
$ rpki-client -vvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
File: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft (raw, json)
Hash identifier: IpT7vljvkSjdPDm0JoQFv86CsuQJUOQFkNAWKwniCZk=
Subject key identifier: 2D:54:51:AE:5F:40:A0:24:08:53:4F:BB:5C:14:B1:47:63:31:F2:46
Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
Certificate issuer: /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
Manifest number: BB
Signing time: Thu 11 Jun 2026 09:20:45 +0000
Manifest this update: Thu 11 Jun 2026 09:20:45 +0000
Manifest next update: Thu 18 Jun 2026 09:20:45 +0000
Files and hashes: 1: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl (hash: JmgW5WsdXbKKMpGByDJ/la0Ywbay0L4C6YkhuJptE2s=)
2: 850105504F3D11F0A0960F7CC4F9AE02.roa (hash: 33GM4Ev+qxmSxYN6+COOoVbBWpx3q5s4t5+8sg62BMY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Validity
Not Before: Jun 11 09:20:45 2026 GMT
Not After : Jun 18 09:20:45 2026 GMT
Subject: CN=6a2a7ded-5290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:d4:9f:ca:d5:3f:ee:65:3a:9c:75:01:5a:
aa:be:97:5e:c1:ad:d4:c1:58:7d:fc:58:51:b8:3a:
30:d5:26:80:1a:cd:99:2a:2f:ae:ef:a8:0d:2c:be:
90:52:e3:db:74:3f:d1:8e:28:f9:0b:16:37:72:d2:
de:ce:7a:f7:7e:31:0f:93:9c:aa:1c:ac:f7:91:d1:
35:26:cb:23:81:62:bc:a4:f9:3c:f2:1c:a7:d3:6d:
af:50:73:8f:da:3d:8a:b8:3c:4e:0f:d2:ee:d3:22:
74:69:d8:3d:c5:09:62:31:73:50:42:6b:aa:c7:50:
12:72:2f:ed:ac:db:7d:e0:98:f8:52:73:37:a5:61:
e5:8d:f2:b9:aa:30:77:e9:54:c0:93:27:7b:b6:84:
5b:de:5e:3f:b5:5f:12:0c:95:96:4a:53:c8:8d:17:
8a:41:50:ae:99:32:98:65:ae:05:cd:95:ec:78:ed:
77:b5:0f:a2:22:cb:22:00:9c:9a:0e:68:2b:04:e1:
a8:1f:75:74:e3:c5:92:ec:60:7b:e9:9a:d7:2a:57:
a4:56:49:c3:14:9f:6f:a8:72:65:5b:2a:b1:55:60:
c4:ed:1d:31:2e:7a:5f:06:2c:e7:63:23:14:f4:6e:
7b:f3:80:a0:d1:44:89:60:e9:c4:f4:d2:75:88:3d:
87:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:54:51:AE:5F:40:A0:24:08:53:4F:BB:5C:14:B1:47:63:31:F2:46
X509v3 Authority Key Identifier:
keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:3b:08:be:9e:5b:ba:b0:26:9a:cc:55:1c:3a:31:61:ff:2c:
67:06:3e:ac:d3:0f:dc:af:85:86:3e:55:30:7e:d5:5f:af:27:
28:59:12:ad:b7:79:d5:bc:a3:bd:ff:ba:62:97:85:d3:28:05:
25:54:65:8c:18:c5:84:12:70:ff:1c:42:35:e7:25:b5:c9:1f:
96:f4:a4:69:9c:20:65:ec:71:a8:43:b0:ed:54:58:05:fe:92:
44:ba:35:ad:3a:8c:6c:db:69:85:98:bc:46:04:0f:91:2a:94:
a6:54:03:4c:8e:12:a2:58:78:91:3f:44:2b:17:71:d8:7c:1c:
ff:63:b8:ee:5f:1e:ed:95:24:bf:c4:89:89:6d:c8:fc:2e:6d:
a7:4d:58:8b:27:76:9b:b3:23:55:f8:7d:2d:71:da:86:17:fc:
cb:39:ab:39:ea:22:89:72:7c:5a:f1:5e:14:0d:91:6f:4f:15:
76:fe:30:1b:0b:26:b6:7e:27:3f:ce:e0:a7:04:07:d3:f8:a0:
5d:d8:e6:46:06:f2:3c:6f:28:a1:bb:1c:18:db:14:78:e2:55:
34:c5:7f:38:48:e1:10:47:bb:eb:3e:f9:71:d5:6f:af:6d:67:
2e:61:51:3d:09:34:85:d4:4b:51:0f:23:0c:d2:74:66:6f:dd:
93:ce:5b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:19 2026 by rpki-client