
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft
File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json)
Hash identifier: 5CEuDnSWc6qAdVHmXnvr6pJPA2IlU1HFlxb2H1TcZJ4=
Subject key identifier: 04:C0:19:19:46:CB:0A:20:08:FF:E1:42:C0:55:A1:BD:D1:9F:97:7D
Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4
Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4
Certificate serial: 03B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft
Manifest number: 03AA
Signing time: Fri 25 Sep 2026 00:26:47 +0000
Manifest this update: Fri 25 Sep 2026 00:26:47 +0000
Manifest next update: Fri 02 Oct 2026 00:26:47 +0000
Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: d2vb1cYZAb8+9r7ZblHINsKf7fHKmNSnpYkpkYlqkQY=)
2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: euis7+0H+a235wUq30H05T3gotTS+SI7gYye3MGScoY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl
rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945 (0x3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4
Validity
Not Before: Sep 25 00:26:47 2026 GMT
Not After : Oct 2 00:26:47 2026 GMT
Subject: CN=6ab5bfc7-e8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:60:ae:c2:5e:9c:65:13:1d:7a:e7:76:9d:
6a:14:8a:75:35:34:b8:88:87:c9:ae:fe:04:b3:49:
44:97:dd:19:de:5a:98:3e:99:76:76:c3:4c:52:10:
23:66:95:6c:54:2e:5f:58:23:0b:fb:42:3b:f7:5e:
4a:35:f9:8f:f8:c1:4c:a1:fc:8a:58:ab:2f:76:30:
b3:8d:65:93:9b:c6:a8:50:40:02:7a:25:c9:7d:e4:
20:79:b2:e2:22:c2:5a:88:c7:78:ec:74:d8:dd:00:
b6:81:28:83:ae:7d:38:8f:da:dd:a8:7f:48:9a:a4:
55:ad:15:66:d9:df:bc:e4:0a:0b:3f:a9:36:6a:f8:
b0:ac:5a:21:c3:cd:ae:7b:71:02:08:da:3d:87:9f:
3f:9f:e6:7b:bb:b8:2f:db:87:35:b5:24:3a:38:28:
83:9b:83:90:a1:40:bb:ba:bb:fe:8a:b0:52:65:35:
af:2a:c5:59:82:d1:c5:69:db:71:42:81:42:87:29:
d4:e0:87:64:7e:c8:f7:35:57:70:f2:e7:77:ff:3f:
60:da:e1:5c:13:e6:aa:a3:48:a2:4a:07:ad:da:eb:
83:6f:3a:d9:86:7f:53:64:34:07:41:13:ea:3c:a8:
1f:18:12:7e:98:7d:b0:56:19:5c:e5:0b:35:21:b0:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C0:19:19:46:CB:0A:20:08:FF:E1:42:C0:55:A1:BD:D1:9F:97:7D
X509v3 Authority Key Identifier:
keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0f:33:1e:51:84:a4:9a:30:d4:14:82:75:f8:f7:29:6d:7d:
9d:76:06:c9:03:be:6e:0b:5b:cb:0f:de:4d:12:64:28:f1:e9:
b0:b8:84:cb:b7:5c:8e:79:3b:d1:b9:b0:c8:a0:67:33:17:12:
22:cc:c5:3a:21:57:46:ad:7b:1e:4e:43:03:1e:59:91:99:84:
72:3b:06:43:d4:f8:bc:2a:67:a9:f4:ce:2f:14:62:f6:51:cd:
51:aa:a3:b5:ef:c9:c7:1e:25:2a:87:f5:a2:8f:8a:9c:44:09:
91:aa:b5:34:9b:f9:c0:fc:2d:a7:a5:c6:ae:3f:39:7f:4d:5b:
ae:15:87:03:b0:82:f1:70:7d:11:db:b4:2f:18:3c:b8:92:34:
9d:f6:e5:2f:92:3a:05:17:8d:69:fa:cb:c9:01:01:c0:0a:34:
1c:b8:e6:e5:5c:a6:c7:6e:b1:c3:ed:96:46:36:54:74:55:f5:
e0:aa:6c:11:cd:80:ff:24:2b:ae:d2:87:8c:19:f0:8e:d8:9c:
74:07:33:2a:53:ff:d7:ed:d9:0b:11:83:a4:9d:1e:9f:97:27:
66:65:b5:87:b8:90:01:12:69:dc:7e:22:35:dd:9f:72:93:77:
26:a0:43:ef:46:d1:96:a4:11:39:9d:9b:58:75:51:e8:e5:61:
3f:43:f7:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG
QkIwNzc3QzQwHhcNMjYwOTI1MDAyNjQ3WhcNMjYxMDAyMDAyNjQ3WjAYMRYwFAYD
VQQDEw02YWI1YmZjNy1lOGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4hhgrsJenGUTHXrndp1qFIp1NTS4iIfJrv4Es0lEl90Z3lqYPpl2dsNMUhAj
ZpVsVC5fWCML+0I7915KNfmP+MFMofyKWKsvdjCzjWWTm8aoUEACeiXJfeQgebLi
IsJaiMd47HTY3QC2gSiDrn04j9rdqH9ImqRVrRVm2d+85AoLP6k2aviwrFohw82u
e3ECCNo9h58/n+Z7u7gv24c1tSQ6OCiDm4OQoUC7urv+irBSZTWvKsVZgtHFadtx
QoFChynU4Idkfsj3NVdw8ud3/z9g2uFcE+aqo0iiSget2uuDbzrZhn9TZDQHQRPq
PKgfGBJ+mH2wVhlc5Qs1IbALeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATAGRlG
ywogCP/hQsBVob3Rn5d9MB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3
OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP
Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAow8zHlGEpJow1BSCdfj3KW19nXYGyQO+bgtbyw/eTRJkKPHpsLiEy7dcjnk7
0bmwyKBnMxcSIszFOiFXRq17Hk5DAx5ZkZmEcjsGQ9T4vCpnqfTOLxRi9lHNUaqj
te/Jxx4lKof1oo+KnEQJkaq1NJv5wPwtp6XGrj85f01brhWHA7CC8XB9Edu0Lxg8
uJI0nfblL5I6BReNafrLyQEBwAo0HLjm5Vymx26xw+2WRjZUdFX14KpsEc2A/yQr
rtKHjBnwjticdAczKlP/1+3ZCxGDpJ0en5cnZmW1h7iQARJp3H4iNd2fcpN3JqBD
70bRlqQROZ2bWHVR6OVhP0P3gQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:28:33 2026 by rpki-client