
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
File: SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json)
Hash identifier: nVkiJzRo2LtWMJX0pAcpLVXXnL6a5z1YgZMM77eRi28=
Subject key identifier: BA:AD:5E:34:5E:04:53:1F:AE:F8:C5:9A:05:80:61:D6:A7:30:3E:D1
Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
Certificate issuer: /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Certificate serial: 076E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
Manifest number: 0769
Signing time: Sat 28 Feb 2026 22:04:17 +0000
Manifest this update: Sat 28 Feb 2026 22:04:16 +0000
Manifest next update: Sat 07 Mar 2026 22:04:16 +0000
Files and hashes: 1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: sUIkFkY0YWn1u/XsSHV6ktqzi4p8PHeHC7vZEdxAeQQ=)
2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: xRXc4Qynp20VBH0uvYkKK7b4+52BnXGj7roDL8ZzWEU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Validity
Not Before: Feb 28 22:04:16 2026 GMT
Not After : Mar 7 22:04:16 2026 GMT
Subject: CN=69a36661-480d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:83:f2:7b:09:eb:8b:fe:d6:61:c0:66:c1:
b2:9c:b8:a1:6d:48:2a:b2:f4:aa:d7:45:c5:92:c1:
8b:7a:36:dd:09:85:4e:0f:27:25:fa:18:2c:e9:42:
58:14:2c:2d:63:b8:a1:91:d0:97:8e:8d:43:3c:34:
e0:af:24:8f:a7:ce:1c:a1:17:e8:40:06:64:bc:8f:
cb:b0:3c:03:ca:31:d3:6c:fb:1a:bc:1d:bf:5a:b0:
2f:be:0a:f8:30:60:5c:52:bc:d9:80:ca:51:14:13:
80:66:77:d5:a6:50:36:95:bc:47:1e:b7:47:da:59:
3f:8d:7e:62:19:c5:f2:9d:fd:3f:a2:a4:6b:d4:29:
29:11:f6:6f:ca:45:cf:36:6d:5d:6d:69:22:d2:b1:
fe:85:d0:2c:cf:69:bb:d6:12:3f:67:49:34:e6:9b:
40:22:7d:2e:7c:73:41:00:b6:84:92:20:16:aa:29:
44:b2:6e:bf:21:c8:bb:e7:38:55:76:47:7a:3a:1a:
bf:09:4a:25:1c:91:07:5c:88:3a:22:32:08:a9:78:
1c:00:79:c5:36:00:03:ca:e2:ec:e3:f6:a1:53:cf:
0f:af:67:5e:1f:3e:f9:93:7e:e9:59:4c:86:25:0d:
50:f7:34:55:db:88:2f:d6:20:13:15:2b:e5:eb:9b:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:5E:34:5E:04:53:1F:AE:F8:C5:9A:05:80:61:D6:A7:30:3E:D1
X509v3 Authority Key Identifier:
keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:5e:28:5c:33:87:f7:59:5c:d3:3a:18:d9:00:52:df:a7:98:
ac:66:d0:ab:3b:cb:40:91:90:88:d2:00:a0:d8:fc:88:05:aa:
d9:f9:79:c0:12:1c:f1:5f:7c:ed:10:2f:bc:3b:a8:08:5e:67:
a0:62:2a:36:31:a3:f0:7b:41:4c:99:ff:5a:59:ec:d5:e4:b1:
e0:b4:96:25:b6:4b:ca:a7:21:ba:8c:ee:7d:18:8f:5d:28:76:
a0:47:39:32:f9:5b:eb:92:db:a8:07:5e:5d:60:33:ee:fe:a2:
ff:96:0f:bd:6b:70:6d:6f:95:3b:1a:64:64:9b:93:30:17:96:
5f:de:c1:50:ad:c3:0d:0f:9c:aa:d8:4b:26:aa:2b:0e:e4:e7:
a0:50:2a:3a:fd:84:97:fe:12:88:fc:a7:ab:48:25:ef:b8:ee:
1b:c4:3e:d7:bb:45:ec:9b:ea:41:97:b5:40:0d:15:fe:3e:35:
d0:79:db:a2:15:62:4d:7e:1b:66:36:be:e1:db:dc:c5:b9:fe:
81:74:8b:6f:63:a5:90:29:25:5f:a7:bc:5d:79:80:f1:32:e7:
99:18:6f:bd:bb:7d:cd:1a:ea:31:fd:a7:c8:9d:0f:72:32:1f:
64:2f:9b:52:62:13:1d:dc:55:f4:76:a7:fb:97:06:73:11:ba:
cd:6a:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:41 2026 by rpki-client