
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.mft
File: ssnrQPywE1ScqjXmpYC9mNr_DvM.mft (raw, json)
Hash identifier: cpA481jPFsw5Eg7bSb1ywkYZgtIgsKGofJpw4VvkGG0=
Subject key identifier: C3:3E:46:AF:50:90:4A:2B:02:71:05:98:E2:00:6A:19:92:73:C3:52
Authority key identifier: B2:C9:EB:40:FC:B0:13:54:9C:AA:35:E6:A5:80:BD:98:DA:FF:0E:F3
Certificate issuer: /CN=A91F29DD/serialNumber=B2C9EB40FCB013549CAA35E6A580BD98DAFF0EF3
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ssnrQPywE1ScqjXmpYC9mNr_DvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.mft
Manifest number: 03
Signing time: Wed 23 Sep 2026 09:02:48 +0000
Manifest this update: Wed 23 Sep 2026 09:02:47 +0000
Manifest next update: Wed 30 Sep 2026 09:02:47 +0000
Files and hashes: 1: ssnrQPywE1ScqjXmpYC9mNr_DvM.crl (hash: QEzbSpKeEVyDvF/U0TD+1MezzRQ7Ty8jubkd2JexwZY=)
2: 562C4F32B58F11F1919EBCA56C11F970.roa (hash: s9/6Wu2v2FTT8R7Df/OuhcIg3vm5m0oyRj3n+CokLv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.crl
rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ssnrQPywE1ScqjXmpYC9mNr_DvM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 09:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F29DD, serialNumber=B2C9EB40FCB013549CAA35E6A580BD98DAFF0EF3
Validity
Not Before: Sep 23 09:02:47 2026 GMT
Not After : Sep 30 09:02:47 2026 GMT
Subject: CN=6ab395b7-0380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:82:f8:5c:5f:a0:e3:62:e6:b4:23:cb:92:
33:90:89:42:be:e0:dc:24:6c:1d:36:82:43:89:8e:
04:ad:ba:dd:75:55:29:81:cf:3a:ae:e3:3c:0a:04:
d7:03:9f:eb:c0:fe:7b:12:4d:cd:be:8e:e4:51:3f:
84:75:1e:a2:f5:94:54:84:29:51:1e:8b:93:77:e5:
13:d5:97:af:c7:42:46:7d:01:48:d1:00:eb:34:b2:
36:f2:5c:43:df:ca:14:3e:37:17:0f:8c:21:93:39:
7b:c5:b5:df:93:59:fa:e8:89:2e:2e:f5:1b:57:9d:
56:3b:9c:29:7a:5d:71:05:d4:2e:df:8c:d1:10:05:
72:08:64:18:d8:73:59:11:a3:90:20:f4:60:4f:80:
f4:85:bf:88:f3:4b:19:68:2c:d4:75:48:22:c1:c8:
cc:0f:fb:4e:7e:6c:54:f3:d9:0f:3b:78:09:a8:7a:
9a:53:6c:55:83:b3:aa:02:d4:d7:e0:cf:5d:fb:b3:
ba:b5:f1:a3:6f:53:03:6d:a1:66:ee:a1:7e:5d:06:
79:ca:52:42:fa:89:d5:aa:92:5c:af:96:fe:23:3c:
3f:68:a5:7f:6b:5a:b9:68:3b:6a:a2:ae:e1:53:d6:
65:1c:46:80:4d:f3:9e:d7:b4:41:a3:ad:89:74:f5:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3E:46:AF:50:90:4A:2B:02:71:05:98:E2:00:6A:19:92:73:C3:52
X509v3 Authority Key Identifier:
keyid:B2:C9:EB:40:FC:B0:13:54:9C:AA:35:E6:A5:80:BD:98:DA:FF:0E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ssnrQPywE1ScqjXmpYC9mNr_DvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:ec:92:91:82:4e:1f:8d:a8:25:fa:4a:39:05:97:a4:ca:8b:
63:ba:ed:05:66:4a:75:87:f0:01:72:08:a9:6c:f2:d1:fa:30:
0c:15:80:8d:a1:19:e9:83:6f:09:01:40:3c:c1:9d:0f:5f:7b:
86:ba:e5:fa:e4:c3:a1:54:19:a1:be:2f:b2:f1:06:c7:37:8c:
af:14:a7:c8:4d:c4:f1:4d:19:54:64:8a:ea:7e:b8:92:a3:bb:
7d:7b:ae:a9:14:41:b7:ac:cd:a3:0b:d6:94:11:0d:6a:64:dd:
0c:99:b5:94:d9:d4:0f:b1:c6:18:ab:63:9c:30:1d:bf:6f:93:
1b:44:2a:81:40:39:b9:5a:1f:ce:46:d5:79:8d:48:3f:05:26:
f2:b9:13:78:7a:f5:12:42:9d:d6:2c:71:81:56:0a:4e:d1:e8:
5a:3e:50:21:05:47:d5:8d:64:16:33:60:14:aa:e8:96:04:fb:
91:4c:a7:98:c5:5d:40:1b:2e:73:b7:18:f8:9a:24:9a:9a:6e:
a2:fe:cc:6f:4d:ca:0c:b7:a5:9a:4b:f5:8c:42:b6:27:67:dd:
a1:75:07:57:89:7b:06:8d:4e:2b:03:52:82:03:f1:5f:cd:d7:
6e:1b:1d:83:60:a8:96:17:51:f5:3b:96:6b:59:f6:2d:0c:30:
7b:e8:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:48:19 2026 by rpki-client