
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json)
Hash identifier: 0rcZXQGWkDDGqYrtyVC3DjHnt97B8BFZKxwNidDGrZs=
Subject key identifier: 51:02:5A:B3:41:08:70:C5:E5:B4:CD:62:F9:EC:2E:37:ED:D2:18:7E
Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
Manifest number: 022A
Signing time: Fri 17 Apr 2026 02:26:56 +0000
Manifest this update: Fri 17 Apr 2026 02:26:55 +0000
Manifest next update: Fri 24 Apr 2026 02:26:55 +0000
Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: zrKCJJUkta0MbLPz+Uxs1ImV+cQD0SNbXzRGBS7aZGI=)
2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: nbWrxCDFQoo/aNFlk67YAqdBIRuq49WlvoXbRE0llls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Validity
Not Before: Apr 17 02:26:55 2026 GMT
Not After : Apr 24 02:26:55 2026 GMT
Subject: CN=69e19a70-59c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:6f:4e:b8:c7:98:c1:e3:ba:81:c1:43:ea:
a1:6a:0a:af:00:42:6b:d3:45:b3:e2:dc:6c:10:6a:
2e:69:d3:12:71:68:43:9a:36:16:5b:73:0e:20:25:
e4:14:ed:3e:f8:97:91:9a:65:38:e4:bc:c8:c8:32:
c1:75:de:35:cd:02:f5:84:01:5c:0b:9b:41:5a:6d:
28:7c:1e:41:e3:84:9f:4a:01:8d:6c:7f:99:fc:a0:
69:8f:66:7f:40:6e:70:25:ff:1c:d5:fb:f1:cd:c8:
74:17:9d:84:c7:16:10:9a:c1:3d:97:fd:88:3e:08:
2e:a4:cd:b5:c8:f9:93:9c:91:fb:e9:4c:d4:dd:6d:
af:71:a2:36:86:48:33:9a:19:b3:30:67:15:17:c1:
29:68:67:24:8e:81:94:27:5d:22:7d:e4:00:87:be:
3e:b8:34:09:b8:89:2c:09:31:a6:0b:fc:17:27:49:
e8:ef:d8:08:60:45:48:40:73:9c:3e:ae:6c:76:06:
e2:1f:5f:e5:a4:6b:fd:9c:8a:ad:f6:1d:1e:da:65:
5c:6d:f2:e4:a7:9a:d4:c0:e1:11:7c:6a:7c:01:ca:
76:e3:07:ce:e0:f7:e7:15:c3:e1:de:0e:3c:fb:fb:
45:a7:6e:74:d2:43:e6:42:67:c4:97:75:f0:ba:1b:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:02:5A:B3:41:08:70:C5:E5:B4:CD:62:F9:EC:2E:37:ED:D2:18:7E
X509v3 Authority Key Identifier:
keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:92:85:38:36:d7:92:88:d2:a7:27:f3:04:7d:cb:4b:09:09:
78:5e:12:74:68:8d:70:d6:f9:db:46:86:70:22:af:44:8e:75:
6d:70:b6:03:a7:71:3a:65:30:16:7b:4f:3e:ba:de:7e:a7:aa:
88:39:bb:70:d6:37:1d:62:72:e8:38:e7:ff:26:64:8e:db:82:
8a:fe:34:d4:49:e8:c3:40:f3:17:3d:17:fe:58:5d:69:7d:f0:
a0:ba:2f:95:59:84:af:18:40:e3:09:2c:a6:e7:4c:1a:15:f9:
4e:64:3a:e5:b5:8c:72:7c:0f:aa:dc:b4:34:18:9a:ab:a8:34:
11:1a:2d:98:42:ff:17:c4:0f:7e:d6:98:d2:ca:5d:33:d7:2b:
71:38:05:f0:07:72:e0:b5:44:f0:5a:02:47:b5:27:99:22:4b:
ed:ee:c7:cb:80:cc:cf:09:66:ec:f5:f5:f3:bc:b7:8d:fc:8c:
fc:db:01:60:94:7e:d1:6f:6d:a7:2f:b0:b7:bf:93:cf:84:b3:
0e:5a:8b:2b:3a:f8:e8:db:d7:f1:de:6f:07:24:4c:e0:1d:38:
5c:f8:fa:15:08:42:0d:c3:02:24:9a:67:a0:2a:96:68:41:b4:
6f:d3:df:1c:8e:91:b6:06:ee:ae:bf:52:b5:c4:0f:23:30:ce:
a2:80:bf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:36 2026 by rpki-client