
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json)
Hash identifier: H8Fvw2NwdsyDBTrpDmvMeuz0tooSnkr6IVbpP3qCuTc=
Subject key identifier: 9A:EA:CA:D5:44:C2:41:D5:41:2A:C7:A8:91:F5:20:C7:FD:80:FD:5A
Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Certificate serial: 035F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
Manifest number: 035B
Signing time: Sun 01 Mar 2026 01:44:40 +0000
Manifest this update: Sun 01 Mar 2026 01:44:39 +0000
Manifest next update: Sun 08 Mar 2026 01:44:39 +0000
Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: 4EUbHgjaPejSPyrawTkybSHSWa364diR6uBxzza3Abg=)
2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: zp7diYZyS1B16dfR5MTFlL1sXr/xLNNAHhoA9yGKRIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863 (0x35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Validity
Not Before: Mar 1 01:44:39 2026 GMT
Not After : Mar 8 01:44:39 2026 GMT
Subject: CN=69a39a07-4cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:48:c2:c6:53:5d:57:9d:2b:c8:67:7a:a8:
fb:53:49:67:21:f6:b1:5e:ac:80:95:89:d9:32:97:
1a:53:83:26:f3:39:18:7e:2f:88:1a:d3:f9:b1:a3:
58:8b:1f:af:86:f5:36:23:ba:df:11:b3:6b:60:5b:
48:9a:19:a1:6e:0b:8c:0c:85:d9:81:4c:b0:b1:e6:
e3:f4:04:fb:0a:ba:9a:fc:dc:7d:69:48:71:f5:25:
28:a6:73:23:68:28:a6:cc:55:31:b6:94:98:8e:ca:
c6:82:cc:d4:ad:fd:b5:f3:29:d6:8e:17:5f:07:b9:
9a:4c:4a:f4:0f:9e:ec:31:66:9b:2a:c7:49:ae:d8:
55:66:a4:4a:d1:8d:8b:39:c9:1d:c0:76:de:59:d9:
b9:f3:14:6f:8b:ad:a5:0e:ac:34:04:23:22:c8:f2:
7c:50:f0:30:96:12:ec:c9:d6:4b:59:b5:51:38:4b:
9e:6c:cd:c0:33:51:93:af:08:bc:8c:cf:83:eb:a6:
a8:d3:c6:36:8b:aa:5f:9e:10:58:3a:20:93:6b:97:
03:f7:34:dc:8f:c8:c2:9d:2d:6b:01:da:42:eb:d5:
33:74:3b:bc:fd:a8:15:9a:95:8d:4b:c3:9f:a5:a5:
1d:6d:19:07:c6:13:23:54:ac:a3:7a:0e:60:93:aa:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EA:CA:D5:44:C2:41:D5:41:2A:C7:A8:91:F5:20:C7:FD:80:FD:5A
X509v3 Authority Key Identifier:
keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:09:6d:20:99:c1:03:fe:f4:60:3b:1a:11:59:62:c4:7e:e2:
07:a5:fd:3b:6d:f2:e2:f4:39:0a:fd:dc:d4:3d:3f:0b:ec:9a:
db:f5:5d:a7:17:1e:01:7d:b9:48:f0:79:c5:dd:38:f9:16:7d:
82:13:42:0b:98:b2:a9:9a:68:c1:65:72:4d:e4:a4:fd:51:e0:
64:47:b4:fb:3a:4a:e3:4a:ce:41:a8:25:2b:db:a6:ad:0d:f8:
8e:dd:ff:3e:ba:90:28:7b:ef:53:72:01:f0:80:23:f8:2c:b0:
61:c4:53:e3:57:4e:86:aa:93:b3:ae:c8:5e:2d:de:8f:19:66:
d7:d0:83:04:9b:30:64:6a:89:ac:75:4d:19:3b:3e:01:d5:9c:
b8:9e:d0:8b:03:8d:2a:b1:ee:b1:49:2c:ef:fb:4e:3f:b1:5c:
63:a0:49:36:f6:72:c7:60:f8:bf:81:04:b8:98:ee:59:76:c6:
ac:0c:e7:57:b6:b9:a1:73:47:a4:f2:5f:33:8e:09:00:5c:c4:
31:cf:e3:c4:be:f9:3b:9f:78:0f:81:81:dd:d6:89:14:95:75:
80:cb:6e:e9:d4:8f:7e:c3:0f:d5:d6:a8:0e:a8:7b:cf:0b:36:
82:c4:0d:66:b8:e2:4f:61:7a:ab:af:ba:eb:b1:38:46:69:60:
53:70:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:51 2026 by rpki-client