
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
File: SXhNVZU957jzy_LUUeMSM8xzPUE.mft (raw, json)
Hash identifier: zLs+i4eP6ZIjnWvAgB8eNGiKo52P+QL6Mv6dzSajEuQ=
Subject key identifier: 24:0B:4B:F1:3C:57:97:AD:96:F4:D4:87:CF:2E:10:7B:B3:EF:DA:40
Authority key identifier: 49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41
Certificate issuer: /CN=A9197A55/serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
Manifest number: 19
Signing time: Sun 01 Mar 2026 10:28:25 +0000
Manifest this update: Sun 01 Mar 2026 10:28:25 +0000
Manifest next update: Sun 08 Mar 2026 10:28:25 +0000
Files and hashes: 1: SXhNVZU957jzy_LUUeMSM8xzPUE.crl (hash: ltuq7C4mRUNKAnIfRT/6jW71sZlDzR9fSMZSMKmKV7Y=)
2: 651FCE60FAAA11F098D3B5455A6F56BC.roa (hash: iAy8i/+IUXvALHt+lbXZ4grdkeaIoac6VrJzukFo08s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl
rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197A55, serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
Validity
Not Before: Mar 1 10:28:25 2026 GMT
Not After : Mar 8 10:28:25 2026 GMT
Subject: CN=69a414c9-5fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:3b:30:3e:4c:e6:26:04:66:1c:9c:8f:f1:
98:3d:c0:83:2c:1d:25:16:a2:df:4c:b7:44:ab:d0:
dd:74:7d:a2:80:61:cb:53:a4:ff:bc:b7:c5:11:0e:
78:69:77:a1:5c:15:b9:1c:b0:a9:bd:af:a0:b7:54:
5f:50:59:8e:2a:d1:84:69:36:ef:27:50:51:46:9f:
1e:3f:37:25:c7:43:ae:c0:55:42:cb:04:be:25:b6:
14:29:65:98:1c:7f:6b:ff:5a:9e:82:ee:a6:4f:d3:
68:ce:c1:25:e3:56:90:cb:2a:6f:64:de:00:e2:48:
52:dd:20:1e:5b:0d:42:cb:b3:19:dd:fb:ba:03:48:
24:c8:57:3c:95:5a:e5:ef:26:52:eb:23:68:77:a4:
2f:23:06:13:69:64:64:ae:5b:e4:30:1f:50:16:c2:
23:50:bf:e3:6d:fb:cd:cb:34:56:a8:3c:3c:de:fc:
c6:0e:02:55:3d:96:74:ee:00:32:39:f2:2c:73:94:
2e:8f:c0:3f:6d:0a:08:70:41:76:cd:05:a7:5e:66:
30:c4:a9:79:4b:90:52:97:12:f7:c9:eb:cb:d5:12:
07:9a:df:46:54:9d:80:fe:c0:b6:29:e8:95:b1:b8:
bb:b5:2f:81:00:fe:bf:9c:da:1d:c6:45:b0:42:95:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0B:4B:F1:3C:57:97:AD:96:F4:D4:87:CF:2E:10:7B:B3:EF:DA:40
X509v3 Authority Key Identifier:
keyid:49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:76:f0:f4:34:c1:a6:82:75:99:76:73:c8:32:3d:f8:9c:c6:
da:e7:9d:01:09:42:06:07:c7:50:dd:6a:bf:cc:bd:47:d3:b7:
ff:33:59:bd:6f:fa:87:9e:64:ea:8b:0c:24:09:31:4a:85:e5:
4b:2f:ec:35:f0:86:d1:5c:8e:6c:d3:b0:5a:3d:ae:f8:5b:c2:
e9:e0:38:4b:87:f2:4a:3a:08:e5:32:a0:15:97:b4:89:09:01:
2d:f4:f7:04:40:aa:83:5c:98:29:34:65:11:9f:71:95:a2:8d:
4a:d6:7f:8d:cf:af:b0:08:b7:ad:80:c7:6b:1d:a3:58:5d:cb:
f8:17:4b:d8:c9:5d:2a:c4:8a:30:68:ef:fc:3e:62:e2:4e:99:
8c:b9:7d:a9:a5:9c:69:91:33:35:c0:9e:c2:2a:33:69:c8:9a:
dc:17:11:6c:63:61:20:17:99:47:20:a5:a2:1a:1a:aa:ea:e2:
5f:8d:d0:8d:1f:b8:b6:05:b1:3c:0a:02:43:7a:44:a6:35:6d:
80:7d:b0:7a:e7:70:b6:44:f8:c4:5c:bd:34:47:e5:80:7b:a6:
b0:1b:ec:04:7d:f1:af:c3:05:2f:7a:9b:29:e9:e2:6c:6a:9b:
9b:49:74:5e:c3:c4:91:9a:d3:a7:51:92:61:a7:13:48:e5:35:
29:31:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:31 2026 by rpki-client