
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json)
Hash identifier: UfdQ6ghT8s79eOldJxC8cogOPpWSB+RNZNu7EClvR88=
Subject key identifier: B6:F8:47:8A:78:A3:5F:0B:17:DF:2B:18:E3:F0:38:A3:99:9C:E1:5E
Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Certificate serial: 037A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
Manifest number: 0375
Signing time: Fri 17 Apr 2026 00:43:42 +0000
Manifest this update: Fri 17 Apr 2026 00:43:41 +0000
Manifest next update: Fri 24 Apr 2026 00:43:41 +0000
Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: znA2fXr4Bm4FDuyXo3cyeLMtFWlmZcCLXA8uMNdqO58=)
2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: 2tH0iHpk0080/Pw9Odz5B4aeCdeThce6H2quPYs0FXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Validity
Not Before: Apr 17 00:43:41 2026 GMT
Not After : Apr 24 00:43:41 2026 GMT
Subject: CN=69e1823e-cedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:16:55:fd:9b:5a:70:a8:25:1d:f0:e6:04:41:
3f:a6:dc:f4:cf:4f:42:1c:e3:a4:49:1a:8a:7f:b4:
c1:e3:de:32:77:f3:58:30:a7:66:23:db:6d:8f:2e:
8c:ca:2a:eb:f8:11:04:fd:1a:ad:f6:cc:15:c4:b3:
1b:ec:32:bf:d9:05:a8:83:b1:8a:74:77:26:2b:13:
0e:11:81:f6:9b:3b:5d:63:9f:1b:ac:e9:cd:95:f2:
31:a3:ab:12:89:ed:40:a4:c8:6d:eb:b4:0b:09:49:
c6:41:d8:8e:4b:3d:04:c2:ee:d8:c0:22:b8:67:05:
04:04:e9:20:e6:b6:77:84:fe:df:db:45:d4:9a:d9:
c6:a0:84:88:77:c7:fb:6c:ee:80:65:92:17:4c:d0:
8e:ae:ee:a4:85:35:56:3c:a5:46:a3:cc:db:6f:15:
5c:e5:1c:35:06:78:85:54:62:cc:da:ac:6f:ec:31:
ae:2e:e5:b0:7a:97:07:05:06:2f:7b:05:27:37:83:
de:44:8b:05:aa:d5:49:80:cd:14:74:b8:0c:56:93:
96:ad:b4:b8:1e:55:b9:2a:8b:af:45:29:f6:0f:33:
93:2d:0f:86:6b:c4:91:57:4d:32:1c:33:c4:68:45:
02:ee:2e:52:1f:03:9d:5d:ec:7a:5d:33:bb:1b:09:
75:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F8:47:8A:78:A3:5F:0B:17:DF:2B:18:E3:F0:38:A3:99:9C:E1:5E
X509v3 Authority Key Identifier:
keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5a:70:e5:36:bf:95:c3:2f:a6:dc:19:31:47:20:cf:d4:3b:
fe:e0:19:bc:f9:ea:64:b4:f8:ba:f0:a5:51:bd:bd:22:67:8a:
e1:df:c3:78:84:6c:32:12:34:ee:0a:8e:15:b3:88:1b:71:bf:
5c:40:7a:b4:c8:24:0f:75:40:c4:c0:1c:fb:0c:57:24:53:46:
96:64:6a:9c:43:31:e6:cd:aa:d3:4b:3f:39:9f:af:1c:c2:f7:
e0:1e:ef:ef:bb:16:e7:cf:8d:1e:a3:a4:42:81:33:93:8e:79:
64:a8:15:39:b7:d7:28:85:41:a2:32:d5:c2:84:8d:bd:c6:50:
1a:9c:9f:49:0e:63:8d:66:54:ff:55:cc:46:0c:e7:c7:5c:37:
a4:6e:35:d8:b7:b8:fa:a3:4f:98:7b:7d:d7:a5:1b:7b:00:60:
a0:5b:bf:16:08:05:0d:ee:9f:92:0e:d0:54:0f:a5:e0:0d:be:
0e:49:e2:76:89:29:de:7f:50:2d:48:55:35:03:09:fc:89:4d:
1e:ba:2a:4c:6e:df:7f:27:7d:97:35:bf:46:a1:ad:c9:39:1a:
8c:55:d0:3f:1f:58:f3:68:55:a5:89:29:88:b1:b9:10:3b:72:
89:7b:19:c5:dd:16:d4:08:bd:c1:59:ce:be:d9:2b:3e:a9:9c:
d0:31:65:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB
Q0M2Mjk0NTcwHhcNMjYwNDE3MDA0MzQxWhcNMjYwNDI0MDA0MzQxWjAYMRYwFAYD
VQQDEw02OWUxODIzZS1jZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5RZV/ZtacKglHfDmBEE/ptz0z09CHOOkSRqKf7TB494yd/NYMKdmI9ttjy6M
yirr+BEE/Rqt9swVxLMb7DK/2QWog7GKdHcmKxMOEYH2mztdY58brOnNlfIxo6sS
ie1ApMht67QLCUnGQdiOSz0Ewu7YwCK4ZwUEBOkg5rZ3hP7f20XUmtnGoISId8f7
bO6AZZIXTNCOru6khTVWPKVGo8zbbxVc5Rw1BniFVGLM2qxv7DGuLuWwepcHBQYv
ewUnN4PeRIsFqtVJgM0UdLgMVpOWrbS4HlW5KouvRSn2DzOTLQ+Ga8SRV00yHDPE
aEUC7i5SHwOdXex6XTO7Gwl12wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLb4R4p4
o18LF98rGOPwOKOZnOFeMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC
MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB
TUFFQUZPWTE0N2VzeGlsRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf1pw5Ta/lcMvptwZMUcgz9Q7/uAZvPnqZLT4uvClUb29ImeK4d/DeIRsMhI0
7gqOFbOIG3G/XEB6tMgkD3VAxMAc+wxXJFNGlmRqnEMx5s2q00s/OZ+vHML34B7v
77sW58+NHqOkQoEzk455ZKgVObfXKIVBojLVwoSNvcZQGpyfSQ5jjWZU/1XMRgzn
x1w3pG412Le4+qNPmHt916UbewBgoFu/FggFDe6fkg7QVA+l4A2+Dknidokp3n9Q
LUhVNQMJ/IlNHroqTG7ffyd9lzW/RqGtyTkajFXQPx9Y82hVpYkpiLG5EDtyiXsZ
xd0W1Ai9wVnOvtkrPqmc0DFl4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:38 2026 by rpki-client