
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json)
Hash identifier: UBfTVBSaCryfGfoMbCKRhcvYOuAhenSlR/EqPCEP6VI=
Subject key identifier: EC:8B:14:EB:0A:44:68:F2:BC:25:13:2A:3D:17:73:E4:77:E3:02:5A
Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA
Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
Manifest number: ED
Signing time: Sun 19 Apr 2026 06:03:26 +0000
Manifest this update: Sun 19 Apr 2026 06:03:26 +0000
Manifest next update: Sun 26 Apr 2026 06:03:26 +0000
Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: /I0NBlmrRZfddXuGLa3PI87QvkR1tt2F0SFDYtfBcyw=)
2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: VY1rUPr6EXTZh6NWaqpR1v2JRKFtMHVjZuzu+EK7FeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl
rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA
Validity
Not Before: Apr 19 06:03:26 2026 GMT
Not After : Apr 26 06:03:26 2026 GMT
Subject: CN=69e4702e-6557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:95:5e:ec:7f:bf:d0:14:e7:74:f9:39:1b:
d3:20:65:e1:d8:36:41:0f:6b:ee:df:87:cf:2b:ad:
f3:b4:81:13:f8:b8:e4:be:1e:a3:66:5c:97:0e:08:
86:77:50:02:8e:40:11:dd:6f:ac:5e:66:94:65:bb:
4f:fd:e5:9c:35:14:ca:b2:6c:4f:1a:81:86:a0:fb:
3c:f8:44:fe:ca:83:dd:83:36:7b:8a:ef:75:bb:c1:
40:a4:df:d8:83:58:3e:51:67:89:ed:50:2e:84:ed:
35:25:a2:84:21:95:e1:2d:ce:45:b8:b1:1a:e7:d0:
5e:be:2f:63:1d:d6:e2:26:c9:df:aa:25:7d:fd:ab:
3b:23:03:99:27:61:35:15:63:8e:8f:23:88:6a:56:
fd:56:28:cb:af:73:d1:11:28:2e:7b:e0:08:bb:04:
29:9b:59:36:2b:ba:ed:a0:be:56:5b:8f:23:f0:27:
58:28:ae:ae:d8:c3:29:c7:7d:2c:20:89:07:9f:0d:
c5:48:6e:a5:84:fd:2f:9f:b4:53:6e:d8:c9:e2:76:
0e:23:c8:14:a1:ff:dd:a1:8d:10:22:0b:f8:bd:f0:
4b:7f:71:b5:53:18:32:af:d4:92:a7:c1:d2:d6:5a:
0c:a8:8f:89:2d:95:9e:ab:36:0f:ec:47:92:c6:81:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8B:14:EB:0A:44:68:F2:BC:25:13:2A:3D:17:73:E4:77:E3:02:5A
X509v3 Authority Key Identifier:
keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:77:48:b9:39:f0:21:2e:a1:b2:83:bf:32:1a:ab:92:06:57:
34:05:4c:12:0f:a8:02:8b:3c:00:dd:b7:81:6d:31:d2:0d:7a:
64:c6:93:f4:05:7a:8e:65:f5:b0:86:cb:20:99:1a:f8:d7:62:
fa:fc:38:fc:00:a7:7b:71:5b:24:72:c9:65:fa:9d:36:19:88:
a0:76:53:09:61:32:8a:fe:de:b7:37:e1:03:39:9d:36:5e:4e:
c9:ee:22:1a:78:c0:3b:4d:2c:23:18:28:9b:85:46:92:b1:86:
00:b7:be:4b:06:03:4e:0f:83:0e:c0:23:3e:bf:65:91:d4:bf:
04:f6:a4:b1:a2:fe:f8:17:e6:fc:28:b4:1f:5c:f5:7f:5e:ba:
57:90:31:f7:83:e6:2c:7f:76:f5:04:d6:e0:c0:31:43:fd:5b:
11:37:9f:54:32:7d:9b:31:d6:f2:b4:61:ad:62:c8:07:fe:28:
c1:e5:62:e3:4b:a5:ad:80:25:92:e3:33:ee:b4:dc:26:05:99:
6c:0d:7e:0d:28:5f:1f:fa:39:c4:c9:65:01:ce:cc:a3:6c:1f:
6d:d6:c3:11:ce:4f:d2:0a:c3:9b:07:93:91:b9:1e:ad:81:fe:
90:a4:90:27:a1:84:75:3f:b6:1b:f7:fa:64:c8:8c:e3:f3:c7:
88:cb:76:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:31 2026 by rpki-client