
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json)
Hash identifier: mguLznS1j4AokZ39d2ygIQKzUPp9LPHMNck3Q1HiyBM=
Subject key identifier: 9F:61:F3:42:64:60:72:84:D4:E4:47:D2:0B:D7:6E:48:8F:19:C4:90
Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Certificate serial: 059A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
Manifest number: 058B
Signing time: Fri 02 Oct 2026 23:34:17 +0000
Manifest this update: Fri 02 Oct 2026 23:34:16 +0000
Manifest next update: Fri 09 Oct 2026 23:34:16 +0000
Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: RwnY/pVEweVTCnf8uxNxb+sS9u8x/8XcvMB+3LgQEWw=)
2: 34788E285FD711F0AE80057FC4F9AE02.roa (hash: 2VF4ZBcYU1NgumYKCnjL8hY4a3QKesS7mGAqok92V4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl
rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1434 (0x59a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Validity
Not Before: Oct 2 23:34:16 2026 GMT
Not After : Oct 9 23:34:16 2026 GMT
Subject: CN=6ac03f78-4a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:d2:a5:de:97:30:c8:ff:c3:d1:7f:cb:74:
33:ec:13:b3:f9:97:06:17:1e:24:12:66:29:49:aa:
2b:5b:53:e3:d0:64:25:b4:81:3c:14:48:99:e2:2f:
c8:ab:4b:a5:02:69:5c:37:51:35:d7:5c:be:36:14:
d9:15:15:12:ef:52:9e:58:4d:2f:32:51:23:56:90:
12:6c:a5:ba:e2:82:5e:c2:58:55:54:67:6d:ba:2f:
89:da:4e:c6:9d:9d:7a:a4:fa:bf:bd:06:1c:8a:65:
e9:1d:c2:4a:27:bb:bc:5b:71:39:47:5a:a9:ea:fe:
0a:2e:25:32:3f:52:fc:d5:37:b5:68:7a:07:e8:90:
5f:82:34:b3:28:24:63:3a:20:9b:03:16:c3:e8:4b:
73:62:17:d6:d7:30:11:54:b4:f7:5c:af:40:24:eb:
d4:84:bf:c5:71:9f:0d:b0:aa:4c:2c:6d:79:13:87:
b8:8f:33:ed:fd:57:7c:2c:fd:4b:b0:87:14:cd:2e:
51:1c:91:64:2c:ec:87:57:74:89:f9:fd:0d:62:ef:
3c:e0:0b:75:91:8b:4b:17:95:60:1f:16:3f:c8:f6:
3f:93:06:f2:d4:ed:c2:ea:87:59:02:f8:64:dc:0d:
cb:e4:e8:e1:24:fc:eb:89:27:b7:29:e4:e4:7c:95:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:61:F3:42:64:60:72:84:D4:E4:47:D2:0B:D7:6E:48:8F:19:C4:90
X509v3 Authority Key Identifier:
keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:b5:0e:4a:71:11:c6:3c:15:cf:5c:4a:5d:e9:16:b2:27:58:
8a:00:93:63:74:1b:2a:96:be:2a:8d:b3:e0:2f:e0:53:84:42:
96:ad:69:65:84:91:8e:74:94:40:64:36:4f:86:f2:08:4b:62:
df:44:0a:ca:34:a4:95:06:8f:1c:a8:25:1d:cd:e7:8e:fa:67:
a7:2c:f3:45:54:2a:8c:78:08:bf:45:2b:10:e7:33:ba:1c:ee:
5b:1d:3b:b2:51:b4:8c:a1:cb:7e:41:81:96:1f:6b:d6:b3:bb:
64:2e:c4:aa:e0:f8:69:fd:8f:4c:cf:8e:cb:ec:74:ab:60:82:
9b:6a:3b:9d:22:48:6d:22:c4:29:ac:9d:53:be:29:77:b7:ca:
ff:4d:bf:ae:2a:3e:13:88:4d:f8:83:a9:97:db:7d:3b:bf:b5:
86:d1:31:e0:ba:86:e5:00:3f:f2:98:8d:16:95:60:da:01:b8:
c4:c8:dc:fd:66:92:e4:f3:9c:a3:ee:ad:66:b9:c0:db:dd:a1:
82:b8:2f:37:d8:98:fb:a0:20:65:c6:c0:11:84:d7:c7:19:21:
4d:82:5c:7d:a7:b6:f7:d4:96:d0:21:54:6c:40:3b:50:ef:0a:
8f:28:9e:ee:b9:fb:8c:8a:32:f6:24:97:4e:f0:36:eb:5d:8d:
3d:23:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:24:12 2026 by rpki-client