
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.mft
File: SbFjv0T6AQzCGyh9FK4jnPm5-50.mft (raw, json)
Hash identifier: qsVj08xiag+r5Zigj96vbZ++uXZR91HSLO4GAsMGBmQ=
Subject key identifier: 63:38:CD:7E:96:6C:DB:BC:A4:A0:67:52:D5:53:2B:86:AE:59:B9:4E
Authority key identifier: 49:B1:63:BF:44:FA:01:0C:C2:1B:28:7D:14:AE:23:9C:F9:B9:FB:9D
Certificate issuer: /CN=A91A06BB/serialNumber=49B163BF44FA010CC21B287D14AE239CF9B9FB9D
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbFjv0T6AQzCGyh9FK4jnPm5-50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.mft
Manifest number: 2C
Signing time: Fri 17 Apr 2026 08:25:29 +0000
Manifest this update: Fri 17 Apr 2026 08:25:28 +0000
Manifest next update: Fri 24 Apr 2026 08:25:28 +0000
Files and hashes: 1: SbFjv0T6AQzCGyh9FK4jnPm5-50.crl (hash: jRTetry34ssioftia5HKkK3dY4BzuilKq2qL7UYiNXg=)
2: 448E51A6FCE111F0BAFBF562706F56BC.roa (hash: Q/k8f4KHU9rw70gcNcv9NR2wRmt43g2EOQ3jnBc1XaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.crl
rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbFjv0T6AQzCGyh9FK4jnPm5-50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A06BB, serialNumber=49B163BF44FA010CC21B287D14AE239CF9B9FB9D
Validity
Not Before: Apr 17 08:25:28 2026 GMT
Not After : Apr 24 08:25:28 2026 GMT
Subject: CN=69e1ee79-ad98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:f8:ce:52:03:75:a2:3b:b4:db:a2:84:e0:
c7:34:c9:d2:8c:80:bf:c5:6b:83:25:03:e4:af:f8:
d9:fc:f7:f0:5c:f6:c9:16:ac:b4:a9:b2:da:58:d6:
41:8d:c2:67:30:f0:0d:da:d8:2c:d1:28:32:83:70:
13:13:e0:f2:d1:3c:88:63:9e:a6:08:6d:75:06:ed:
7d:bf:c0:04:a5:5a:c8:9c:be:4c:dc:5a:7e:92:f2:
56:b6:d7:3c:9a:b8:d7:38:3e:f0:0c:8e:7a:58:04:
13:f8:1c:2e:77:f4:c5:0e:d4:8c:31:28:8e:48:c2:
62:94:e7:92:ea:75:3e:1e:7e:cc:7d:53:4e:4e:08:
80:df:0c:76:fe:97:ad:f4:74:8b:1e:b0:03:0a:d3:
6c:ac:80:03:8c:bd:b4:db:5e:b1:4c:7c:83:29:87:
3f:d0:f1:c4:18:ef:fb:3d:0f:57:5b:05:fd:fd:a6:
25:1f:a9:73:e6:02:e7:d2:c9:f8:dc:e2:5c:d5:b9:
db:f7:13:50:ef:0f:21:65:a7:1c:6d:a5:1e:eb:23:
25:e7:56:9e:51:8d:6d:a1:e7:ec:06:88:82:60:f3:
dd:04:f7:3c:ec:9d:0c:9c:ed:a7:0f:cd:04:bf:aa:
a3:35:7f:6d:1b:10:a8:56:8e:a4:6f:b9:4b:af:c4:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:38:CD:7E:96:6C:DB:BC:A4:A0:67:52:D5:53:2B:86:AE:59:B9:4E
X509v3 Authority Key Identifier:
keyid:49:B1:63:BF:44:FA:01:0C:C2:1B:28:7D:14:AE:23:9C:F9:B9:FB:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbFjv0T6AQzCGyh9FK4jnPm5-50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:cf:fb:78:86:2d:0d:6a:1a:2d:35:3f:f7:a7:63:4c:7b:a5:
13:6c:42:d2:db:7b:4f:31:a2:db:06:5d:4c:cc:ca:0d:5e:1d:
17:96:95:c5:ab:2a:98:ce:67:38:47:80:f4:b4:f9:04:89:85:
ae:db:41:66:f2:9d:0e:d6:b0:1e:89:ca:2d:33:de:10:18:15:
f9:16:a1:5f:f4:f3:66:fd:e4:52:3f:6a:81:28:a8:62:5d:79:
cf:6e:ef:e1:0f:5b:f6:4d:02:a1:0a:d4:11:eb:2c:a4:2a:0b:
dc:3a:84:b7:6a:4e:08:dc:5e:32:65:b7:68:21:32:82:3d:f8:
a6:64:96:44:36:8a:d5:e1:37:b2:18:c1:dd:d4:76:09:0a:2a:
1a:aa:f7:5e:b5:29:b5:7b:8e:2a:84:df:97:99:be:c1:00:ab:
e1:c8:15:2f:47:3f:20:8e:c0:c9:f0:43:19:e3:4d:3b:66:87:
83:8b:b5:c3:4e:74:f1:39:1a:01:66:f8:78:e5:37:45:2b:14:
6c:34:a1:1f:bd:f2:18:13:27:a5:af:e2:01:bc:fb:51:b1:da:
c6:45:05:50:dc:4e:22:bc:c9:d6:7c:34:d3:54:71:ea:de:13:
50:b5:c1:57:f7:67:37:c7:2e:66:67:f8:17:c9:99:b3:3b:8c:
9f:2d:15:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:00 2026 by rpki-client