
$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json)
Hash identifier: 37pwMdMCcTVtkyQaUXNp0gvhq+fIx+JzADg3FZHwmxE=
Subject key identifier: B8:9B:EA:7E:EB:57:7C:C7:B0:7A:AA:21:9B:C7:98:56:A4:AF:AA:A3
Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
Manifest number: C8
Signing time: Sun 19 Apr 2026 06:31:01 +0000
Manifest this update: Sun 19 Apr 2026 06:31:00 +0000
Manifest next update: Sun 26 Apr 2026 06:31:00 +0000
Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: 8XaqNcXPEDH1hB0dx1yaL1ozVrO6NSyEJ9JrFHrkjSs=)
2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: WQx0gB4vaejrR/+XkuLctOwdLPN5sGooZHjE/arViIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Validity
Not Before: Apr 19 06:31:00 2026 GMT
Not After : Apr 26 06:31:00 2026 GMT
Subject: CN=69e476a4-b968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:f5:df:59:92:f9:67:0a:04:f9:87:b9:e2:
c5:67:90:83:77:42:d4:11:61:6d:8b:59:b8:a5:96:
2f:b8:6f:2f:4c:78:fd:12:c8:2b:9a:23:2b:fe:0c:
5b:4d:08:03:87:b3:57:ef:7e:06:23:de:83:42:b6:
82:88:17:ea:f0:7f:86:05:16:6e:34:54:4f:6c:16:
2c:9d:14:56:96:0c:95:52:7d:3a:82:a7:05:59:f5:
5c:0f:cb:65:1f:9c:27:92:5c:b5:b3:89:e8:b3:1e:
ec:ad:6b:c1:32:36:4b:d9:0d:2e:82:1e:ce:15:51:
1f:51:11:12:3a:85:81:cf:96:f1:8b:23:f7:bc:be:
7a:a9:1e:ab:35:5c:c3:bb:f8:c4:7c:6f:ab:e5:e4:
b1:9e:bb:f8:75:ce:4d:7d:a8:b9:8c:0f:f2:96:a4:
3e:28:d7:2c:b5:d1:11:5c:e1:0b:d9:15:30:62:57:
96:fb:0b:75:f0:20:2a:d5:ee:0c:f8:1f:39:8e:cb:
eb:f1:25:1a:98:e7:9b:13:63:15:f0:51:14:4d:13:
84:20:d4:48:69:be:52:2b:59:d6:2c:2b:4f:07:12:
ec:7f:47:53:82:95:86:55:ea:b0:56:82:e9:87:74:
79:ef:98:19:a7:52:79:e5:a9:80:a5:28:9c:87:6e:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:EA:7E:EB:57:7C:C7:B0:7A:AA:21:9B:C7:98:56:A4:AF:AA:A3
X509v3 Authority Key Identifier:
keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:04:55:09:5d:b6:0c:9b:9d:0a:e5:c8:cc:62:b1:f2:3d:6d:
6c:d2:8f:31:6b:bd:ef:7b:88:fa:d6:b9:f9:c9:11:38:e0:1f:
4a:2e:46:ba:b1:d3:6f:97:a3:0d:fa:3f:f5:b1:64:17:9b:48:
a7:3f:cb:aa:19:d9:24:29:09:1f:44:9b:b9:90:76:9c:34:57:
3f:29:2f:eb:7e:d6:c8:2e:6e:36:8b:4b:98:54:91:3f:2b:35:
b3:f9:74:a2:ea:f7:35:5f:79:a1:a1:78:61:44:65:63:48:ab:
6f:6d:24:78:ea:fa:6c:92:28:29:46:40:23:22:c5:c0:31:12:
3f:ba:0c:7f:57:ef:4f:23:8e:25:8e:8d:d9:58:0c:4a:ce:e0:
ba:f3:8d:12:04:07:a1:4e:79:4f:cc:b0:20:96:d5:c9:e2:94:
46:57:78:df:7c:f5:89:46:1a:d0:20:dd:83:d6:ba:02:78:f4:
41:3f:ed:38:32:70:16:18:0f:a4:cd:cd:15:2b:6b:d8:19:4d:
4a:a9:35:ee:b9:cf:54:78:06:6c:f7:2a:e5:7d:17:1c:8d:c5:
98:b8:0e:88:9c:be:1f:cb:8c:f3:02:f9:e5:04:e5:bc:5a:f5:
d7:7b:f7:c6:9b:93:ce:c0:20:00:08:42:11:20:26:f3:c9:c8:
7e:b6:c1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:22:19 2026 by rpki-client