
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json)
Hash identifier: mnobZKbOAIibA3O30uJGM4vZpq52MH3AWcXTZnR8i4U=
Subject key identifier: 8D:AD:FD:FA:F6:1B:20:4D:5F:04:28:5C:0B:D0:B4:C9:30:04:2B:E1
Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Certificate serial: 0281
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
Manifest number: 027B
Signing time: Mon 21 Sep 2026 01:58:35 +0000
Manifest this update: Mon 21 Sep 2026 01:58:35 +0000
Manifest next update: Mon 28 Sep 2026 01:58:35 +0000
Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: XB7/KaXbY7S27ILAq0Nr37dnqQBm5Vgr5lCpCaW1SFo=)
2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: EfG+36SStR0WHTDyKSDlepdPiSlIwRWgDKeiF4FZPTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Validity
Not Before: Sep 21 01:58:35 2026 GMT
Not After : Sep 28 01:58:35 2026 GMT
Subject: CN=6ab08f4b-b4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:48:dd:cb:4a:68:24:0c:28:b1:fb:12:14:
84:46:f6:94:69:25:61:95:2b:ea:63:a2:ae:f2:fc:
9a:a0:e6:59:66:c4:04:49:27:df:8c:30:84:94:d8:
69:7d:2b:88:42:0a:df:54:65:9c:61:5f:e0:ba:96:
62:c2:50:d2:c0:0e:6f:d2:b4:2a:ab:17:3a:61:c9:
6a:81:b1:42:ff:7f:52:c9:5c:64:b2:f6:46:1e:df:
f4:07:c4:9a:d9:2a:7c:23:94:f2:56:da:6a:59:18:
45:cc:5a:c7:06:6c:d3:22:05:c7:be:e5:df:01:fe:
00:eb:50:d8:b1:5c:9f:20:33:02:2d:84:d9:dd:a0:
d1:5f:69:1e:cb:20:16:db:c8:47:ea:50:fe:79:85:
98:ff:68:04:72:4e:0f:06:80:16:a4:43:a9:12:d9:
6c:db:5c:1e:70:ba:df:f0:5d:46:e4:41:21:b1:cf:
0e:6a:d0:87:5e:6d:fc:73:d3:86:65:13:4a:f3:2d:
5a:7c:d3:1d:b6:cb:13:fa:21:c9:86:a9:88:57:f5:
eb:96:2a:4f:97:5f:3c:86:fd:f0:3d:df:69:b2:3e:
5d:23:5d:0f:41:f5:94:e4:e3:9c:90:59:51:86:80:
dc:09:da:7b:e0:23:52:3c:37:90:04:94:52:ea:8c:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AD:FD:FA:F6:1B:20:4D:5F:04:28:5C:0B:D0:B4:C9:30:04:2B:E1
X509v3 Authority Key Identifier:
keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:94:0e:29:c0:4d:4b:ec:10:2b:35:46:7d:85:4e:94:0e:5b:
ff:d6:8a:c4:de:7b:a9:17:05:0b:1b:17:a5:4f:09:03:d2:91:
15:72:d6:94:1b:ef:c5:75:60:e7:ee:4d:3c:03:99:53:a6:02:
3f:75:bc:98:46:9e:d7:0a:92:6d:1b:45:8c:49:4e:0c:37:1e:
f2:47:46:0f:04:ac:a8:35:9d:a0:6c:6d:47:0e:30:fd:41:f9:
4f:1f:c1:af:ff:ef:cc:6d:45:97:06:7f:f3:bf:16:8b:ad:9d:
17:0f:2f:6b:08:22:82:e2:d2:55:38:6c:e4:29:b6:16:a3:8f:
10:8a:9d:d0:5b:c0:96:6a:be:08:f4:62:67:aa:54:e8:b0:01:
fa:f6:87:19:90:6b:4e:fd:ec:c0:04:4c:fb:03:87:d2:e6:00:
77:5c:bb:cd:ce:01:68:fc:7a:f9:23:fc:91:3b:a6:e3:00:9d:
19:b5:13:4f:6d:47:c4:e3:f0:6d:b9:9a:3f:82:0d:52:31:0f:
4e:1f:c0:8a:88:92:c4:2c:1f:6f:a7:b0:70:cf:b2:cd:d4:4a:
0c:1e:6c:d7:e4:7b:d0:4f:52:67:db:6f:b6:d1:52:c4:1a:99:
20:02:b4:42:b6:06:cd:27:98:55:2f:e6:45:fc:c3:0d:8b:a9:
91:fb:a7:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQzOTYxMTAvBgNVBAUTKDQ5RDBGNDA2OTcyQTgwNUIxRTdBOUZDMjBGQjNBOUND
Qjc2NjJBQ0UwHhcNMjYwOTIxMDE1ODM1WhcNMjYwOTI4MDE1ODM1WjAYMRYwFAYD
VQQDEw02YWIwOGY0Yi1iNGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAplpI3ctKaCQMKLH7EhSERvaUaSVhlSvqY6Ku8vyaoOZZZsQESSffjDCElNhp
fSuIQgrfVGWcYV/gupZiwlDSwA5v0rQqqxc6YclqgbFC/39SyVxksvZGHt/0B8Sa
2Sp8I5TyVtpqWRhFzFrHBmzTIgXHvuXfAf4A61DYsVyfIDMCLYTZ3aDRX2keyyAW
28hH6lD+eYWY/2gEck4PBoAWpEOpEtls21wecLrf8F1G5EEhsc8OatCHXm38c9OG
ZRNK8y1afNMdtssT+iHJhqmIV/XrlipPl188hv3wPd9psj5dI10PQfWU5OOckFlR
hoDcCdp74CNSPDeQBJRS6oxXBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2t/fr2
GyBNXwQoXAvQtMkwBCvhMB8GA1UdIwQYMBaAFEnQ9AaXKoBbHnqfwg+zqcy3ZirO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDM5Ni85NUQwREY3QUVG
OUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdGc2VlcF9DRDdPcHpMZG1L
czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NkRDBCcGNxZ0ZzZWVwX0NEN09wekxkbUtzNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDM5Ni85NUQwREY3QUVGOUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdG
c2VlcF9DRDdPcHpMZG1LczQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhpQOKcBNS+wQKzVGfYVOlA5b/9aKxN57qRcFCxsXpU8JA9KRFXLWlBvvxXVg
5+5NPAOZU6YCP3W8mEae1wqSbRtFjElODDce8kdGDwSsqDWdoGxtRw4w/UH5Tx/B
r//vzG1FlwZ/878Wi62dFw8vawgiguLSVThs5Cm2FqOPEIqd0FvAlmq+CPRiZ6pU
6LAB+vaHGZBrTv3swARM+wOH0uYAd1y7zc4BaPx6+SP8kTum4wCdGbUTT21HxOPw
bbmaP4INUjEPTh/AioiSxCwfb6ewcM+yzdRKDB5s1+R70E9SZ9tvttFSxBqZIAK0
QrYGzSeYVS/mRfzDDYupkfunxQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:22:39 2026 by rpki-client