
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
File: sxbAG3t1QxTi8Y9zen19iayrfmg.mft (raw, json)
Hash identifier: O++nAwltgudHMO0fZuTq7rzqLfrMZgmFU2bNoH1zqBY=
Subject key identifier: 97:1C:42:3C:11:33:87:AD:47:6E:01:B8:E3:D4:68:4F:EE:AF:8D:2A
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
Manifest number: B4
Signing time: Fri 09 Oct 2026 07:57:30 +0000
Manifest this update: Fri 09 Oct 2026 07:57:30 +0000
Manifest next update: Fri 16 Oct 2026 07:57:30 +0000
Files and hashes: 1: sxbAG3t1QxTi8Y9zen19iayrfmg.crl (hash: tKciqClIy8CKieKL0elLiCuOz2l7TAmil+RLrt8h1o0=)
2: 2601F1CEEB7111F0839E97F34E6F56BC.roa (hash: o3eQkFa5jtvSJm8EBegehGZ2Pgp62KSE/WHa6T+g7zc=)
3: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (hash: QrH4+yF/QV8+PWn2diJ35OJkx405jDujszCVYOanSfQ=)
4: F715DFB6F58D11F0BCCF7FE5756F56BC.roa (hash: WffA2epMcf/4JtgYGOrtunzCtgpaDBD29cCesds3GwQ=)
5: A8F5E5EE21BE11F183C1AD111C3D8C67.roa (hash: Ieln71UjZ6UVyBBDQ/jNR5EcXnNAYyh6zzX3XZ/UHBM=)
6: 8BB48B56CCFB11F0B624EC45C4F9AE02.roa (hash: idkvQzFYbdsBSjCaqZAU9RiEXtrOEJOl+VsJAR0ESu4=)
7: F6921460F58D11F0BCCF7FE5756F56BC.roa (hash: i5A7HWZGNtrSFGme8+cE96qqxQwsNoTCyoGxwxhU1Wk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Validity
Not Before: Oct 9 07:57:30 2026 GMT
Not After : Oct 16 07:57:30 2026 GMT
Subject: CN=6ac89e6a-b089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:79:d5:40:37:b1:77:e5:df:74:ed:c1:78:
9c:84:a6:58:36:a8:ba:8a:74:cb:30:77:f1:45:40:
4b:e4:37:eb:25:13:4e:19:c7:31:a3:2c:ac:fc:28:
7d:8e:fc:2e:90:db:53:6b:16:22:33:b8:ee:75:8d:
7b:b5:3c:42:7b:1a:5e:85:96:f5:1e:50:04:70:35:
5b:00:f2:ff:4d:ff:4f:a8:94:9b:e9:3f:67:35:76:
35:6f:ce:f1:a8:57:54:78:92:16:2c:24:d5:33:61:
1f:e9:74:62:cf:73:b7:4b:e6:18:8f:dc:a6:bc:03:
0c:af:37:72:17:69:ab:c9:c8:9a:36:80:74:16:46:
de:3f:ee:d9:02:c2:23:13:fa:73:bd:e1:6c:8e:7d:
ef:6c:75:7a:5d:70:95:e3:86:a5:e9:33:bf:e2:ef:
24:b1:7f:d0:f0:a4:f8:ac:80:70:92:10:5d:07:b3:
bf:aa:39:08:17:b9:73:58:ad:76:14:25:57:c0:b7:
c7:24:e6:15:71:02:22:67:3f:99:5f:b0:2c:42:26:
fa:97:0f:ed:da:a1:ec:68:23:df:fd:92:16:20:cb:
61:d1:f1:7e:6e:fc:ea:60:ed:a6:bb:99:65:57:8e:
58:67:af:ff:5e:2f:4f:a2:b3:68:48:38:8c:c8:19:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1C:42:3C:11:33:87:AD:47:6E:01:B8:E3:D4:68:4F:EE:AF:8D:2A
X509v3 Authority Key Identifier:
keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:45:94:e1:4c:02:80:66:f2:8e:d9:aa:57:a3:3a:0e:bd:0e:
06:20:ec:54:b0:8f:e1:a4:4f:17:bd:4d:71:85:5f:b7:57:96:
23:32:42:2c:25:63:d5:50:d6:e5:ad:82:16:9d:be:49:34:b9:
d7:4a:c5:d0:b7:75:47:b2:e5:0c:79:af:f1:b9:b7:c4:c1:ec:
97:13:ee:1d:5d:2d:f7:2f:0a:6a:44:30:f9:73:db:ae:1f:6c:
4a:2b:98:32:7c:e8:67:31:b2:6d:cd:a9:f6:d5:41:b1:d5:29:
95:ca:f4:bf:e1:a8:51:38:53:d7:53:78:f3:c8:89:9e:0f:fe:
62:6f:64:10:9e:70:c1:7e:1e:fc:67:c1:78:25:1f:b5:ab:4b:
ef:6c:cd:b7:a4:ca:11:28:b1:c3:3e:19:24:71:18:59:2f:85:
0f:9f:bb:5f:d5:03:92:58:ad:4a:11:95:ee:9a:e4:6c:6a:a6:
7a:1f:fc:18:4d:cd:b0:2d:99:b8:cd:30:87:ee:d5:a7:43:f2:
1a:47:6a:a8:14:31:5c:82:e6:f0:9c:ef:19:02:6d:ff:b4:5d:
66:01:4c:b7:aa:d9:2a:9e:eb:bb:29:a0:7d:4e:38:78:35:d0:
d1:1e:d0:5b:8b:42:d7:bd:63:5f:17:dd:61:4d:74:cb:d2:d2:
3d:a0:b0:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDk4M0IxMTAvBgNVBAUTKEIzMTZDMDFCN0I3NTQzMTRFMkYxOEY3MzdBN0Q3RDg5
QUNBQjdFNjgwHhcNMjYxMDA5MDc1NzMwWhcNMjYxMDE2MDc1NzMwWjAYMRYwFAYD
VQQDEw02YWM4OWU2YS1iMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAscR51UA3sXfl33TtwXichKZYNqi6inTLMHfxRUBL5DfrJRNOGccxoyys/Ch9
jvwukNtTaxYiM7judY17tTxCexpehZb1HlAEcDVbAPL/Tf9PqJSb6T9nNXY1b87x
qFdUeJIWLCTVM2Ef6XRiz3O3S+YYj9ymvAMMrzdyF2mryciaNoB0FkbeP+7ZAsIj
E/pzveFsjn3vbHV6XXCV44al6TO/4u8ksX/Q8KT4rIBwkhBdB7O/qjkIF7lzWK12
FCVXwLfHJOYVcQIiZz+ZX7AsQib6lw/t2qHsaCPf/ZIWIMth0fF+bvzqYO2mu5ll
V45YZ6//Xi9PorNoSDiMyBnHRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJccQjwR
M4etR24BuOPUaE/ur40qMB8GA1UdIwQYMBaAFLMWwBt7dUMU4vGPc3p9fYmsq35o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTgzQi9ERkFGOTk5MkND
MDMxMUYwQjFFMjVCNDFDNEY5QUUwMi9zeGJBRzN0MVF4VGk4WTl6ZW4xOWlheXJm
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N4YkFHM3QxUXhUaThZOXplbjE5aWF5cmZtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTgzQi9ERkFGOTk5MkNDMDMxMUYwQjFFMjVCNDFDNEY5QUUwMi9zeGJBRzN0MVF4
VGk4WTl6ZW4xOWlheXJmbWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhEWU4UwCgGbyjtmqV6M6Dr0OBiDsVLCP4aRPF71NcYVft1eWIzJCLCVj1VDW
5a2CFp2+STS510rF0Ld1R7LlDHmv8bm3xMHslxPuHV0t9y8KakQw+XPbrh9sSiuY
MnzoZzGybc2p9tVBsdUplcr0v+GoUThT11N488iJng/+Ym9kEJ5wwX4e/GfBeCUf
tatL72zNt6TKESixwz4ZJHEYWS+FD5+7X9UDklitShGV7prkbGqmeh/8GE3NsC2Z
uM0wh+7Vp0PyGkdqqBQxXILm8JzvGQJt/7RdZgFMt6rZKp7ruymgfU44eDXQ0R7Q
W4tC171jXxfdYU10y9LSPaCwcg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 18:36:58 2026 by rpki-client