
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
File: SihlGpSsY59qsTJHTTHrDfzm3Hk.mft (raw, json)
Hash identifier: RgELoM5IqHAd/ylEnX5xI4orQfqlBBJF6mPMH4F82uE=
Subject key identifier: 7F:AF:C9:20:05:6E:06:85:7D:31:45:CB:93:1A:9D:ED:30:BC:EE:DD
Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79
Certificate issuer: /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
Certificate serial: 0562
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
Manifest number: 054F
Signing time: Sun 01 Mar 2026 00:01:20 +0000
Manifest this update: Sun 01 Mar 2026 00:01:20 +0000
Manifest next update: Sun 08 Mar 2026 00:01:20 +0000
Files and hashes: 1: SihlGpSsY59qsTJHTTHrDfzm3Hk.crl (hash: HWtp0+XFNpfG+wLtmNZhuPhGD9Sy4HFxfcelfYtahxw=)
2: C420EBE06EC911EC8A5A940AC4F9AE02.roa (hash: CmqKWcu5rzChWjhtTQvy211Wonly3ow/OGWPthnbqKE=)
3: A64296622BAA11EC9618D864C4F9AE02.roa (hash: v+FzGmDbG4ktmg8bwxKoDgp8/3yzS6ygyCQtH5/4gJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl
rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1378 (0x562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122373, serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
Validity
Not Before: Mar 1 00:01:20 2026 GMT
Not After : Mar 8 00:01:20 2026 GMT
Subject: CN=69a381d0-36ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:78:12:39:0d:69:ff:8d:f3:85:4c:d5:b0:
7c:2d:61:56:10:d5:bb:9e:45:79:4b:7e:c1:8c:86:
38:08:ee:3f:1e:ad:cc:e5:e9:51:e2:b0:10:19:9e:
11:ae:65:99:15:2a:85:c3:2f:30:33:a0:9c:82:4a:
44:ed:8e:39:19:15:c7:b6:f9:5a:81:1b:6a:bd:53:
9c:95:cf:da:d9:c1:8a:2c:e4:5a:07:0e:77:ff:e4:
23:3c:9d:b6:77:ce:94:b1:a8:00:62:0c:71:43:4f:
4f:ec:d3:b9:6e:4d:11:95:59:f3:91:a5:eb:d5:e1:
09:d5:8d:a0:95:77:c3:64:ce:22:ae:b1:86:f9:7a:
41:77:02:6d:bc:71:84:35:73:1c:04:c1:ca:4b:e0:
31:86:0c:94:58:84:cb:c0:5c:eb:cd:c0:66:56:74:
d4:7a:18:0c:58:70:95:f9:ec:01:fb:9d:a9:40:61:
15:b9:5e:0f:a8:ae:57:6a:df:f2:dc:2a:01:8b:80:
ee:39:9d:e5:e5:41:ac:39:70:92:11:d8:a3:fe:b1:
f0:b5:b3:09:c1:fb:2a:42:7f:5c:a5:19:04:75:a0:
9b:7d:53:f5:00:bb:e7:38:05:fc:4d:3d:b0:b0:c5:
b8:e8:b2:a9:81:b1:98:94:71:3b:43:7c:d5:90:5e:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AF:C9:20:05:6E:06:85:7D:31:45:CB:93:1A:9D:ED:30:BC:EE:DD
X509v3 Authority Key Identifier:
keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:14:ca:ec:c4:1c:3e:39:11:c5:42:35:8f:e2:07:7c:4c:f5:
10:10:00:f8:47:3d:c2:21:b8:82:8e:71:75:83:aa:4e:24:da:
0f:06:c1:a4:e4:97:3b:df:18:f1:b6:e6:48:fa:45:35:b4:59:
af:db:c3:6b:60:f8:5b:80:bc:32:c1:f9:cf:91:c6:32:76:8d:
e7:b8:a9:01:41:16:18:e7:7f:4f:d4:d1:b3:45:72:5b:03:37:
af:52:08:6b:ec:97:3b:25:93:63:0d:1b:97:81:ce:8a:a0:5c:
90:d2:a7:0a:6f:a8:b1:ef:65:58:d8:00:be:56:6e:0a:94:3f:
dd:ac:e5:f6:ea:6e:13:5b:b2:e8:99:a6:e2:3c:9e:34:db:5c:
a6:08:80:93:85:2e:62:46:b9:be:54:fd:d0:a6:3e:27:e6:1f:
99:d8:62:73:60:af:25:64:b8:d3:f9:dc:2d:fc:27:7a:63:b9:
b5:de:8b:3b:d0:9c:b1:93:fb:a8:c4:24:4d:80:f5:f8:11:25:
79:18:52:2b:0e:c8:da:8e:e2:37:ca:35:8b:9c:df:d5:1f:79:
66:da:9b:be:0c:d2:88:89:0d:12:29:af:e0:25:1c:10:65:59:
6e:84:01:13:29:7a:83:2f:b6:d7:0b:91:8e:36:fe:e8:8b:26:
fb:92:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:19 2026 by rpki-client