
$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
File: Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json)
Hash identifier: DilkPZPjafqWFffYp8K6RPsbDmpHxzjBMHsJaal3i1g=
Subject key identifier: 51:C6:8C:70:F9:87:08:C0:A1:26:D3:32:C6:B4:92:E6:66:9E:12:5B
Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
Certificate issuer: /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
Manifest number: 0108
Signing time: Wed 15 Apr 2026 05:39:57 +0000
Manifest this update: Wed 15 Apr 2026 05:39:56 +0000
Manifest next update: Wed 22 Apr 2026 05:39:56 +0000
Files and hashes: 1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: QW9/ffASA96ANqyQTSCQIuB5SHp+zfSLfRaikS79OFY=)
2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: azt0NOsf2/O8AMbeoL2qikO4x78xhwdxHjV8eUh4zBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl
rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Validity
Not Before: Apr 15 05:39:56 2026 GMT
Not After : Apr 22 05:39:56 2026 GMT
Subject: CN=69df24ac-9e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:7d:a0:ec:49:60:43:82:c3:29:03:79:2c:
66:16:fd:a9:e2:3e:3f:8b:48:bb:0f:ae:9f:bf:62:
16:ab:d5:f9:ac:b5:59:17:ec:8a:13:79:cf:49:db:
ad:32:7a:5e:a9:94:82:53:6a:84:1e:29:b3:31:ae:
6f:d6:14:c5:4c:4b:ab:9f:b7:c5:5e:a9:e8:72:f1:
e7:0d:3e:b2:82:b2:40:d3:ff:06:52:cc:87:92:4c:
ba:0a:84:2c:f8:fd:1b:1a:c4:58:f3:a4:b2:a8:75:
27:2e:16:b1:45:e7:4d:32:d0:12:57:9b:03:e3:a6:
57:cf:62:59:d0:8b:7f:2f:9f:7c:d1:5c:ab:1c:d1:
05:e5:93:4e:e9:af:c4:f9:13:ca:94:35:83:1e:48:
62:58:08:c9:d0:8a:94:33:49:69:e2:21:a3:c3:ea:
4e:48:ba:3b:d3:4d:e8:58:60:86:2d:05:26:d4:0d:
c8:bd:30:1a:97:e1:ae:6b:e7:39:1c:fc:5c:a5:8a:
3f:85:4f:e7:cc:a1:bf:b7:a2:19:09:e8:e1:2b:8b:
f0:2f:30:f5:a1:7b:a6:d3:dd:65:29:8b:55:23:d5:
b2:78:89:75:f0:e0:78:c1:07:4f:7b:70:24:ad:c1:
a1:32:8a:4f:6b:4b:58:fa:62:f1:74:ef:39:bb:34:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C6:8C:70:F9:87:08:C0:A1:26:D3:32:C6:B4:92:E6:66:9E:12:5B
X509v3 Authority Key Identifier:
keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:07:ff:cb:92:48:da:fd:e9:85:db:e0:11:61:a6:e2:73:78:
12:ea:49:67:8c:a0:47:9a:4e:01:9a:d7:72:c8:dd:fc:17:b2:
2b:3e:47:a1:d1:4b:95:5e:62:22:47:f8:d8:14:3f:51:1d:59:
d9:33:dc:7c:2a:e5:32:89:77:7f:fb:ac:39:04:33:b2:6a:37:
ad:12:98:66:fd:5c:06:e0:4f:30:9d:71:dc:66:e3:3c:07:d8:
fa:64:f5:a1:b1:ba:68:80:16:9f:a2:72:46:be:5f:7e:e9:56:
02:bb:20:cb:ff:0b:5a:e8:9c:9a:2f:fd:18:42:d4:08:01:68:
39:a7:a4:b1:f6:f0:eb:09:77:6f:bb:e3:1d:91:35:b4:25:b0:
c3:ef:ae:97:ba:6c:a7:d4:87:42:7d:3a:3e:b5:a2:55:39:c4:
da:8b:8d:1f:23:6d:58:f0:24:b6:0b:5e:72:65:e0:13:1a:cd:
4e:b1:99:64:8e:1d:b4:0f:0b:cb:77:32:39:75:c6:dd:fb:60:
3d:bf:5b:36:7b:b1:f8:c1:ad:88:53:68:e6:be:cf:42:57:56:
f0:13:e2:89:2c:b7:ee:54:ea:58:bb:f7:0d:df:55:96:50:c4:
c5:d8:ee:2a:0e:6f:39:81:f5:e6:13:78:21:7b:e1:5e:87:f2:
a1:d4:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:16:30 2026 by rpki-client