
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
File: SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json)
Hash identifier: 5Zprfd1PnMw8cs1vrGAAclFfJnkfWAt+Q31lXrGkhsg=
Subject key identifier: EC:A0:90:10:FA:75:DD:C0:64:C0:B6:10:1E:79:4A:B8:E0:96:AF:11
Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
Certificate issuer: /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
Manifest number: 01E7
Signing time: Sun 01 Mar 2026 04:05:08 +0000
Manifest this update: Sun 01 Mar 2026 04:05:08 +0000
Manifest next update: Sun 08 Mar 2026 04:05:08 +0000
Files and hashes: 1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: UbwGak9lX4QFKNe4m8mE3KkDuDAeWzp1qBV5IAS2EFY=)
2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: EJtO7SCnq7WD6CVqUE1wDTBTGe53mImtDfushaYOSys=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Validity
Not Before: Mar 1 04:05:08 2026 GMT
Not After : Mar 8 04:05:08 2026 GMT
Subject: CN=69a3baf4-6db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:52:e7:29:3a:14:92:a8:2d:56:d0:5a:aa:13:
95:ef:89:bc:99:57:52:82:62:ea:a3:ad:e4:f7:f1:
b5:61:48:ac:26:0b:7b:b5:a0:f6:79:8d:3a:77:c4:
30:fe:96:bb:5f:6d:7d:d7:bc:1a:8d:f0:18:5b:94:
bc:cc:31:a3:63:88:b7:49:9a:00:a1:2c:47:89:10:
0f:ca:3c:08:c2:80:b9:db:ad:62:8b:e4:4e:df:a6:
89:52:9e:f7:65:6a:17:90:1a:cc:18:20:23:44:a1:
80:2a:20:97:fc:83:fc:21:35:b6:fc:60:9f:cd:76:
e4:80:cb:67:f7:a8:28:88:21:26:2a:42:3c:54:2b:
16:d0:f0:ea:94:cf:49:8c:e0:78:8b:97:5b:08:e7:
ae:e8:fd:53:a8:5d:8c:55:90:72:aa:79:58:90:1a:
c8:c4:5f:28:ed:99:7c:f9:9b:ed:58:c3:7f:43:58:
06:8b:1b:aa:67:8f:80:84:00:95:b9:b8:f0:ca:ee:
10:00:1e:5f:8a:51:f0:63:ce:d4:f9:a0:80:78:b8:
31:08:43:88:c6:04:0f:52:78:0c:42:35:cb:10:96:
85:e3:d5:4d:54:ae:f7:86:a1:72:36:88:40:f3:79:
45:a2:94:57:f3:b2:8c:39:49:c0:91:24:4f:6b:63:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A0:90:10:FA:75:DD:C0:64:C0:B6:10:1E:79:4A:B8:E0:96:AF:11
X509v3 Authority Key Identifier:
keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bd:47:09:66:0f:8c:e5:08:5e:92:2e:61:85:7a:42:42:76:
fc:ec:73:30:39:65:d6:3c:7d:3f:71:96:99:fe:34:ba:ca:6e:
52:a3:eb:37:b4:0c:d3:03:d8:ef:21:67:a6:4f:20:f4:e4:c6:
bd:c7:e4:dc:c9:e8:6a:c6:7a:f7:62:a4:b0:d1:c3:48:5e:eb:
d5:ff:1c:2d:d7:38:4b:9b:0b:f1:e6:a0:df:9c:f0:29:74:a2:
e8:dd:64:65:27:92:e2:5d:0b:c1:1a:93:b3:e0:09:37:5e:3a:
90:7e:4c:82:4c:ff:26:11:77:a9:b0:b5:c5:b3:6c:89:4e:87:
dd:02:45:36:8d:52:bf:0f:b9:ee:27:28:08:4b:42:92:65:e6:
14:f1:77:7d:98:68:89:8e:f9:d5:45:76:91:3c:b5:90:b9:74:
f8:49:2f:fb:3a:53:a0:fb:f4:f0:77:d8:86:d9:37:ef:12:01:
c3:7c:78:ed:1c:aa:af:14:d6:0b:8b:80:6f:b4:c4:16:05:c6:
28:15:d6:e6:a0:bd:7a:b2:bb:3b:f9:31:e7:de:4a:64:f9:f3:
64:95:d6:ba:f5:1c:99:1e:aa:61:be:b5:71:ae:c3:d4:91:91:
7c:c7:82:6d:85:e3:7b:01:e6:05:4b:65:0c:17:a8:75:10:df:
cb:e8:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:44 2026 by rpki-client