
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
File: SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft (raw, json)
Hash identifier: 0Q7FU6WfGBygcPwFEbeJgK7accT8voY6sS4KTV291as=
Subject key identifier: 22:7E:A3:5B:5E:DD:92:44:73:97:D7:4B:78:44:7A:C2:1D:F0:3A:10
Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
Certificate issuer: /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Certificate serial: 0CBF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
Manifest number: 0CB4
Signing time: Thu 16 Apr 2026 17:00:21 +0000
Manifest this update: Thu 16 Apr 2026 17:00:21 +0000
Manifest next update: Thu 23 Apr 2026 17:00:21 +0000
Files and hashes: 1: SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl (hash: YzeldTwe7k8JIt8hLPkz4Et2WqBSoI6qDXNc7vKiUNk=)
2: 16572A3CEB3511F08C2D5B303F6F56BC.roa (hash: 1y/5rrZjiZi/wou/2ExgTOGyybm/GQapVPwAdz5lbX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3263 (0xcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Validity
Not Before: Apr 16 17:00:21 2026 GMT
Not After : Apr 23 17:00:21 2026 GMT
Subject: CN=69e115a5-2639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:bb:47:3a:1c:4e:47:dc:b7:ea:31:5d:b4:
e9:20:f3:94:26:3a:46:82:57:74:a0:c4:69:f5:61:
c7:37:c5:bb:33:88:8f:91:17:7a:75:19:35:a6:7b:
ec:b6:a2:eb:7b:1a:af:ef:1d:6f:e0:b7:82:af:db:
9b:79:ae:3a:b9:56:43:71:93:3c:38:11:eb:e7:1e:
23:54:bf:4e:47:c8:1a:9f:b5:19:d5:a9:60:42:c0:
3c:2e:c3:a1:59:b4:5d:70:fa:74:86:b7:f4:f4:14:
10:4b:ba:67:cb:c6:a9:1d:60:34:a7:aa:56:ed:d1:
44:f9:da:50:bf:40:b2:7c:ba:0b:7c:9f:31:90:80:
ba:b7:c8:0d:00:7f:00:59:f4:6f:90:ec:1b:55:88:
98:dc:2b:43:2e:c4:f3:bf:cc:5d:c0:22:70:71:b5:
fe:17:74:75:dd:c2:04:85:99:99:17:43:68:6e:69:
b0:02:9c:14:a6:12:5d:9c:6a:08:4e:fb:26:c8:9a:
a4:c7:36:c0:69:55:88:3b:0e:20:38:5a:56:6c:e8:
e7:9b:df:ac:0d:92:39:09:97:0f:35:e7:e2:59:58:
80:35:d5:c3:2b:90:58:bf:98:0d:bf:d3:5b:bd:4c:
9f:99:43:69:34:bd:48:17:27:15:a6:2e:26:99:58:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:A3:5B:5E:DD:92:44:73:97:D7:4B:78:44:7A:C2:1D:F0:3A:10
X509v3 Authority Key Identifier:
keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:60:68:b1:18:37:f3:98:8b:f4:a3:88:e0:ee:3c:5a:f5:4f:
df:04:2f:79:04:df:76:3a:74:ae:f9:64:ab:0c:c7:e1:94:18:
86:e6:bb:8d:d3:18:dc:3e:5b:aa:b6:be:50:95:0a:a2:f7:2c:
76:e4:e4:de:d2:54:4a:db:b8:78:c0:68:05:c3:fb:7d:44:c0:
d1:21:a2:28:2a:62:5b:40:1b:44:24:8a:8a:63:9b:ed:8d:56:
d9:6f:2d:2a:68:01:48:72:b9:8d:59:94:d1:40:20:99:29:95:
8d:8b:b0:4c:38:1b:3f:ed:1e:65:83:d6:a3:a6:9c:5d:e1:d0:
7e:fb:34:56:ee:91:3f:a9:58:f2:25:97:1a:73:09:13:e2:ce:
c9:5b:b4:1a:7b:b0:e2:93:5b:f8:2a:e4:e4:e4:8d:d2:28:40:
b5:01:21:24:69:7e:17:04:21:48:c0:68:5a:c9:52:27:e7:a7:
91:03:63:b6:f9:5f:cc:1d:f3:9d:a9:a4:61:93:a1:65:8f:0a:
bc:8d:18:47:a6:23:b6:c4:2f:b1:39:98:e0:77:2e:28:33:10:
bb:b9:d5:5f:a8:18:3a:d6:89:55:ce:c9:19:3f:09:0d:b1:06:
87:5e:2b:d0:f2:3d:ac:5e:0f:f4:16:cb:e6:83:ea:1b:e5:89:
b9:3a:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:16 2026 by rpki-client