
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
File: s40rj01btqU-m0GSYQSBpdiBZUY.mft (raw, json)
Hash identifier: IpMa3e9sO6PXfoPz/I9at9xhoAXg79n8VwefALLfwjA=
Subject key identifier: E0:A0:B9:15:69:78:25:BF:96:33:6D:55:D7:ED:4E:D7:58:D0:75:A5
Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Certificate issuer: /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Certificate serial: 0BED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
Manifest number: 0BD6
Signing time: Tue 22 Sep 2026 18:51:28 +0000
Manifest this update: Tue 22 Sep 2026 18:51:28 +0000
Manifest next update: Tue 29 Sep 2026 18:51:28 +0000
Files and hashes: 1: s40rj01btqU-m0GSYQSBpdiBZUY.crl (hash: rhcjXgUZWYZkUw0sqLqGMiRc9li4U3KYevv7ADDxiAo=)
2: 1E1E9122565411EBA14ED510C4F9AE02.roa (hash: +PXK5bAQHl5n5sjoaxb3xlyTYiUqPD5GYXTU3OO67/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Validity
Not Before: Sep 22 18:51:28 2026 GMT
Not After : Sep 29 18:51:28 2026 GMT
Subject: CN=6ab2ce30-74ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:51:04:2b:ed:9e:ff:65:47:cb:af:63:de:
18:c9:bd:77:5a:40:e0:e1:db:89:8a:34:f6:3c:52:
e5:f5:08:16:ff:8e:68:f9:05:cb:5d:62:b6:4e:8c:
df:17:6c:57:ac:89:e2:76:39:e7:7f:00:16:2b:3c:
e9:5c:f2:f0:c5:03:d0:a9:96:ec:8f:dc:71:da:be:
fe:a7:e5:0e:f9:83:55:4f:05:d3:77:fd:a0:f8:58:
27:0c:36:7d:a2:d9:d4:b2:4a:44:e2:00:8c:93:5a:
16:89:7a:d0:28:43:d4:a1:35:17:bf:b3:16:d6:e3:
85:55:1f:39:64:91:a3:fd:8f:96:b3:4b:00:5c:c7:
36:ed:3a:6a:17:68:55:7c:ad:02:2f:e9:1d:b3:d9:
dc:ff:30:9e:d5:d6:15:b4:ab:86:fc:ef:78:c0:13:
1d:7d:04:59:36:88:d4:2f:da:87:6a:45:4e:b4:0b:
06:91:a2:69:82:c0:77:6d:eb:60:b1:6e:74:fd:0d:
47:c6:6b:22:2e:47:a6:6d:65:f2:25:77:4d:34:2b:
1b:74:51:49:a5:f2:7c:5a:0b:bd:c6:71:66:63:8d:
71:8c:2c:79:47:a9:a6:c6:90:8e:bb:fd:37:48:02:
50:95:f6:0d:da:00:2d:bc:38:ae:4b:61:a2:96:7f:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A0:B9:15:69:78:25:BF:96:33:6D:55:D7:ED:4E:D7:58:D0:75:A5
X509v3 Authority Key Identifier:
keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:92:90:db:9f:8f:07:e0:c1:00:da:cf:c4:64:eb:dc:d1:9d:
aa:9f:f2:8b:ef:f2:4c:64:66:99:37:a4:e9:19:6e:d8:40:4e:
e4:b0:fa:c0:ff:31:88:42:fd:8b:56:15:99:03:fd:05:fa:d1:
5b:36:b6:57:57:d9:39:11:82:40:51:64:35:ef:2c:c0:4a:d5:
8a:03:23:86:b8:93:a6:ad:a4:f0:24:b6:44:bb:a4:92:6d:c4:
4b:94:9c:4f:13:c5:b9:01:14:dc:3a:0d:78:29:83:57:68:c4:
bd:be:d0:51:a2:79:b2:cf:85:b3:34:21:cc:a9:5f:4d:83:55:
dc:02:ed:90:f7:c0:9b:a5:ae:66:2b:37:68:13:9c:f4:7f:2f:
0b:10:8d:55:bb:fd:f0:7a:3a:53:dd:19:5b:ae:e4:f0:a1:7b:
6f:05:bb:e3:f0:d0:83:c3:1a:9b:20:88:25:38:c5:01:51:de:
f2:d3:00:01:69:98:75:91:4e:42:ad:63:62:60:77:49:f0:99:
ba:f8:b3:9e:22:10:f8:69:e9:cd:71:2f:e1:6e:4f:f5:b1:51:
53:6b:cc:59:07:61:0a:13:15:4f:cd:3d:b9:16:9d:67:b1:1d:
5d:e6:72:74:2c:c5:57:9e:13:5e:28:b0:b0:2f:5e:18:c5:ad:
8f:34:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:43:06 2026 by rpki-client