
$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json)
Hash identifier: q2jVu0SiHzXmzBXyzBC8PFSMySX86X0nYj5TiapjxSY=
Subject key identifier: A1:17:8F:1C:38:A8:EE:57:32:1D:7C:23:70:B6:6D:D9:52:C4:D2:A9
Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF
Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
Manifest number: 01C6
Signing time: Sun 01 Mar 2026 04:32:09 +0000
Manifest this update: Sun 01 Mar 2026 04:32:08 +0000
Manifest next update: Sun 08 Mar 2026 04:32:08 +0000
Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: ec/3inNsqBW7UyA8mel6gZ+jaKcpqMSkRTczVFzYgEw=)
2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: 1AC56+KqoXmIdoXxTwj6Vr1818DLnFN433yaIdYEMfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl
rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
Validity
Not Before: Mar 1 04:32:08 2026 GMT
Not After : Mar 8 04:32:08 2026 GMT
Subject: CN=69a3c148-2ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:29:d7:05:70:c3:21:65:10:c8:30:45:ef:
c1:ca:a5:4f:bb:bd:03:87:48:11:71:b4:0c:8a:b9:
83:8a:c0:f0:69:b1:25:b1:16:44:fc:bc:fd:b3:cc:
6e:61:99:14:ab:95:88:c4:46:96:45:97:08:53:c8:
94:57:ae:77:d9:63:f8:fe:c4:ee:da:68:ef:f6:5a:
b1:78:a7:4c:b6:40:98:41:cb:c8:4d:44:ac:fe:0a:
a6:6b:f7:23:f3:a8:c4:59:8a:0a:7a:ad:d2:45:dd:
40:08:37:d2:72:6b:f3:19:08:a3:3a:61:c5:70:1e:
ba:6a:5d:ad:0c:6b:83:f4:2b:5e:ac:54:d9:63:be:
71:63:3d:60:b4:f1:a8:63:9f:db:87:73:fa:d2:e2:
e8:44:83:9d:72:d4:87:4a:f9:26:79:1d:a3:f8:be:
05:90:3b:70:78:4e:bc:76:9a:18:4e:35:32:32:7d:
31:00:23:fd:6f:91:ac:78:0e:d3:63:af:c0:8e:ca:
40:22:26:22:93:6b:16:89:72:cf:ef:f6:a0:f8:5e:
22:fe:04:fc:8e:69:90:44:72:ec:2a:2b:a2:b0:d8:
86:9b:48:91:0d:8d:31:c4:a2:21:33:f1:63:85:69:
ac:61:b8:81:68:f8:d0:94:84:c5:61:88:29:9f:92:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:17:8F:1C:38:A8:EE:57:32:1D:7C:23:70:B6:6D:D9:52:C4:D2:A9
X509v3 Authority Key Identifier:
keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:2b:17:14:d2:45:9d:a9:84:10:86:1c:88:75:52:e3:2b:73:
a9:55:3f:31:2e:17:55:b5:9e:53:02:74:ea:06:1c:c8:bb:f2:
65:e9:db:39:65:b5:e8:78:f6:27:67:9e:10:7b:18:ee:22:35:
3c:6d:ab:c5:2f:03:48:b1:90:35:7a:e5:d9:ad:8b:d7:31:44:
71:f2:d4:99:90:9a:84:a4:12:d9:5c:15:fa:cf:0e:69:57:24:
3d:ff:20:00:6f:fe:7f:09:88:2a:46:70:1c:fc:d8:cb:89:0e:
e5:09:06:42:18:42:33:7f:51:ed:ec:c7:2d:0a:81:22:c7:33:
49:ad:bd:4e:6f:97:8c:94:14:ed:a1:e4:65:54:33:3b:32:5f:
87:c0:c0:e2:2b:db:58:ab:86:8f:b2:d6:2b:b3:c3:f6:5e:96:
02:1f:2b:46:16:1b:1a:2f:97:39:4e:19:38:21:5e:7b:1e:3c:
88:23:81:db:93:c6:89:a5:f8:f5:0d:c3:f2:a1:62:ac:5e:40:
a7:0f:a1:fd:78:ee:78:31:81:46:eb:b9:5e:99:59:bc:19:97:
f8:af:24:a9:50:bc:f4:d6:d1:98:d1:fd:6a:61:c1:fd:3c:42:
d2:d5:10:77:89:1c:a5:2d:bf:be:4e:9a:ff:78:f5:b6:6a:1b:
f0:88:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:21 2026 by rpki-client