
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json)
Hash identifier: dGGt6/skRMUW1TcmoQaFtyKAVnPO/A9odeLMxCNdcgQ=
Subject key identifier: A4:80:48:E4:E1:E2:17:CC:57:FE:B4:60:97:52:82:5D:B2:56:F9:3B
Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
Certificate serial: 0800
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
Manifest number: 07FA
Signing time: Thu 16 Apr 2026 21:05:33 +0000
Manifest this update: Thu 16 Apr 2026 21:05:33 +0000
Manifest next update: Thu 23 Apr 2026 21:05:33 +0000
Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: 2bKA7gfc28fiShD4Ajobo6zvHBc0YlbJ9uT+VePhIxU=)
2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: I0J8YTLKv46jDVqF36ehapX5og+9aRsINwLbRf5HeSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl
rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
Validity
Not Before: Apr 16 21:05:33 2026 GMT
Not After : Apr 23 21:05:33 2026 GMT
Subject: CN=69e14f1d-83c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:6e:92:92:a1:06:4a:b8:58:e1:40:8e:3c:
84:5d:7d:53:80:08:8a:e5:38:e3:25:a6:6b:0f:ec:
59:fd:69:e2:43:67:83:e2:93:df:da:87:e8:57:07:
84:8b:32:16:6c:0c:58:1c:7e:0c:88:6c:ae:59:df:
ee:c6:75:c5:00:e0:41:6f:b7:ec:dc:59:bb:ee:b4:
95:eb:fa:0f:e3:47:02:ab:e0:e4:3e:be:41:7a:65:
e1:04:1c:4a:da:79:3b:bc:c1:69:b2:eb:35:48:27:
45:c6:5d:cf:13:62:36:9a:7a:c7:ff:7f:d1:fe:8e:
56:e9:a0:87:fe:cd:66:7a:b2:5c:d6:59:87:f8:70:
68:82:5b:a7:16:b1:fd:a5:c4:65:aa:93:a3:d9:1a:
90:9d:2e:f8:69:e6:d3:b2:e2:ab:28:2e:89:5f:37:
d7:d5:d1:bb:5a:63:0d:41:37:55:41:e1:90:fe:26:
b0:41:78:cd:4b:b9:62:d0:07:1e:6d:99:13:88:98:
3b:9e:98:67:98:e5:38:77:58:f1:82:41:f4:f9:8e:
40:9e:6d:87:16:c0:9f:8d:c5:c5:2c:d6:28:f2:c5:
88:dc:40:65:4d:e5:2e:d7:aa:b2:59:e9:a2:06:17:
c3:e6:5a:51:57:d0:71:a1:3b:e1:92:79:c0:69:10:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:80:48:E4:E1:E2:17:CC:57:FE:B4:60:97:52:82:5D:B2:56:F9:3B
X509v3 Authority Key Identifier:
keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:41:76:03:98:28:b0:65:bb:fd:dd:ec:be:13:8b:f1:81:aa:
f5:b1:1d:af:63:7d:56:ee:e2:09:a9:53:74:f5:d8:06:42:ff:
61:13:4d:d7:6e:4a:27:ca:ef:e1:8b:72:e6:c4:b3:f0:2b:98:
ac:b6:2c:82:16:1f:93:aa:60:f9:6d:35:7f:84:f1:32:fa:48:
96:6f:eb:41:a4:b7:26:0b:a2:45:60:1a:57:fa:11:d0:16:33:
53:38:10:59:0a:8f:e5:e0:47:2e:a4:32:89:b6:d0:11:5f:39:
71:72:f3:95:8a:e7:2c:35:d4:61:17:f4:34:57:8e:c2:95:13:
6d:2f:5e:6d:48:e0:1d:ee:7f:04:a8:da:aa:f4:25:09:0a:ee:
f6:d7:bb:b5:9b:63:74:b8:12:a4:1a:75:d6:53:b7:3d:31:25:
b0:6d:96:bb:b1:0d:49:fa:06:04:54:fb:a3:aa:c9:03:4f:ec:
cc:12:3b:19:88:70:0c:a2:70:99:23:18:2f:94:47:99:74:f7:
2f:15:95:95:fd:62:88:b8:8c:0a:a0:40:94:a7:71:9e:b4:83:
c2:a5:f9:54:63:47:31:63:e3:64:ef:a4:83:ea:4c:f5:ea:d5:
31:54:97:21:77:57:1b:02:52:07:02:b1:e4:4b:fc:a5:51:48:
5e:9b:ce:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:03:07 2026 by rpki-client