
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
File: SDhChq65tguzQoR_K6dhL4TbQ7I.mft (raw, json)
Hash identifier: JvSnrybYzgdCXx9ohm/L4aSNDrIOsFOvwUVBLukJqVk=
Subject key identifier: D5:08:A5:A8:A6:17:04:7D:A2:4E:D3:D2:80:18:DD:5A:B3:D1:AA:13
Authority key identifier: 48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
Certificate issuer: /CN=A91E6369/serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
Manifest number: 85
Signing time: Sat 03 Oct 2026 08:32:29 +0000
Manifest this update: Sat 03 Oct 2026 08:32:28 +0000
Manifest next update: Sat 10 Oct 2026 08:32:28 +0000
Files and hashes: 1: SDhChq65tguzQoR_K6dhL4TbQ7I.crl (hash: iXH4U9qm9h5IC5vND8UyzozPmgi9G9kCFa0O1Mhk9es=)
2: F85CEC2417BC11F1A40B39FC393D8C67.roa (hash: Lk3LIKj/GiDK4MdOByMKxwMl2tprlDsVLGGIsH3ZkXM=)
3: 5CCD0A3C186B11F1A49ED6DE323D8C67.roa (hash: /T0qY7CsRtoFS+lodVUIgOp2mv9nPTD25O9ozCsvMyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl
rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6369, serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
Validity
Not Before: Oct 3 08:32:28 2026 GMT
Not After : Oct 10 08:32:28 2026 GMT
Subject: CN=6ac0bd9c-a72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:fc:63:b6:5a:0b:a3:ad:ab:cd:5c:d9:da:
ba:70:f5:91:0c:24:f6:75:e1:2a:18:f1:b2:15:4a:
4a:7f:9f:c2:48:83:2b:66:ce:f0:a3:af:f4:f2:15:
eb:af:69:19:32:26:dd:10:94:f6:89:cb:98:4e:a6:
b6:01:45:b9:0b:29:c3:f9:79:dc:4d:88:9a:f8:72:
56:a7:f4:0b:f8:0a:b6:db:de:df:5d:6f:c0:bd:08:
21:60:d5:92:01:d9:73:b5:0a:54:19:86:0a:64:f5:
8c:e0:09:56:49:00:4e:d0:ef:e1:ce:4f:a9:32:7b:
2e:4e:78:8b:a7:83:ab:cf:6d:81:31:48:53:30:aa:
52:28:68:1e:fd:84:31:1d:91:5f:74:9b:41:b7:c3:
f9:5e:60:12:24:fe:8b:36:ef:6f:4a:2f:1c:7c:f5:
34:3f:13:c5:d0:4a:42:0c:4c:3f:1f:fc:9b:44:7e:
23:a1:09:1c:d9:94:36:e0:b2:2d:3c:97:56:d7:e4:
1f:06:45:79:47:ac:3f:a1:fb:d5:59:d5:40:99:98:
89:48:43:bd:90:fe:46:73:d8:fe:f0:c2:94:c0:c2:
ca:d1:62:67:7f:c8:a6:0b:8f:87:4e:40:23:d0:21:
65:71:30:20:d6:7c:d2:71:94:0d:aa:09:85:8f:71:
60:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:08:A5:A8:A6:17:04:7D:A2:4E:D3:D2:80:18:DD:5A:B3:D1:AA:13
X509v3 Authority Key Identifier:
keyid:48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:33:e7:8c:ca:a6:d7:e4:d0:c5:0c:3a:da:fd:3d:8b:5b:f2:
91:a6:68:df:63:59:7a:f0:0c:fd:55:c3:80:d9:19:7d:cc:58:
a9:5c:0c:c3:d8:ff:15:6f:45:07:33:e8:91:ff:29:3f:ea:76:
ca:64:24:c0:4f:90:9e:a7:24:fe:2c:1c:49:68:66:d2:ac:af:
db:ab:e6:5b:64:28:3e:b8:c9:8b:04:6e:b0:13:b8:a9:8b:54:
eb:9f:eb:50:15:d7:9b:f2:a9:02:af:24:7e:b7:e5:b2:3b:b2:
55:87:05:b6:02:6f:4a:38:55:74:3e:bd:34:80:cf:36:ed:a3:
5d:96:95:17:d8:77:bc:2d:86:79:4e:3c:b7:87:4e:4b:fb:15:
7d:69:57:9c:70:fb:9d:4a:9b:c8:43:3e:6e:de:34:e7:93:7e:
58:38:5f:cc:82:f2:5b:47:85:89:94:22:63:b3:40:45:5e:33:
90:c9:eb:bc:b4:e9:d2:63:dc:b2:05:c0:66:c0:38:fc:ea:d3:
69:76:b3:20:94:e0:45:cd:e8:05:a1:8a:58:aa:18:6e:bc:22:
b9:2c:3d:5e:29:d1:19:ba:26:ae:71:1e:c3:10:a1:ca:55:ee:
7a:43:f9:fb:cb:20:58:31:75:48:b3:a5:b6:b9:d4:a6:03:a0:
3a:d8:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:22:27 2026 by rpki-client