
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
File: rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json)
Hash identifier: T8m6UODMokD2ntLwl8blvJtRZCGCWCspfzq2efvoJu4=
Subject key identifier: 79:1B:78:16:92:B2:E8:4B:A1:50:85:CF:2F:85:7D:8E:DC:38:77:33
Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17
Certificate issuer: /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
Manifest number: 016B
Signing time: Fri 17 Apr 2026 04:30:02 +0000
Manifest this update: Fri 17 Apr 2026 04:30:02 +0000
Manifest next update: Fri 24 Apr 2026 04:30:02 +0000
Files and hashes: 1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: DMrxKlzxk7wm4C1dTPPjeEH3ql4MdDqBNFVORJAA1/k=)
2: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: ehap6Q63K2HA1HHi1sUuHaZylPKKG7z9uMFB3YSX6tk=)
3: 849C352211F811EF820BF24FC4F9AE02.roa (hash: HSdFjytjHmiLhkdbeS16n3M0fQZ88I2KtzR5hDNY8HA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl
rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B6FB, serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17
Validity
Not Before: Apr 17 04:30:02 2026 GMT
Not After : Apr 24 04:30:02 2026 GMT
Subject: CN=69e1b74a-1afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:21:b6:e0:a0:4f:cf:9b:74:e3:31:02:d6:
7a:11:a4:5b:8f:2a:c0:3c:cf:2d:6f:29:04:46:de:
8a:6a:f3:af:cd:44:49:01:9b:d0:af:1c:ed:bf:18:
6b:0e:32:f6:cf:8c:42:4e:f8:18:10:9c:ea:ba:ce:
8b:1e:9c:ec:c1:b7:60:7b:63:8a:95:73:99:66:48:
ff:92:cd:33:cd:9d:0a:fb:0d:80:49:a0:72:fc:ec:
9f:e8:58:5c:2b:d9:9f:2e:ec:be:ba:73:1c:0a:d5:
89:35:c3:ef:b5:81:5c:70:5f:5f:03:89:7a:15:f7:
6b:8c:26:aa:c9:b8:88:bd:a3:18:a1:c5:6f:4a:03:
01:ec:3e:39:be:52:06:86:73:e8:17:4c:99:ff:2e:
d4:ca:c3:f3:89:18:e0:3b:a6:6c:80:3e:c0:e4:0a:
44:01:46:7e:1a:ad:8a:6c:33:dc:36:e6:37:89:60:
50:78:3a:91:30:20:2f:96:37:6c:69:45:98:cf:b0:
23:c6:d7:65:f6:26:bb:78:14:7d:d9:f9:5b:c5:88:
7b:33:64:ec:3c:8d:d4:06:cf:85:0e:82:4a:1b:64:
d3:86:c0:cc:a9:7b:d3:9a:e9:33:a8:d2:68:8e:d9:
07:57:82:9a:1b:fe:99:db:dc:8b:6e:2c:60:03:e8:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1B:78:16:92:B2:E8:4B:A1:50:85:CF:2F:85:7D:8E:DC:38:77:33
X509v3 Authority Key Identifier:
keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:5f:60:33:bb:b1:92:d6:dc:b6:08:77:ae:00:68:e8:d5:e8:
09:66:ee:91:d6:53:01:1a:ac:e8:25:b4:39:27:fc:20:84:70:
d1:4e:b2:69:ca:39:18:47:64:de:52:4f:9a:df:13:1c:37:a6:
cc:b4:4d:a9:31:c9:a3:df:b6:78:d9:1c:52:e8:8a:81:f6:a1:
00:9b:39:bd:10:63:4f:ac:cc:fa:3d:40:5b:46:e0:b3:c5:b0:
14:36:34:19:02:35:52:19:c8:ac:04:44:b4:c5:07:db:62:f8:
a4:8d:a7:e5:b7:5a:8b:65:93:d0:15:a5:e9:d8:bc:87:c3:e7:
87:23:63:c3:13:29:63:fb:42:ef:69:3a:08:10:0e:37:a2:9d:
c2:11:d0:ee:f1:a2:db:3a:8a:d4:3b:67:b9:8f:61:49:8c:92:
9f:aa:a2:08:41:c7:1f:d4:e4:12:e4:72:ba:5a:a4:46:b1:1b:
15:ef:d6:12:7a:ea:5b:6c:a9:6a:86:7e:87:f4:f9:f0:45:17:
77:21:33:e3:42:27:25:f9:d6:25:b4:41:c6:39:42:24:a8:02:
0a:2c:03:07:46:62:68:18:3c:e8:13:18:9e:d2:f2:6a:71:51:
e7:4d:1c:e7:93:38:a9:06:33:80:4f:ed:b6:1b:55:27:5a:da:
e7:1c:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:55 2026 by rpki-client