
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
File: svBcLOw1UNLTyetRODn0egAqhy4.mft (raw, json)
Hash identifier: 5AEAOYHb6B5musAyW1+yfm0xQpr9yVoX3LMEAbuJlPc=
Subject key identifier: AB:47:7F:14:4E:A9:08:5F:7B:21:18:07:3D:26:74:00:4A:1A:7F:31
Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
Certificate issuer: /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
Certificate serial: 0455
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
Manifest number: 0448
Signing time: Mon 02 Mar 2026 00:48:56 +0000
Manifest this update: Mon 02 Mar 2026 00:48:55 +0000
Manifest next update: Mon 09 Mar 2026 00:48:55 +0000
Files and hashes: 1: svBcLOw1UNLTyetRODn0egAqhy4.crl (hash: w7e7YcmBgmeBFUC4VoPHW0Ls/rywzeiEV8viStpCWYE=)
2: C5B008F2E19211F09AA40CD1456F56BC.roa (hash: 2NhQ+J0tdb7XwVl6aEl1PBIlGSlk/UaVxAux/fvoRv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl
rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1109 (0x455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D88, serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
Validity
Not Before: Mar 2 00:48:55 2026 GMT
Not After : Mar 9 00:48:55 2026 GMT
Subject: CN=69a4de78-1e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:38:5a:38:36:01:c9:f3:99:27:97:11:35:
50:d4:75:df:35:61:fa:18:d3:2b:8b:94:56:39:ac:
02:cf:1d:91:ed:fb:9a:8d:d0:1d:fe:c5:7d:4a:70:
b3:90:44:a1:bb:d6:13:ce:70:74:3e:b9:6e:7c:99:
74:f6:61:7b:65:03:a8:a3:bc:67:67:7a:45:1b:01:
f6:1f:b2:0e:ce:cb:cf:51:6a:0a:e5:f3:ec:44:f5:
fe:73:9f:f3:3d:35:43:fb:8b:c0:1c:c8:f3:fa:df:
cc:d4:ab:91:4e:30:01:09:99:d3:5b:6a:fe:fb:b5:
94:5d:20:16:9c:43:61:58:78:1c:d2:62:47:b5:08:
47:35:e8:40:d6:70:ce:92:96:59:49:a5:74:2a:3a:
66:d9:58:a7:e4:f4:08:91:b1:30:67:54:62:94:4b:
d4:0c:18:88:1c:1b:aa:49:de:d4:23:6f:48:8f:e5:
5f:6b:74:a2:1c:04:bb:f5:bd:92:1d:b3:c2:aa:72:
12:8f:68:06:1d:31:48:a0:82:fe:db:18:bc:cf:2b:
7c:60:89:53:26:61:fc:45:b1:9e:53:99:ee:60:31:
cf:cc:c7:dd:bf:27:76:38:f6:72:c7:8f:3b:0b:84:
c2:8e:4e:f9:3a:98:91:86:4c:d0:40:c7:1b:ea:85:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:47:7F:14:4E:A9:08:5F:7B:21:18:07:3D:26:74:00:4A:1A:7F:31
X509v3 Authority Key Identifier:
keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:c2:e4:bb:88:30:4c:df:8d:a6:64:af:85:1e:08:1a:1f:50:
f4:db:ed:1c:22:e7:93:00:dc:e8:95:84:98:fb:70:f7:66:a6:
7d:e4:0c:96:49:86:69:09:d6:f1:ea:c2:29:a7:8e:1a:5a:a9:
21:6f:38:33:dc:37:5d:46:c9:f9:a8:20:71:68:96:cc:c8:8e:
87:6b:25:2e:97:96:c7:f8:10:f0:58:44:e2:35:ba:ba:cf:eb:
73:b9:d1:58:1b:c4:ac:66:a9:5c:39:92:a3:e9:81:2f:84:18:
f0:7e:5d:8a:a3:1b:b6:c0:01:16:4c:e3:ae:e7:38:1a:a3:81:
53:8e:f9:d1:20:ee:9e:3a:49:f4:6b:2d:ae:c5:ae:00:eb:62:
31:f8:2f:e7:9c:5d:b2:c7:f9:f2:27:f1:08:92:a6:4a:89:7e:
7e:79:12:db:b3:23:df:82:fe:f9:89:cd:b2:7b:81:23:1c:9d:
db:2b:61:30:9c:cf:ad:e6:d3:d7:2f:8b:0b:14:19:56:6c:5c:
7b:4e:67:85:52:54:24:fe:ba:86:a5:9c:53:73:11:87:5d:9f:
04:33:e7:66:bf:84:3d:3c:8e:90:9f:82:83:30:24:d5:b1:80:
65:f2:62:ad:78:2f:ae:62:ef:db:82:5f:ee:47:5c:82:f4:fb:
0c:1d:22:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJEODgxMTAvBgNVBAUTKEIyRjA1QzJDRUMzNTUwRDJEM0M5RUI1MTM4MzlGNDdB
MDAyQTg3MkUwHhcNMjYwMzAyMDA0ODU1WhcNMjYwMzA5MDA0ODU1WjAYMRYwFAYD
VQQDEw02OWE0ZGU3OC0xZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyc44Wjg2AcnzmSeXETVQ1HXfNWH6GNMri5RWOawCzx2R7fuajdAd/sV9SnCz
kEShu9YTznB0PrlufJl09mF7ZQOoo7xnZ3pFGwH2H7IOzsvPUWoK5fPsRPX+c5/z
PTVD+4vAHMjz+t/M1KuRTjABCZnTW2r++7WUXSAWnENhWHgc0mJHtQhHNehA1nDO
kpZZSaV0Kjpm2Vin5PQIkbEwZ1RilEvUDBiIHBuqSd7UI29Ij+Vfa3SiHAS79b2S
HbPCqnISj2gGHTFIoIL+2xi8zyt8YIlTJmH8RbGeU5nuYDHPzMfdvyd2OPZyx487
C4TCjk75OpiRhkzQQMcb6oWjZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtHfxRO
qQhfeyEYBz0mdABKGn8xMB8GA1UdIwQYMBaAFLLwXCzsNVDS08nrUTg59HoAKocu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ4OC9GMUI3RUFCQTkz
QUMxMUVDQjY3QTMxNTJDNEY5QUUwMi9zdkJjTE93MVVOTFR5ZXRST0RuMGVnQXFo
eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N2QmNMT3cxVU5MVHlldFJPRG4wZWdBcWh5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkQ4OC9GMUI3RUFCQTkzQUMxMUVDQjY3QTMxNTJDNEY5QUUwMi9zdkJjTE93MVVO
TFR5ZXRST0RuMGVnQXFoeTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABMLku4gwTN+NpmSvhR4IGh9Q9NvtHCLnkwDc6JWEmPtw92amfeQMlkmGaQnW
8erCKaeOGlqpIW84M9w3XUbJ+aggcWiWzMiOh2slLpeWx/gQ8FhE4jW6us/rc7nR
WBvErGapXDmSo+mBL4QY8H5diqMbtsABFkzjruc4GqOBU4750SDunjpJ9GstrsWu
AOtiMfgv55xdssf58ifxCJKmSol+fnkS27Mj34L++YnNsnuBIxyd2ythMJzPrebT
1y+LCxQZVmxce05nhVJUJP66hqWcU3MRh12fBDPnZr+EPTyOkJ+CgzAk1bGAZfJi
rXgvrmLv24Jf7kdcgvT7DB0iDg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:35 2026 by rpki-client