
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json)
Hash identifier: jYIpdAEsZC4p8z3wqRfX69lQngi6vfXBAVtK5Q7KxF0=
Subject key identifier: D7:D6:D8:3C:03:BE:5F:71:FA:5A:1A:D4:9D:CF:15:DB:F7:A2:97:41
Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
Manifest number: 010F
Signing time: Sun 27 Sep 2026 06:36:50 +0000
Manifest this update: Sun 27 Sep 2026 06:36:50 +0000
Manifest next update: Sun 04 Oct 2026 06:36:50 +0000
Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: 8ki4+jSscU0WLIAtuJ+r3EUCs8Uf/fdbhXhpJ2MMWh8=)
2: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: ZAcnv2B2glJNz/amDzlP0oQS8f8IykGzbvOZt8DAQOY=)
3: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: V0jiGWcisCYeYKJhJdPZNpTEwuLUAeBQE/p7M60AP1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 06:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Validity
Not Before: Sep 27 06:36:50 2026 GMT
Not After : Oct 4 06:36:50 2026 GMT
Subject: CN=6ab8b982-d6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:0e:a2:20:87:78:39:c7:f1:ae:3b:4e:df:
f6:da:6e:00:f5:57:ee:68:d6:d4:55:c2:2d:28:f8:
e2:6e:f2:ea:f2:be:0b:4d:63:5f:e3:ab:b4:c3:9e:
27:dc:29:36:e2:c3:82:ce:38:57:c5:a3:53:c9:8d:
71:b5:b5:56:9d:bc:98:ba:e5:b9:85:c3:8c:ea:f7:
37:01:fe:91:7e:3f:19:1c:bb:f6:07:b6:19:e1:f8:
01:57:13:ab:bb:ab:e1:b7:15:f0:ca:19:5e:f7:34:
f0:e5:82:48:ad:95:f5:da:13:39:9b:2f:04:97:1d:
50:d1:95:5c:29:95:87:ad:0f:06:7a:de:39:c1:8f:
47:10:f9:81:de:9c:99:91:6e:8d:81:a5:57:12:3c:
84:32:7b:e1:62:c3:b0:a0:71:5d:3e:9d:4c:4a:1d:
ba:4b:f3:91:32:4d:e7:0f:05:eb:b5:d1:b9:3a:75:
a1:7a:23:96:23:08:fc:b2:75:bf:e0:f4:fb:7d:e4:
13:95:57:d6:9d:ea:ca:db:47:75:63:8b:a4:7f:d5:
d5:0d:cf:ae:9e:6a:0a:b9:86:6a:52:51:3f:b3:1d:
a7:54:06:98:03:51:22:5b:2f:43:4b:29:a9:d2:4e:
ae:86:70:e7:30:a7:1f:ef:57:6e:7d:db:44:e1:ae:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D6:D8:3C:03:BE:5F:71:FA:5A:1A:D4:9D:CF:15:DB:F7:A2:97:41
X509v3 Authority Key Identifier:
keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:12:b8:8c:a4:c4:5c:e0:67:06:ef:a5:8e:cc:dc:e6:cf:02:
fd:bd:1c:ef:a5:91:61:c5:c8:a6:c8:98:8b:68:e0:6f:09:6d:
f5:1e:aa:61:4f:83:02:c1:e4:bc:27:3e:4c:e5:28:2c:be:56:
33:b6:15:09:0e:eb:bb:07:cc:1e:dc:3d:3f:59:c4:46:b3:b4:
19:2c:da:48:07:7d:78:63:6f:b1:ad:28:50:04:4c:ed:74:dc:
23:44:8e:ee:75:d7:0c:86:c6:2c:81:ae:01:83:31:34:fb:99:
70:8a:4e:d7:79:25:1f:e5:41:8a:47:43:49:a8:d0:58:5b:35:
76:b8:aa:77:35:6b:34:26:f8:59:fa:f8:c7:4c:f6:85:2a:bc:
86:63:6b:d3:65:78:ce:dd:0e:f1:7c:21:78:52:01:9c:35:3e:
fb:6c:37:6c:07:ab:a1:9f:47:93:01:7e:9d:70:0b:d4:8c:b0:
95:79:89:cb:45:b9:bc:08:ce:1f:7d:45:70:b5:db:3a:44:ca:
3a:ed:6e:c3:01:f2:9f:41:d8:5e:8c:55:31:5f:5b:f7:b8:66:
a7:8e:9b:b3:00:f7:33:e8:cf:7b:53:35:04:a7:8b:12:ca:6f:
92:c6:0a:6c:b1:4b:ea:d3:e0:2d:4b:c0:f8:2a:7d:44:8c:a0:
e3:8f:43:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRFMTMxMTAvBgNVBAUTKDQ5RkQzM0Q2RjUxQUQ2QTQ5ODg0NDY5RkEzOUZFRjA0
MzIzMzZGODEwHhcNMjYwOTI3MDYzNjUwWhcNMjYxMDA0MDYzNjUwWjAYMRYwFAYD
VQQDEw02YWI4Yjk4Mi1kNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7UOoiCHeDnH8a47Tt/22m4A9VfuaNbUVcItKPjibvLq8r4LTWNf46u0w54n
3Ck24sOCzjhXxaNTyY1xtbVWnbyYuuW5hcOM6vc3Af6Rfj8ZHLv2B7YZ4fgBVxOr
u6vhtxXwyhle9zTw5YJIrZX12hM5my8Elx1Q0ZVcKZWHrQ8Get45wY9HEPmB3pyZ
kW6NgaVXEjyEMnvhYsOwoHFdPp1MSh26S/ORMk3nDwXrtdG5OnWheiOWIwj8snW/
4PT7feQTlVfWnerK20d1Y4ukf9XVDc+unmoKuYZqUlE/sx2nVAaYA1EiWy9DSymp
0k6uhnDnMKcf71dufdtE4a5G5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNfW2DwD
vl9x+loa1J3PFdv3opdBMB8GA1UdIwQYMBaAFEn9M9b1GtakmIRGn6Of7wQyM2+B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREUxMy8xNTFGRTQ3RTJB
NTYxMUYwQjg0RjUyMjBDNEY5QUUwMi9TZjB6MXZVYTFxU1loRWFmbzVfdkJESXpi
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NmMHoxdlVhMXFTWWhFYWZvNV92QkRJemI0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REUxMy8xNTFGRTQ3RTJBNTYxMUYwQjg0RjUyMjBDNEY5QUUwMi9TZjB6MXZVYTFx
U1loRWFmbzVfdkJESXpiNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbRK4jKTEXOBnBu+ljszc5s8C/b0c76WRYcXIpsiYi2jgbwlt9R6qYU+DAsHk
vCc+TOUoLL5WM7YVCQ7ruwfMHtw9P1nERrO0GSzaSAd9eGNvsa0oUARM7XTcI0SO
7nXXDIbGLIGuAYMxNPuZcIpO13klH+VBikdDSajQWFs1driqdzVrNCb4Wfr4x0z2
hSq8hmNr02V4zt0O8XwheFIBnDU++2w3bAeroZ9HkwF+nXAL1IywlXmJy0W5vAjO
H31FcLXbOkTKOu1uwwHyn0HYXoxVMV9b97hmp46bswD3M+jPe1M1BKeLEspvksYK
bLFL6tPgLUvA+Cp9RIyg449Dpw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:11:34 2026 by rpki-client