
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json)
Hash identifier: ZZeiyIaO+WPePJJdgYM8khW2aTBfnNE3EjREDC80Ixs=
Subject key identifier: 58:54:85:8F:AC:9A:89:D8:20:82:DC:F1:14:D4:76:65:EC:E8:03:4E
Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE
Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE
Certificate serial: 10DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
Manifest number: 10C1
Signing time: Mon 02 Mar 2026 00:37:40 +0000
Manifest this update: Mon 02 Mar 2026 00:37:38 +0000
Manifest next update: Mon 09 Mar 2026 00:37:38 +0000
Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: 50FaP84WvTFM4K0e+UrxKVsiXBpo/ObcFMkilokb8ec=)
2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: TwYATUTcZOqT2PE79Ayni601C0ew8QPNyjOGtV30Eds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl
rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4314 (0x10da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE
Validity
Not Before: Mar 2 00:37:38 2026 GMT
Not After : Mar 9 00:37:38 2026 GMT
Subject: CN=69a4dbd3-823d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:19:ae:f2:2a:b2:e5:76:96:e0:4c:ee:ea:
f2:09:8c:96:d7:b2:7f:5f:58:23:a7:92:1a:26:23:
1b:8d:e9:74:42:3a:20:7e:82:4f:be:6b:88:0e:04:
96:23:0b:14:2d:89:bd:0c:cf:0c:bf:15:28:12:6e:
a0:e1:00:d2:91:f6:f2:c1:bb:cc:7e:2f:2b:c6:7a:
1a:5c:c3:27:1b:80:f6:1e:4d:bf:7f:e7:6d:14:2a:
96:b5:9a:9a:67:80:04:bb:40:f2:71:e9:18:6d:51:
ae:69:10:6b:85:fa:6d:a8:a6:4f:df:09:26:f1:2f:
30:65:21:1e:b1:a4:49:b4:65:eb:14:46:de:cf:63:
8a:1b:3a:1b:37:1b:1c:1a:74:7c:bd:35:e8:4c:ea:
38:ae:cf:f3:2f:f0:c0:f6:ee:f0:d3:91:05:de:e7:
a3:96:c0:05:54:59:96:94:92:28:5e:60:12:fb:df:
0d:1d:d0:e0:80:5f:be:5f:5e:43:61:86:10:8f:72:
8d:5f:00:00:88:c2:9e:ab:79:e3:ad:1b:13:ec:3c:
6e:59:00:26:fd:31:6a:5b:28:c8:cd:7a:03:84:89:
23:e7:d3:7b:91:ee:17:ab:25:6f:76:4a:96:c0:9f:
bd:58:9c:d1:1c:b2:22:8d:58:f8:b0:72:6e:53:f2:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:54:85:8F:AC:9A:89:D8:20:82:DC:F1:14:D4:76:65:EC:E8:03:4E
X509v3 Authority Key Identifier:
keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:53:f7:06:88:c1:11:09:d2:bd:d7:15:a0:de:30:f9:bb:01:
02:f2:02:60:80:2d:98:eb:9a:c9:75:26:ae:d4:87:05:4f:0a:
15:99:2a:be:c9:45:03:b0:77:13:bf:49:a7:31:a1:dd:16:db:
8e:c7:cd:b9:34:b9:79:96:52:0d:86:cc:93:1c:0d:68:b9:4d:
35:c2:8d:39:54:77:68:0e:24:0d:57:18:7c:0f:ba:1d:ca:c2:
da:19:f6:6c:23:91:b0:dd:94:db:e3:26:50:6f:1c:fb:82:b5:
eb:66:3b:c2:32:d7:cc:42:6a:fd:32:1d:8b:d6:75:bb:6d:f5:
d0:67:7f:f4:eb:fe:a4:c5:35:87:bd:03:f5:7a:13:13:78:7e:
4e:94:e2:19:15:87:20:3a:72:cf:c9:12:d9:83:1d:40:a9:55:
c0:76:61:97:3b:5b:2d:f2:1b:9a:83:d7:1e:7f:66:2e:13:18:
c5:4a:ad:7a:7a:ed:45:2d:1d:ca:00:bd:08:b6:86:7a:58:e1:
a2:a6:c8:cb:ca:29:19:1c:50:25:91:84:49:b4:89:78:f0:e3:
ac:8b:1c:5a:fc:49:70:18:2e:41:17:48:42:79:bc:28:09:12:
b1:c9:f0:e3:1f:c1:14:0d:5a:48:cb:8a:a0:3b:f1:e4:f0:cc:
66:6e:2c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:30 2026 by rpki-client