
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File: u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier: DTLxIGHskF1wQO5MBYZsaRwqOybVFXGtWSctJEpmmUw=
Subject key identifier: 08:06:60:CB:6E:82:11:5F:4B:67:AB:68:EE:AB:C6:37:E0:A7:90:17
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial: 09AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number: 098C
Signing time: Thu 08 Oct 2026 20:09:07 +0000
Manifest this update: Thu 08 Oct 2026 20:09:07 +0000
Manifest next update: Thu 15 Oct 2026 20:09:07 +0000
Files and hashes: 1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: QiqBd8skQRSx9GoNClOyB4P2O29ltt5BDPw+xRdaTso=)
2: 6B8789A63FA011F1B60E4CC5BB833773.roa (hash: eUeT9MfyQplwOYsEvB1DK9Ul4fMRh4BuNuH+20Gy/0Q=)
3: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: S1YQDpfRZfYWxWzS0yYZYUtJLVH3RsmKcbHcWJLLIjw=)
4: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: J5TlVE9TaJMgIGEY3wJEZY2JAbPuoZdGlfLWjr6sNVQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 20:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2474 (0x9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Validity
Not Before: Oct 8 20:09:07 2026 GMT
Not After : Oct 15 20:09:07 2026 GMT
Subject: CN=6ac7f863-6e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:b7:3e:c6:cb:19:76:d4:3e:61:fa:da:81:
d3:bc:f5:0b:74:03:a7:4a:bc:ae:24:c5:dd:ff:30:
ea:26:c9:a2:c4:b9:8a:65:67:92:97:0e:d5:ea:15:
6d:80:8c:9c:3a:33:c5:28:1d:b4:73:7e:96:a5:cf:
73:bb:e6:6d:47:a5:f8:db:81:64:52:95:b2:bf:07:
2c:56:c3:b4:76:45:a5:61:3a:4e:f8:01:2f:ef:fd:
82:fe:15:c2:57:0c:76:da:94:d4:d3:c0:a8:75:27:
f5:80:57:45:4a:1e:57:52:5e:e1:26:d5:1e:23:06:
a7:7a:5b:85:88:5a:30:b8:69:93:5c:cd:93:15:4f:
a1:62:b4:df:de:70:93:9b:c1:71:24:ba:3c:8a:9c:
63:4e:e3:66:31:29:63:03:23:4c:2b:4d:86:9c:d1:
54:24:fc:e2:fb:ba:88:c2:45:75:c8:52:7b:11:34:
6c:82:21:74:30:9c:bf:4b:e6:28:d1:28:50:ce:c4:
65:e2:ba:74:fc:04:83:5f:3e:98:53:72:ff:4b:cf:
86:f1:7c:66:6b:5e:5b:4a:73:cd:d7:b1:f5:4c:5f:
61:c0:00:f5:bc:ec:4c:62:54:13:89:25:f5:21:61:
d8:2d:0b:fd:9d:2a:3c:21:a0:bb:6d:1f:ca:0c:c7:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:06:60:CB:6E:82:11:5F:4B:67:AB:68:EE:AB:C6:37:E0:A7:90:17
X509v3 Authority Key Identifier:
keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:ca:2d:79:c3:43:46:5b:56:e6:e0:1f:3e:76:b5:21:76:e5:
08:3d:72:d4:ca:c2:cc:69:2a:67:79:15:52:4d:e6:db:c8:f5:
e5:0e:54:b5:8c:11:10:ec:e6:3b:5e:52:e4:2b:02:9f:5f:8b:
71:d5:c1:c1:d4:6f:2a:bb:f0:47:c7:b2:f3:4f:dc:82:4c:0e:
6e:a8:70:fa:e4:ac:81:b0:b6:59:a2:24:bb:06:2f:f8:33:40:
37:1f:5f:3f:79:d9:88:17:42:37:90:4b:ec:08:ab:ec:c8:d0:
8d:c4:f8:5b:01:62:02:26:1b:0a:89:24:67:2f:d8:e6:0c:9b:
43:2d:cc:29:30:78:a4:0d:dc:8d:e7:31:a7:27:c0:0f:86:41:
33:36:91:3c:7d:8b:20:4c:d8:8d:78:fb:c6:a3:65:83:0b:2e:
cb:95:bc:c0:bb:7e:de:0f:a6:4b:b4:2c:c2:7e:5c:7f:3f:13:
22:1d:5a:f3:5b:e3:0c:2d:05:d4:60:7e:e2:d9:e9:ad:08:9b:
1e:60:7a:e9:e9:4e:f7:36:e8:14:4b:96:c5:84:b0:2a:f8:f7:
b9:25:44:de:e3:51:cd:ee:00:9a:c2:53:4d:a4:90:64:3f:76:
59:7e:dc:42:ba:d4:35:63:2a:e2:06:cd:6b:0e:bd:38:c5:a8:
53:46:03:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:17:23 2026 by rpki-client