
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
File: SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json)
Hash identifier: EZOyNnNyCXnW2GNcE+tpOnTym5RgHueV9dIyv3O7Xtg=
Subject key identifier: DC:49:69:B8:00:F3:6A:D7:AC:43:08:A9:64:3F:02:C3:DE:6F:04:8E
Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
Certificate issuer: /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
Manifest number: 0201
Signing time: Fri 17 Apr 2026 02:48:23 +0000
Manifest this update: Fri 17 Apr 2026 02:48:22 +0000
Manifest next update: Fri 24 Apr 2026 02:48:22 +0000
Files and hashes: 1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: YdNuNOLc1qzSd8XEp72yGQT/bH0fCiLy2IwtNIOjS68=)
2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: KokSDbus0aBO0eU4DsUwFv5W4sAsc3V1iSHBb9lNujw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Validity
Not Before: Apr 17 02:48:22 2026 GMT
Not After : Apr 24 02:48:22 2026 GMT
Subject: CN=69e19f76-8959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:16:66:56:56:c9:8c:c7:f3:1e:7c:16:59:
a2:72:62:da:ee:fa:b7:4c:02:56:12:07:6b:8f:4d:
8f:df:a9:79:eb:8f:3c:56:ad:79:1e:e2:ec:c7:7f:
31:9d:02:66:d9:35:24:cd:4a:5f:b8:0b:cb:f3:6c:
c3:71:c6:8b:db:1a:40:56:c0:95:a9:8c:1d:b9:a7:
23:60:d0:63:22:3b:18:a8:50:7f:63:d9:f4:8d:ba:
79:e4:2d:5c:bc:56:e2:0f:33:59:95:3b:2a:10:de:
a9:f3:45:89:b7:65:0d:a7:6d:42:0b:9a:6e:7a:a0:
8e:b2:6b:6e:b7:68:ea:96:a8:2f:86:53:f2:42:b0:
b3:53:23:bb:6a:f9:1c:c5:3d:a8:2a:e1:55:fe:5b:
3a:6f:51:f4:46:f5:4a:f8:cb:34:5b:50:77:a7:52:
9d:82:fd:8e:3e:72:ea:6c:b4:48:4d:fe:cb:d8:3b:
ba:d5:3f:28:a9:f9:6f:a2:da:df:05:69:19:d6:53:
45:c0:8a:66:ed:c1:43:63:ed:68:e5:01:b2:39:a7:
39:4f:80:4c:06:7b:a8:34:55:c2:86:40:51:38:91:
dc:58:0f:1d:ae:b6:be:74:b5:7d:52:b8:1c:49:37:
56:c1:45:ff:23:02:b4:5f:99:a6:2a:3f:a0:be:5d:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:49:69:B8:00:F3:6A:D7:AC:43:08:A9:64:3F:02:C3:DE:6F:04:8E
X509v3 Authority Key Identifier:
keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:28:9a:f1:0a:23:a3:2b:dc:a9:f3:b1:d0:51:72:13:5f:f7:
08:ba:98:dc:c1:c8:0c:95:cb:f8:66:35:7d:b1:70:16:00:83:
28:99:d9:c1:f6:89:a9:be:49:ba:a4:4c:60:c8:ff:d3:44:36:
38:68:32:b5:32:eb:39:85:b5:8a:72:31:04:ef:f3:9e:e2:2b:
2e:2b:38:7c:53:1b:7b:de:79:0c:8a:b9:0b:28:cc:61:54:35:
d3:aa:77:2d:7c:17:07:49:d7:2a:cb:72:13:90:47:82:ca:0b:
6a:51:53:4b:c2:05:5f:35:5a:0e:66:62:ad:2a:78:53:8d:9d:
c6:45:a9:40:6a:7b:35:8f:c5:bf:46:ff:6f:57:cb:1d:f9:40:
28:8b:be:9c:ab:0e:a8:d7:3b:e9:48:67:d5:d1:a0:99:71:0b:
3b:98:e8:bc:50:07:38:83:2e:26:f1:c1:86:79:77:69:46:89:
49:ce:7b:f2:b3:8d:43:55:c4:c4:af:b4:51:f1:88:94:86:8a:
1a:b1:66:b3:88:55:ff:aa:c5:07:db:c6:13:ff:62:a8:bb:88:
f7:69:72:4a:aa:15:60:ac:52:2c:d9:fb:f5:f0:2d:b7:9e:be:
76:4e:ca:5c:34:1b:85:da:d7:4d:c9:25:70:ca:82:16:09:e3:
4b:5b:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:49 2026 by rpki-client