
$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
File: Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json)
Hash identifier: p+Up9s8NqNmRNnJgX9gacds9HLJUBQHT9w7Gp2zXvOo=
Subject key identifier: CB:91:6F:FF:98:2C:56:44:E2:31:8E:5A:88:84:D8:DA:BE:FD:19:12
Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
Certificate issuer: /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
Manifest number: EF
Signing time: Sun 01 Mar 2026 07:27:49 +0000
Manifest this update: Sun 01 Mar 2026 07:27:48 +0000
Manifest next update: Sun 08 Mar 2026 07:27:48 +0000
Files and hashes: 1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: ISex8L1A9NiZSxaasX0smZo1Jc+Mq449boD1V0kP9ao=)
2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: mTvWjDqRpjoE4gToiz3x8YclXADkkIN+m00HGh0rTzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl
rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Validity
Not Before: Mar 1 07:27:48 2026 GMT
Not After : Mar 8 07:27:48 2026 GMT
Subject: CN=69a3ea75-fffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:eb:99:b9:8e:a5:a7:04:14:e1:3f:58:45:
73:a1:08:f0:44:57:4c:18:db:2f:7b:84:12:bf:91:
7c:03:e2:4c:3e:7a:d5:6e:54:d0:ab:a0:ca:2a:fc:
35:d5:44:ee:9d:a6:88:01:8d:50:13:56:d0:a4:d0:
fa:a2:75:e0:73:93:85:2a:9e:6b:8d:78:4b:91:68:
52:ae:72:cb:c7:bc:e5:a1:33:7c:8c:0e:bc:45:c6:
8a:ae:d1:d3:5f:24:5a:17:9b:1b:c5:e4:5c:a5:6b:
44:0d:3a:f1:15:ec:b3:4b:d9:62:0b:32:b9:aa:78:
55:67:80:4c:f8:23:33:4d:56:92:2e:1a:52:92:24:
ba:7a:78:1a:57:80:76:a4:d7:d8:56:4d:3d:39:ca:
9c:21:00:c9:d7:0e:50:56:60:fd:ac:0e:a9:a8:a6:
6f:51:3c:f6:5e:8a:1b:4a:1b:55:f5:52:dc:22:5e:
f7:89:c2:8f:3e:15:28:24:55:2c:fa:cc:e4:d4:04:
56:42:71:8a:a6:92:71:a6:62:28:c8:88:a9:e5:fc:
76:b4:51:4c:fe:21:38:8a:d7:66:55:96:8d:69:5a:
36:7c:2b:69:2c:70:98:a5:83:a9:b5:78:70:22:02:
54:2c:94:6f:36:74:42:0c:73:e8:5a:34:66:c8:11:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:91:6F:FF:98:2C:56:44:E2:31:8E:5A:88:84:D8:DA:BE:FD:19:12
X509v3 Authority Key Identifier:
keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:01:fa:5e:6e:0f:33:91:19:78:fa:ff:eb:83:b3:85:56:7f:
3e:63:16:a6:e0:13:26:82:49:52:63:09:68:dd:15:e6:28:7e:
dc:36:86:84:6a:13:39:bf:cd:99:5b:5a:05:2f:4d:f3:b6:8c:
35:68:63:17:48:e9:78:8c:e9:2c:d4:49:9c:20:59:20:74:f9:
27:fd:90:0f:ab:cf:51:0d:d8:19:6a:35:88:2b:4e:71:fc:f9:
73:2c:38:01:2b:0f:68:0d:72:ef:cb:8b:24:d9:c0:7c:2a:fe:
4b:c0:89:7a:69:25:d2:24:f2:63:fc:45:4b:fd:1f:aa:4f:62:
6e:67:9b:49:7e:e9:33:55:ec:04:83:b9:4f:1d:66:7e:a1:e7:
16:0b:2d:72:63:39:98:25:be:4e:a2:20:a7:41:0f:3c:2c:cf:
09:19:36:f5:6d:3e:3d:23:f3:2a:3d:7e:af:dd:68:cb:99:e8:
09:be:64:1d:7d:01:5d:4a:ce:6d:cd:4b:dc:b8:39:38:f6:1d:
1b:bd:6b:b0:0e:bc:21:eb:81:18:73:38:7f:11:c6:e6:96:11:
30:c2:5c:14:31:b1:53:26:e6:85:60:69:54:62:4d:4d:56:54:
b9:b7:a5:9c:21:76:ac:b5:fe:84:11:e2:de:d8:17:ae:9e:45:
7a:8c:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:57 2026 by rpki-client