
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
File: sb1NsCH1THJj88NTX4g2hJui5g4.mft (raw, json)
Hash identifier: SH/QBzQTit7suVhY1UYbqZ3fUgXkWWbkXzC5dNZuVbo=
Subject key identifier: A7:46:5F:15:42:8A:C8:AE:FE:7A:81:3A:7A:A7:FC:EE:E5:9C:F4:06
Authority key identifier: B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E
Certificate issuer: /CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
Manifest number: 0116
Signing time: Wed 13 May 2026 06:00:35 +0000
Manifest this update: Wed 13 May 2026 06:00:35 +0000
Manifest next update: Wed 20 May 2026 06:00:35 +0000
Files and hashes: 1: sb1NsCH1THJj88NTX4g2hJui5g4.crl (hash: BRU+4n4rAFDCRs+Ek1WzRRdynw/gWQUAEg1qvzXWSOM=)
2: A30B17FAA81911EF862F3A56C4F9AE02.roa (hash: PGZEC43Jrl4xxGDivGAOBx4e7We0intHItmZzFxukHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl
rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E520F, serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
Validity
Not Before: May 13 06:00:35 2026 GMT
Not After : May 20 06:00:35 2026 GMT
Subject: CN=6a041383-eac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:49:09:37:25:9b:f1:88:86:75:9e:d3:24:d8:
51:d1:5d:74:dd:ea:ba:87:16:40:97:2f:73:0c:04:
f3:5f:ca:d6:06:7d:10:c4:09:bf:40:e9:00:74:59:
51:b9:f0:22:4b:14:11:05:98:30:0a:53:6b:af:eb:
09:28:7f:4b:47:93:23:54:c1:1e:33:cf:fd:55:1d:
1e:e1:49:a5:a0:67:85:1c:5b:bc:06:bb:37:6a:94:
21:d6:93:38:1d:3d:d5:f4:dd:52:d8:47:8b:78:2e:
08:e6:5d:7c:6e:25:3b:30:b8:68:5b:4d:6a:20:1d:
d6:31:ee:1f:ac:47:24:9f:95:9b:36:06:77:f5:34:
b4:69:04:52:a2:9b:52:84:ca:35:92:4e:9c:0e:40:
3f:02:42:0e:08:c6:6e:79:4c:15:66:41:6c:12:7f:
7c:20:41:81:f4:64:eb:e9:23:37:89:a8:11:18:cb:
79:d1:9e:75:d9:d7:96:be:22:28:d9:c6:5a:ab:7e:
7b:44:b9:48:49:4c:f8:a2:59:3f:f3:2c:80:be:f9:
7f:49:84:df:ee:34:fa:11:31:9a:63:27:d8:5a:1e:
b4:a8:86:ab:18:ee:df:21:7b:33:97:f5:76:eb:15:
43:d0:a1:fb:06:8c:30:c8:d9:db:94:36:c0:4e:55:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:46:5F:15:42:8A:C8:AE:FE:7A:81:3A:7A:A7:FC:EE:E5:9C:F4:06
X509v3 Authority Key Identifier:
keyid:B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:84:a9:4d:60:a9:1c:82:3d:50:76:89:db:b9:25:fb:4d:1a:
ba:94:6b:2f:e8:70:b1:8f:7a:f6:3c:43:8b:cb:be:23:05:f2:
52:74:f1:b8:b8:66:c6:e7:f1:9e:0e:4e:54:c6:f0:b8:01:b4:
d7:29:80:d5:0b:00:24:89:37:c3:d0:3b:c6:30:59:c4:53:74:
86:a9:40:a4:e9:64:20:9a:80:7a:d7:26:50:4d:f2:fb:5a:ef:
9f:31:9b:96:b6:88:ce:0f:d9:60:37:da:dd:f5:45:3a:bb:10:
61:c4:79:46:15:a5:d7:5d:c2:1b:d0:fe:80:61:db:45:4e:68:
d6:47:fc:78:ea:5c:e3:69:86:51:e1:17:16:21:98:ba:b3:5a:
2c:35:0d:bb:15:0e:d2:c4:44:37:2b:4d:6a:23:3b:22:c7:df:
78:7d:1f:58:67:62:f1:ec:1f:30:95:fd:a9:80:37:51:81:bb:
6c:78:e1:25:11:3a:5a:ca:30:a2:5e:5e:86:b8:82:e4:b4:09:
44:b0:74:ac:8d:ab:8c:aa:33:e7:a8:4a:c1:d9:27:48:65:00:
47:9c:ec:db:a4:2c:ae:d5:c0:3a:61:7c:17:4c:3c:b9:e3:4f:
fe:83:d9:0c:fd:af:21:c1:41:32:42:06:a6:e2:cb:49:06:0c:
ab:4b:d1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:14:32 2026 by rpki-client