
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
File: HsZtkG95Qt87d7_e3f0An-sr_SE.mft (raw, json)
Hash identifier: QjWOoaSGMoltQqAOj6+cpgeCjgRG4F5hU78q5C2QQ8E=
Subject key identifier: 3C:D5:C0:04:43:1A:91:38:82:FF:BA:6A:80:8C:3B:53:C2:61:61:89
Authority key identifier: 1E:C6:6D:90:6F:79:42:DF:3B:77:BF:DE:DD:FD:00:9F:EB:2B:FD:21
Certificate issuer: /CN=A91D4781/serialNumber=1EC66D906F7942DF3B77BFDEDDFD009FEB2BFD21
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
Manifest number: B6
Signing time: Wed 23 Sep 2026 06:46:30 +0000
Manifest this update: Wed 23 Sep 2026 06:46:29 +0000
Manifest next update: Wed 30 Sep 2026 06:46:29 +0000
Files and hashes: 1: HsZtkG95Qt87d7_e3f0An-sr_SE.crl (hash: ekT/+rRtca700A+HO9Iq1XG3SGhDttpPjW/m64GO6/4=)
2: B2D021C8A55A11F094B38083C4F9AE02.roa (hash: R0qrAdmww4GRAq2qDqXgD5pff8It00X5dKQtLyS7hKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.crl
rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4781, serialNumber=1EC66D906F7942DF3B77BFDEDDFD009FEB2BFD21
Validity
Not Before: Sep 23 06:46:29 2026 GMT
Not After : Sep 30 06:46:29 2026 GMT
Subject: CN=6ab375c6-1843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:d7:97:cc:f3:af:f4:84:bf:67:54:fc:1d:
f4:47:ba:9c:6f:6b:ff:ae:5b:55:47:7a:28:98:0a:
59:7a:f2:d3:7c:80:ec:c3:2d:cf:62:d5:cb:99:ee:
d6:45:80:3a:98:c3:98:24:8a:fc:8b:d6:0e:5e:69:
43:f0:6c:76:0c:1c:fa:50:30:e7:83:9a:9f:40:96:
2f:7b:4e:3c:5f:58:13:9d:72:08:d0:3a:ca:40:fe:
c5:08:91:c0:e0:a3:a5:0f:5e:12:65:04:88:d5:31:
cb:62:73:8a:50:57:69:14:57:07:a8:1b:be:9d:7c:
36:86:8e:6c:6e:c4:14:0d:17:9c:72:73:59:2f:09:
b1:09:5d:c7:99:5c:24:9e:5f:ec:e3:2e:7c:fa:7b:
73:c2:91:ba:90:33:1b:32:3c:58:7c:41:60:28:d4:
ab:8c:58:1f:53:23:2a:a0:02:b9:33:6a:25:51:02:
8d:c1:97:92:f5:12:b9:2e:d1:66:02:b4:2f:e5:67:
bb:e3:11:ae:18:e1:32:bf:76:87:c4:1a:be:8f:63:
43:b5:f6:ba:82:1a:c9:0b:77:31:58:3e:2a:a3:e5:
19:77:2a:04:ca:51:59:58:5a:44:98:65:4c:ab:e7:
b4:38:42:45:82:57:0f:ec:d0:49:57:92:0f:da:76:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D5:C0:04:43:1A:91:38:82:FF:BA:6A:80:8C:3B:53:C2:61:61:89
X509v3 Authority Key Identifier:
keyid:1E:C6:6D:90:6F:79:42:DF:3B:77:BF:DE:DD:FD:00:9F:EB:2B:FD:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:c3:6a:a4:25:7c:28:ce:b7:17:68:bc:27:c5:50:9a:9d:ef:
94:11:c2:6a:85:6d:32:4b:1d:1c:45:6c:9e:82:21:f5:94:1a:
02:8d:4e:e3:e6:e6:d1:d7:4a:00:75:8c:f9:c9:85:f4:23:b3:
4a:41:15:ce:d5:17:56:f9:d2:20:85:3f:75:19:7e:e7:c7:e7:
f5:f8:54:5a:da:ff:be:23:0e:f5:f2:33:23:67:b0:ee:02:1f:
3c:79:42:27:23:d7:56:cb:18:9d:66:9a:f9:e5:41:6c:b9:f3:
c6:00:73:f1:74:f8:08:7d:7b:82:77:5c:4b:58:4c:5a:05:0b:
85:ea:35:92:87:ac:f1:00:bd:ca:d2:c3:bb:8c:7a:d5:9b:97:
31:1d:c0:16:17:e2:99:77:d0:93:b7:72:7b:9e:30:fa:29:11:
cd:63:64:62:1b:96:e9:47:56:c3:b2:d9:9a:77:fa:83:1d:65:
3e:ff:75:40:ff:71:a6:e3:d9:8a:aa:d9:43:2b:83:26:6c:20:
cd:41:74:6a:7d:d7:84:b5:c7:0b:6c:e8:d1:3d:97:66:ae:30:
6c:4e:58:be:e9:7f:9d:bd:48:ce:e7:b6:41:0f:05:23:10:22:
85:71:f9:02:db:53:ed:93:75:a9:0f:e4:cd:43:7c:8b:5d:08:
43:13:db:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ3ODExMTAvBgNVBAUTKDFFQzY2RDkwNkY3OTQyREYzQjc3QkZERURERkQwMDlG
RUIyQkZEMjEwHhcNMjYwOTIzMDY0NjI5WhcNMjYwOTMwMDY0NjI5WjAYMRYwFAYD
VQQDEw02YWIzNzVjNi0xODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAteTXl8zzr/SEv2dU/B30R7qcb2v/rltVR3oomApZevLTfIDswy3PYtXLme7W
RYA6mMOYJIr8i9YOXmlD8Gx2DBz6UDDng5qfQJYve048X1gTnXII0DrKQP7FCJHA
4KOlD14SZQSI1THLYnOKUFdpFFcHqBu+nXw2ho5sbsQUDReccnNZLwmxCV3HmVwk
nl/s4y58+ntzwpG6kDMbMjxYfEFgKNSrjFgfUyMqoAK5M2olUQKNwZeS9RK5LtFm
ArQv5We74xGuGOEyv3aHxBq+j2NDtfa6ghrJC3cxWD4qo+UZdyoEylFZWFpEmGVM
q+e0OEJFglcP7NBJV5IP2nbQRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzVwARD
GpE4gv+6aoCMO1PCYWGJMB8GA1UdIwQYMBaAFB7GbZBveULfO3e/3t39AJ/rK/0h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc4MS9FMjkwNDc2Q0E0
OEQxMUYwQUQ5N0YwMTZDNEY5QUUwMi9Ic1p0a0c5NVF0ODdkN19lM2YwQW4tc3Jf
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hzWnRrRzk1UXQ4N2Q3X2UzZjBBbi1zcl9TRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDc4MS9FMjkwNDc2Q0E0OEQxMUYwQUQ5N0YwMTZDNEY5QUUwMi9Ic1p0a0c5NVF0
ODdkN19lM2YwQW4tc3JfU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABMNqpCV8KM63F2i8J8VQmp3vlBHCaoVtMksdHEVsnoIh9ZQaAo1O4+bm0ddK
AHWM+cmF9COzSkEVztUXVvnSIIU/dRl+58fn9fhUWtr/viMO9fIzI2ew7gIfPHlC
JyPXVssYnWaa+eVBbLnzxgBz8XT4CH17gndcS1hMWgULheo1koes8QC9ytLDu4x6
1ZuXMR3AFhfimXfQk7dye54w+ikRzWNkYhuW6UdWw7LZmnf6gx1lPv91QP9xpuPZ
iqrZQyuDJmwgzUF0an3XhLXHC2zo0T2XZq4wbE5Yvul/nb1Izue2QQ8FIxAihXH5
AttT7ZN1qQ/kzUN8i10IQxPbPQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:51:53 2026 by rpki-client