
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
File: SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft (raw, json)
Hash identifier: GsDMfHqEEBB5ZdklBIaDreHB5a87zRLnP5fqUiNU22M=
Subject key identifier: 44:6D:DF:06:38:A8:78:C6:5B:3B:EE:EC:FB:F4:B9:BC:1F:16:D2:30
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Certificate issuer: /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial: 0EA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
Manifest number: 0E8F
Signing time: Mon 02 Mar 2026 00:40:22 +0000
Manifest this update: Mon 02 Mar 2026 00:40:21 +0000
Manifest next update: Mon 09 Mar 2026 00:40:20 +0000
Files and hashes: 1: SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl (hash: 5/MvHfMaEOAysfQoVvc1n5q7dXb4Z9kmqQSplz4yyVE=)
2: DB87E692ADB211E99AAEE879C4F9AE02.roa (hash: 2kXWl4Cs1R/aPiAdtvMJLAsl+3ClYTwwDDVh+n0Dv2Y=)
3: AE14DBAA997711EAB12AD74CC4F9AE02.roa (hash: iA04EyF3JdExva3/idlBuWytZyJRag874pO7pySXwJg=)
4: 28BC5490487F11EAB8C7545FC4F9AE02.roa (hash: S4AV+hD7m9juwu/JMpkYcCbzUHhn99B0UXH2YVYLeEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3749 (0xea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Validity
Not Before: Mar 2 00:40:21 2026 GMT
Not After : Mar 9 00:40:20 2026 GMT
Subject: CN=69a4dc76-b23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:30:13:e9:1b:c2:1f:c3:64:fc:c5:e8:b5:
02:ec:d4:98:10:c0:47:02:8a:be:71:62:c8:90:15:
79:d8:7b:27:bc:8f:9a:94:e7:f1:e8:85:53:75:d1:
8c:fc:fa:24:dc:ca:88:9c:c5:ef:e7:46:e8:54:8c:
8c:b1:b8:45:e7:40:f9:7b:cd:8b:86:8d:6c:10:68:
c7:ff:31:ef:f6:7f:2b:59:30:df:60:99:8e:5a:b4:
97:7c:7b:f7:7b:1d:81:c3:fa:f7:aa:f6:fc:0c:c3:
3d:ae:00:32:e1:12:14:3d:ce:31:f8:c3:c9:69:e3:
8a:01:70:59:30:5d:63:9f:c4:7a:ff:fa:4c:7d:ef:
99:91:92:83:ca:a8:47:e6:df:1f:30:4e:42:d5:0d:
da:d7:89:e0:dd:cc:37:1e:e2:71:9d:8c:82:c9:8b:
dc:46:0b:b0:c2:ba:0a:0f:6b:6d:08:89:c5:f4:5a:
43:93:b7:db:2e:7a:e6:cd:f3:7a:77:87:0c:89:65:
ee:1c:ed:10:b1:a2:68:ba:37:b0:a2:ff:d3:ef:ca:
04:5e:f1:62:72:f9:b6:56:43:cd:97:f7:63:ca:b1:
5d:0c:3c:35:29:0d:dd:b6:54:4d:84:ab:56:31:28:
d9:b1:e6:23:dc:5a:b0:b8:7e:b6:35:72:0e:44:da:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6D:DF:06:38:A8:78:C6:5B:3B:EE:EC:FB:F4:B9:BC:1F:16:D2:30
X509v3 Authority Key Identifier:
keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:50:0c:06:6a:58:85:cd:c1:86:e5:27:30:0a:19:7d:83:23:
82:01:cd:49:fa:4a:80:a1:9e:d3:b1:9a:08:bd:25:c6:30:18:
b5:f0:66:12:fe:71:c3:46:44:33:9f:66:38:11:2f:5a:6f:c5:
b2:3f:4b:86:e9:49:02:ba:c9:e8:98:39:4a:90:97:1e:80:ad:
d8:f4:23:84:39:95:a4:c8:d3:7f:a9:33:e0:4f:59:f0:5f:7c:
5e:25:28:9d:f4:f5:76:93:aa:46:56:b0:73:0e:88:00:bd:dc:
bd:b1:34:65:7b:55:c6:82:5e:86:2a:28:65:0c:ba:32:ed:28:
8b:37:ae:be:83:27:af:1b:82:a2:1f:65:2d:84:92:37:cd:ad:
e5:01:99:f8:e4:4a:1f:41:a9:23:9a:76:86:d0:e9:b4:e5:1f:
ae:ec:80:5e:91:ba:43:40:13:91:e3:36:f7:1c:2a:13:71:dd:
9e:32:61:35:c1:b3:75:ec:7b:78:16:1e:c7:13:83:dc:f2:e2:
06:e1:6d:93:47:d0:08:e6:d7:2a:9f:f0:3e:cd:05:eb:e9:d0:
f9:91:44:e9:c0:da:fb:ed:ee:5c:9c:98:84:dc:ba:26:32:4d:
f2:68:d5:19:48:da:1a:27:c4:7e:8c:6d:33:ac:74:a1:8a:0b:
20:71:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:26 2026 by rpki-client