
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json)
Hash identifier: bn5f0ZkZ/2vuJWVVvEt76Xw+vg8ygxz7AiXrevVjnL8=
Subject key identifier: 51:40:63:A2:C0:C2:74:6B:34:0E:02:F4:FE:8E:DF:8E:F7:6F:F9:59
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial: 07EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
Manifest number: 07DF
Signing time: Sat 10 Oct 2026 21:24:08 +0000
Manifest this update: Sat 10 Oct 2026 21:24:07 +0000
Manifest next update: Sat 17 Oct 2026 21:24:07 +0000
Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: uOR/K5OrjmDuHMX2UfsGnGDRmSG6z055F+mW7OiN2Xo=)
2: 56617572537F11EB9C970658C4F9AE02.roa (hash: 0ZFS32PgzMKmbFO0ZX4LyKpm9Pennvy2xmUXIm988gI=)
3: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: ZPYz03pw0KhMVBOPetBCRC/K+PV0o0wm8Fle12gB1bY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Validity
Not Before: Oct 10 21:24:07 2026 GMT
Not After : Oct 17 21:24:07 2026 GMT
Subject: CN=6acaacf8-0c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:73:1c:a1:54:a5:a0:9f:73:fc:01:a5:80:
e8:57:3d:c8:dc:54:06:e1:2b:07:5e:e8:84:fa:75:
fe:8b:91:27:f1:fd:ae:82:31:63:e2:99:d6:66:c1:
3e:3c:e1:18:99:ee:c3:a2:c8:7e:c8:0f:2c:2c:1a:
af:5f:16:65:f5:20:3e:8b:ae:50:59:60:1b:b7:2f:
79:07:21:21:f0:d6:5a:58:40:a4:8a:24:de:f5:70:
fb:48:cf:ff:97:b6:bc:ea:c2:8c:8b:a5:23:4c:ce:
32:d0:77:fc:6d:e4:a0:62:07:cf:9b:c5:2b:01:e6:
65:09:a0:e5:96:60:8b:7a:a5:db:1b:a8:0f:70:2a:
20:60:7c:cb:cc:a0:5c:df:25:d9:6f:eb:a4:10:f1:
d8:3d:c7:ed:ee:83:ad:93:4b:f6:3f:8d:7f:16:de:
4f:3f:2a:dc:6a:72:bb:c6:81:cb:93:3e:df:ba:48:
aa:6b:fe:e6:64:f6:c9:fe:3e:7c:59:e7:17:bf:f0:
07:a4:9f:54:aa:a4:f6:37:e3:de:cb:7c:79:89:c9:
7e:a7:dc:6b:25:50:ad:3e:a6:c9:a9:cb:b1:3f:0f:
96:d5:5f:07:2b:cb:ca:c6:65:28:dc:9c:11:b1:4e:
e1:b3:a9:13:25:8c:1a:7f:3e:99:00:56:d7:72:35:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:40:63:A2:C0:C2:74:6B:34:0E:02:F4:FE:8E:DF:8E:F7:6F:F9:59
X509v3 Authority Key Identifier:
keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:17:ec:30:88:5b:c5:94:ce:f3:82:0f:63:dc:39:28:a7:36:
4c:f5:c2:b8:cf:0e:8b:09:d6:19:9d:70:5c:9b:67:e8:b4:d9:
79:3e:7a:cd:dc:b8:c3:63:b9:c9:83:2a:d5:8a:ab:04:0d:36:
f8:1d:0a:71:a7:d0:57:62:24:e0:3e:78:ca:6f:a8:cd:3e:2b:
f2:9f:f3:63:ea:03:42:cb:0f:fa:e1:f1:00:a4:aa:b1:e7:7a:
0d:07:b6:92:3b:01:61:43:fc:ef:a6:72:87:0c:d8:37:00:ad:
60:7c:db:36:0b:7f:fa:69:e0:8a:63:ce:16:6e:69:76:41:94:
61:9a:f7:19:9c:cc:55:79:c7:08:6f:bb:4a:56:73:ef:38:f6:
80:f8:32:1b:90:0a:9c:36:c7:50:b3:80:12:1d:74:34:20:f3:
18:4c:62:43:cf:c5:81:58:b7:fd:99:d7:6e:4b:9e:bb:21:0f:
08:6e:dd:6b:22:df:42:85:c4:30:59:78:84:2d:6d:cd:84:ea:
9d:eb:b0:cf:97:ee:e2:04:d9:dd:1b:3d:a4:99:b4:b7:cb:b6:
eb:cf:66:c9:36:30:75:4c:16:bb:b6:e1:bd:e5:2d:4e:00:dc:
54:65:93:4b:bd:60:44:ce:8f:64:b9:e1:a5:22:0b:c4:60:42:
25:f4:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:40:52 2026 by rpki-client