
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json)
Hash identifier: i/0woPyu1hpVTTSClOtPQVsi9xhfd9BVjCT/d4jFmmI=
Subject key identifier: 4D:B9:F3:E1:97:F5:35:55:9A:CA:D0:43:EC:BE:EE:4D:28:19:50:24
Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11
Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
Manifest number: 0158
Signing time: Sun 01 Mar 2026 06:04:23 +0000
Manifest this update: Sun 01 Mar 2026 06:04:22 +0000
Manifest next update: Sun 08 Mar 2026 06:04:22 +0000
Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: GzMQgR5qDWuvoHRJFclT/DI59fm1WBzEkEXytyiD1F0=)
2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: eodiFGpIfsgXUXxslrRHT6wLB6egOaD+ezHH/eHicB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl
rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811
Validity
Not Before: Mar 1 06:04:22 2026 GMT
Not After : Mar 8 06:04:22 2026 GMT
Subject: CN=69a3d6e7-dd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:8a:77:25:78:4b:a3:58:27:22:70:3b:6e:
57:5a:e4:7a:d3:68:20:ee:39:a8:f5:91:ff:97:14:
ae:f8:2a:78:c4:e8:cb:71:ba:7c:d0:15:18:b7:f7:
b5:c1:1f:35:28:b6:66:d4:00:1c:2e:d2:17:9b:be:
39:2c:a4:97:4c:2d:66:c7:50:47:43:2e:7c:22:db:
17:a7:87:0f:62:33:82:2c:55:f6:81:c5:d4:28:63:
4a:f1:cf:d3:b7:25:36:39:6e:fa:4c:35:da:8e:2d:
30:7d:a8:e5:51:4c:b6:fd:aa:70:1e:02:09:e6:6d:
18:23:59:ea:ab:1f:e6:58:c0:9e:a6:66:ee:22:13:
cc:11:12:3b:e3:ed:61:ee:41:b3:b7:6b:2b:0f:e1:
df:3e:79:9b:05:0e:dc:a3:82:3f:24:68:37:39:aa:
41:79:ea:f8:e2:32:48:f7:e9:dd:58:38:ce:65:45:
d6:98:cd:ed:47:f8:65:e3:ad:6c:6a:05:39:35:d5:
c8:8c:a9:a4:9e:07:ca:5c:d9:9b:cc:86:4a:9a:7f:
ac:b2:c9:a4:2e:5b:f5:7d:4d:bd:8d:59:d6:7f:fe:
5b:a0:f1:d2:9b:9d:5e:d6:be:c7:45:db:05:9a:86:
35:c0:81:b7:45:bf:fd:0e:5a:60:5c:ab:48:73:ed:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:F3:E1:97:F5:35:55:9A:CA:D0:43:EC:BE:EE:4D:28:19:50:24
X509v3 Authority Key Identifier:
keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:66:b2:3f:e6:ff:b0:c8:c9:e3:7d:55:6b:7f:36:43:3b:03:
4e:84:ff:dc:5c:34:9e:b5:c2:a7:5c:cd:8f:e8:ab:cf:a5:44:
07:59:f8:10:7a:e8:20:3f:58:5e:cd:ac:72:81:9f:d0:ae:b3:
a5:4f:08:0a:6a:78:f8:82:18:e6:65:ab:80:ee:14:bc:72:42:
63:02:24:56:8b:63:84:d4:3e:c3:67:32:89:cd:8e:bf:18:05:
8e:ec:ab:1c:4c:32:d9:05:4e:16:24:06:13:4b:71:89:2a:3b:
22:7c:17:13:a2:a7:6c:c3:b4:06:f5:09:af:6b:f6:0a:a0:19:
38:71:b6:dd:83:8b:47:c2:97:a3:d5:08:a0:25:37:a3:48:9c:
22:f2:0a:cb:14:79:d5:20:37:c0:b1:c7:4e:81:44:cd:47:68:
31:61:77:97:02:d2:b8:f3:7a:90:2c:2d:fb:68:36:29:d5:8e:
2c:ad:9d:3b:5c:c8:22:5d:57:bd:f7:44:08:13:ba:70:8e:94:
40:30:cc:60:e6:0b:1e:4d:13:1d:ba:02:b7:0e:29:3f:e7:0a:
83:39:dd:c7:f1:0a:bb:bf:b5:cc:2e:0f:b4:e0:f9:97:3c:16:
93:c0:78:23:e8:b9:05:fd:0d:29:1e:9d:23:51:78:a6:d1:cc:
dd:2b:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:09 2026 by rpki-client