
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
File: SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft (raw, json)
Hash identifier: ba+x5pxlPncUkfpiIecXhszp+p2iYhnEkTnmPOhBC8g=
Subject key identifier: 9E:42:53:48:FA:2A:69:61:CD:90:7F:CB:6C:0D:EE:97:E7:C5:BB:02
Authority key identifier: 48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
Certificate issuer: /CN=A9146039/serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
Manifest number: 15
Signing time: Fri 17 Apr 2026 08:42:56 +0000
Manifest this update: Fri 17 Apr 2026 08:42:56 +0000
Manifest next update: Fri 24 Apr 2026 08:42:56 +0000
Files and hashes: 1: SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl (hash: 7CWJbbGPNi01qJhs+9MQbZaaMJXEqgtK8OT9j0PR/vo=)
2: D6CF9ED61D5611F1A0EA4997233D8C67.roa (hash: SsE4AcFHHC4+KSYsRKUgPuWZ9aW/dPOP3ZBl/cGum9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146039, serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Validity
Not Before: Apr 17 08:42:56 2026 GMT
Not After : Apr 24 08:42:56 2026 GMT
Subject: CN=69e1f290-1f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:c7:ba:c1:2c:ac:d2:85:86:bf:8b:70:0b:
af:53:20:35:35:ab:01:df:6b:06:8b:0a:30:b0:e0:
a1:88:00:cf:b2:1b:80:56:28:1e:f8:2f:38:4c:22:
b9:63:bd:21:f6:36:24:b6:4e:f4:ec:c6:f2:18:da:
95:a5:d6:46:b9:f4:1f:74:81:d2:4b:32:7a:55:4f:
26:21:f5:2f:56:39:ff:32:fa:c3:c2:4d:6f:0f:37:
a8:bd:84:30:8d:47:4c:68:cb:b7:9e:40:59:25:24:
54:4c:45:06:f7:fb:f5:24:19:49:ed:e8:11:82:02:
a9:b7:7a:5f:d1:09:1b:1e:69:19:52:d9:21:d4:b9:
63:36:86:0a:1a:a0:cd:b0:9c:9a:f6:58:49:fe:72:
3d:d7:d7:97:1c:40:94:12:16:69:44:57:c6:6f:8c:
ef:74:19:36:d4:f4:a5:a0:69:e3:7f:12:d2:a2:73:
24:ee:49:8c:3f:c8:20:a3:0c:6f:cd:95:d2:2e:b7:
07:9f:7d:bf:7b:18:16:0c:91:b9:21:df:5f:68:4e:
a0:70:c1:cd:5f:22:97:93:d4:ac:f2:b7:7a:2f:76:
1a:40:b1:28:c4:12:53:43:03:8a:f9:db:c0:a8:6f:
e5:22:32:89:e5:f7:30:3e:bd:7e:ad:37:08:cf:7f:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:42:53:48:FA:2A:69:61:CD:90:7F:CB:6C:0D:EE:97:E7:C5:BB:02
X509v3 Authority Key Identifier:
keyid:48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4c:93:02:fc:f0:12:d4:44:56:bb:77:e4:73:1b:c2:e5:eb:
d3:c6:95:af:01:66:60:4a:d5:0e:79:de:90:93:ef:11:3e:e6:
b5:5e:31:d7:4d:65:e1:e0:c8:b7:eb:99:03:48:ac:30:9d:fa:
e8:fc:f8:5e:0b:dc:c8:27:35:b1:56:43:29:b9:72:26:f7:d2:
16:12:f7:28:d6:1b:a4:10:90:d1:59:9a:41:d0:15:9b:08:62:
d5:ef:7b:fe:ce:1a:49:22:87:7d:75:71:26:06:1b:f9:ec:ee:
24:ba:7a:e2:1b:42:8a:f7:56:0a:14:61:8e:f3:99:6c:53:41:
51:11:ef:a3:3b:f4:84:01:b2:ad:f2:ae:fb:01:48:be:55:a7:
5f:94:94:3b:24:5b:24:0f:bc:ac:12:db:d8:c1:bd:51:cc:f4:
96:3c:4c:61:a4:7d:53:66:27:ba:6e:9c:7a:9f:f6:14:6f:3b:
dc:16:22:49:cc:1d:4c:f9:f8:30:31:cc:46:db:cf:3c:57:46:
51:27:39:b0:04:26:51:ad:eb:33:ef:64:c8:6c:0e:93:79:34:
9f:ac:9d:65:bb:fa:0c:d9:ed:53:ed:e9:d5:bc:4b:b7:f1:19:
cc:2a:94:06:d9:f0:46:fd:f5:54:2b:93:4d:a1:b8:4c:b8:f1:
0f:f8:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:54 2026 by rpki-client