
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
File: sgBZBkA-medoWaqrsdy92uRCBvY.mft (raw, json)
Hash identifier: iEY+loP7LXX1+WsoSBZcnN29ABhtx+iE3jx6UAXRRKY=
Subject key identifier: 5C:D1:86:62:15:11:CF:BF:89:10:93:49:CA:02:BE:B9:F0:4A:3B:9E
Authority key identifier: B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6
Certificate issuer: /CN=A913A748/serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
Manifest number: 01A5
Signing time: Sun 11 Oct 2026 04:44:06 +0000
Manifest this update: Sun 11 Oct 2026 04:44:06 +0000
Manifest next update: Sun 18 Oct 2026 04:44:06 +0000
Files and hashes: 1: sgBZBkA-medoWaqrsdy92uRCBvY.crl (hash: v8MAF9tXA4ptn0yggp9feMMDFtv6WWm6U9H3R2GX4BM=)
2: 0B7CF64642B211EF82734679C4F9AE02.roa (hash: kL62eWNNxCmIqWn148oDd5NiFkk9P6EuWtobo5V3pGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl
rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 04:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A748, serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6
Validity
Not Before: Oct 11 04:44:06 2026 GMT
Not After : Oct 18 04:44:06 2026 GMT
Subject: CN=6acb1416-cfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:71:9f:15:56:95:fc:3e:bf:ec:4d:8d:7f:
52:61:64:a6:5a:8b:04:a3:3c:60:93:d9:33:a9:00:
15:65:40:69:3d:35:66:0b:20:2b:bf:bf:dc:83:a1:
9c:b4:96:77:a6:ce:f9:39:1d:02:b9:66:8c:f7:22:
ad:63:fb:17:fe:49:a4:05:2c:b4:a6:2d:03:7f:c4:
a8:83:3e:4c:50:20:5b:70:b4:98:4d:3b:53:27:b9:
30:a7:f3:39:0e:3c:39:d5:7a:c1:2f:dc:db:eb:f9:
8a:9d:4d:f6:b5:5c:c4:58:6c:f2:e1:38:4a:0f:b0:
6e:c6:69:88:70:73:ec:42:7c:dd:4f:14:ad:d6:aa:
c0:60:a5:35:c3:be:24:30:c9:0c:2f:25:66:e3:52:
2f:94:0a:f4:eb:92:c8:23:e8:33:6c:4c:0b:0c:d9:
30:58:66:4c:2e:d8:3e:f0:72:cd:c7:ee:53:10:49:
e1:b8:0f:99:47:ee:7a:59:a9:43:46:7f:54:45:21:
12:f8:3c:3e:17:b4:2c:95:92:4b:ec:32:57:65:24:
00:dd:e0:98:7d:f2:c9:84:b6:1d:32:26:51:55:b6:
6d:99:3d:46:d0:c7:5d:0b:f9:44:2a:a7:ab:ae:c6:
75:57:b5:bd:0c:38:f3:1f:e0:9a:fd:42:5a:77:ee:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D1:86:62:15:11:CF:BF:89:10:93:49:CA:02:BE:B9:F0:4A:3B:9E
X509v3 Authority Key Identifier:
keyid:B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:ea:d3:41:34:c9:10:e3:c4:44:95:1d:65:7e:ef:95:90:d5:
5f:95:12:ef:fe:8b:bd:76:aa:23:5a:54:f1:66:8d:26:cf:f1:
63:31:76:d5:4d:05:8e:11:bd:e8:ec:fc:89:4a:7d:42:f2:d0:
58:ae:b0:72:89:af:fe:02:9a:6d:18:df:0a:7f:9e:92:da:4d:
83:f4:ce:c1:be:ed:3b:90:c4:b1:ae:ed:10:e7:eb:f7:fb:eb:
b8:dc:1a:73:c0:7b:fc:ab:cc:04:c7:e9:cb:bd:7a:6c:5c:e3:
f7:8d:c2:16:ad:93:22:32:1d:df:f5:ff:10:1f:31:f3:53:6b:
aa:cd:4d:ba:a6:24:8e:36:5c:68:86:58:e1:c9:dc:0d:3d:08:
ea:dc:84:cc:b2:f1:7e:c3:22:5c:90:63:0b:47:3a:51:b6:98:
89:18:7e:5e:47:2b:f7:fd:76:30:29:0a:7c:a2:81:49:d0:9e:
c6:ab:05:3e:32:f3:82:43:1f:e6:7e:b4:dc:51:04:71:2f:b1:
c5:44:e5:06:24:2a:38:ff:09:dd:06:16:b9:ad:47:7b:21:8b:
f2:c1:5c:3b:6b:d8:f6:fe:2d:64:2d:28:b8:08:ea:dc:3f:55:
91:52:37:42:9a:bc:69:54:f4:c3:96:ad:fe:4f:68:1a:d7:b7:
78:9c:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:57:57 2026 by rpki-client