCwg=
Subject key identifier: FA:63:B1:69:CF:40:14:E7:53:5D:B5:C3:BA:E5:D4:E1:3C:4A:63:D4
Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
Manifest number: F4
Signing time: Wed 25 Mar 2026 05:35:28 +0000
Manifest this update: Wed 25 Mar 2026 05:35:28 +0000
Manifest next update: Wed 01 Apr 2026 05:35:28 +0000
Files and hashes: 1: Swkt8QQoD0W8PyeW9AHMK0xhROk.crl (hash: luyyipHl/oS9ooi1nEKRwikJKWve58rsM01MrGU5/SA=)
2: E5FC085A843011F0971BDC44C4F9AE02.roa (hash: dm3BcPGPdQuO5Idson2cH8Me4yvZsLSNX+U6zphRieA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Validity
Not Before: Mar 25 05:35:28 2026 GMT
Not After : Apr 1 05:35:28 2026 GMT
Subject: CN=69c37420-9893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d5:1c:1f:96:6c:74:9e:85:e4:07:78:91:20:
75:6c:66:26:21:78:14:ea:a5:46:2e:5b:1d:77:9a:
d3:5c:71:74:c2:30:8f:3e:38:f7:34:85:fb:7a:1b:
57:ac:8f:5b:60:1d:c9:b7:a3:4f:52:9a:b5:19:14:
f1:00:8f:95:26:af:ad:b3:dd:31:47:dc:05:e2:75:
95:47:77:1e:4c:3f:fa:83:ca:a5:6a:fa:ad:3b:0c:
b1:0e:4a:6e:93:70:91:94:60:a0:9c:42:a1:d5:83:
b7:12:3c:76:5d:92:98:98:9a:4d:8a:7f:05:ad:23:
f7:eb:cb:33:92:27:97:22:fa:9e:5e:b2:fb:bc:fb:
30:42:59:a9:c8:98:2f:0e:ec:96:ef:de:ae:d7:b2:
e8:b4:8c:7f:cc:19:59:95:36:57:5b:73:6c:8b:f4:
64:c7:5e:d4:a8:79:ba:8d:04:99:97:19:e7:35:26:
b0:d7:3e:a8:37:44:03:3f:54:10:2e:f1:e9:33:cc:
95:11:b1:a7:d1:9a:fc:2e:1b:5c:55:2c:4c:05:86:
56:6c:0d:e3:2c:85:ce:63:d3:57:83:ef:94:0b:fc:
fb:7c:5a:93:19:98:74:9a:f6:ba:e2:c8:53:7b:16:
c1:5a:3e:89:66:76:db:4e:8c:85:10:d6:57:98:be:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:B1:69:CF:40:14:E7:53:5D:B5:C3:BA:E5:D4:E1:3C:4A:63:D4
X509v3 Authority Key Identifier:
keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:33:8e:cc:0c:50:b0:24:c2:4a:f1:ad:35:b9:95:16:6c:0b:
62:60:fa:a6:ae:3e:5f:56:b1:14:b5:63:a3:4d:5f:6e:4b:33:
4a:f8:1a:00:27:57:56:a1:59:18:fa:0a:c4:f8:3b:0d:fa:87:
97:d5:f0:bd:a3:de:24:0e:15:69:b1:97:cc:8c:d6:0c:15:4a:
00:80:bd:8f:10:47:ec:73:49:bb:35:48:12:ac:6d:4d:3f:e9:
bf:89:f7:f9:88:2f:98:e2:74:92:ab:5e:b5:c9:19:6d:92:14:
ed:57:e0:24:ee:1f:66:bd:69:c6:1d:71:f1:db:62:dc:8e:d1:
9e:f4:a6:c9:5f:1d:eb:12:bc:bc:35:dc:00:89:f9:25:75:b9:
b4:2b:bc:23:92:38:52:c4:de:f1:f8:84:80:b5:c9:4a:dd:2c:
ae:6f:f2:bf:11:e0:b8:3e:14:88:c3:f0:7b:06:cc:ab:f3:cd:
95:ee:5f:bb:87:3b:28:a8:8a:d5:9e:7a:59:41:54:86:9f:1a:
c2:be:dd:73:45:6b:f2:29:9c:24:c5:98:ba:4e:57:b8:dc:e5:
05:5d:e5:21:a9:db:dd:10:19:12:ed:55:22:e3:76:da:9b:af:
9c:dd:71:7c:89:76:1f:29:e7:b8:42:e5:27:44:d7:2e:2f:1c:
79:83:05:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgzMDcxMTAvBgNVBAUTKDRCMDkyREYxMDQyODBGNDVCQzNGMjc5NkY0MDFDQzJC
NEM2MTQ0RTkwHhcNMjYwMzI1MDUzNTI4WhcNMjYwNDAxMDUzNTI4WjAYMRYwFAYD
VQQDEw02OWMzNzQyMC05ODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1dUcH5ZsdJ6F5Ad4kSB1bGYmIXgU6qVGLlsdd5rTXHF0wjCPPjj3NIX7ehtX
rI9bYB3Jt6NPUpq1GRTxAI+VJq+ts90xR9wF4nWVR3ceTD/6g8qlavqtOwyxDkpu
k3CRlGCgnEKh1YO3Ejx2XZKYmJpNin8FrSP368szkieXIvqeXrL7vPswQlmpyJgv
DuyW796u17LotIx/zBlZlTZXW3Nsi/Rkx17UqHm6jQSZlxnnNSaw1z6oN0QDP1QQ
LvHpM8yVEbGn0Zr8LhtcVSxMBYZWbA3jLIXOY9NXg++UC/z7fFqTGZh0mva64shT
exbBWj6JZnbbToyFENZXmL5+IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPpjsWnP
QBTnU121w7rl1OE8SmPUMB8GA1UdIwQYMBaAFEsJLfEEKA9FvD8nlvQBzCtMYUTp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODMwNy8yQkM5MjQ1MEJF
Q0QxMUVGOThDNzQxMzJDNEY5QUUwMi9Td2t0OFFRb0QwVzhQeWVXOUFITUsweGhS
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1N3a3Q4UVFvRDBXOFB5ZVc5QUhNSzB4aFJPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODMwNy8yQkM5MjQ1MEJFQ0QxMUVGOThDNzQxMzJDNEY5QUUwMi9Td2t0OFFRb0Qw
VzhQeWVXOUFITUsweGhST2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGjOOzAxQsCTCSvGtNbmVFmwLYmD6pq4+X1axFLVjo01fbkszSvgaACdXVqFZ
GPoKxPg7DfqHl9XwvaPeJA4VabGXzIzWDBVKAIC9jxBH7HNJuzVIEqxtTT/pv4n3
+YgvmOJ0kqtetckZbZIU7VfgJO4fZr1pxh1x8dti3I7RnvSmyV8d6xK8vDXcAIn5
JXW5tCu8I5I4UsTe8fiEgLXJSt0srm/yvxHguD4UiMPwewbMq/PNle5fu4c7KKiK
1Z56WUFUhp8awr7dc0Vr8imcJMWYuk5XuNzlBV3lIanb3RAZEu1VIuN22puvnN1x
fIl2HynnuELlJ0TXLi8ceYMF1A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:49 2026 by rpki-client