
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json)
Hash identifier: Qx1bBuEVern882AaUjNTgaeiq3ox3jn910tRhA066m4=
Subject key identifier: F0:C0:C7:FF:23:8B:AD:DA:C8:8A:F9:8F:55:BA:BE:FC:56:DE:2B:D6
Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
Certificate serial: 07E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
Manifest number: 07E2
Signing time: Sun 01 Mar 2026 23:55:48 +0000
Manifest this update: Sun 01 Mar 2026 23:55:46 +0000
Manifest next update: Sun 08 Mar 2026 23:55:46 +0000
Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: VuJpKG4dm8jKt/wYszdawbGcWll+iuYmtJd5/7L+z10=)
2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: I0J8YTLKv46jDVqF36ehapX5og+9aRsINwLbRf5HeSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl
rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2024 (0x7e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
Validity
Not Before: Mar 1 23:55:46 2026 GMT
Not After : Mar 8 23:55:46 2026 GMT
Subject: CN=69a4d204-e32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:8a:f8:8b:ea:2d:95:a9:ca:86:ff:a4:ec:
f0:2b:99:8c:f6:0d:5f:b2:84:0e:91:6d:af:45:d3:
02:c8:31:1a:20:36:04:a7:1e:50:eb:e7:c1:7d:b2:
1a:41:3f:9d:3b:0c:9d:0c:27:80:54:0d:e2:e3:d3:
89:f1:f5:89:88:7a:9f:14:98:99:d9:7a:fd:78:ad:
89:ef:6b:bf:92:85:d5:9d:c2:43:17:0d:07:21:cf:
77:1c:f8:c1:eb:31:8f:7c:bc:b1:39:fb:6e:05:54:
d4:a1:0e:a1:50:40:0d:65:27:31:59:2f:c5:a3:a8:
a8:28:9a:14:cd:17:ae:91:14:ca:83:26:14:ab:ab:
b1:d9:33:ca:f7:1a:ab:03:90:41:b2:31:ae:c5:b1:
e3:dd:9e:7e:9a:41:c0:9f:ac:fa:17:e9:25:28:21:
21:c6:4e:d9:d9:90:2d:5e:b7:42:3f:74:b3:59:bf:
e7:10:06:71:29:99:5a:5b:9c:1f:f2:f6:a6:0b:50:
5a:37:29:1e:f0:8a:c0:cc:37:8e:62:b8:ae:14:4b:
c2:58:9f:34:ee:fa:3b:51:11:aa:83:cd:53:3c:49:
af:de:ca:dc:ae:06:03:2f:dc:1d:8e:88:89:85:c2:
9f:40:c2:14:5d:53:15:05:54:6b:c6:2b:2b:e4:d3:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C0:C7:FF:23:8B:AD:DA:C8:8A:F9:8F:55:BA:BE:FC:56:DE:2B:D6
X509v3 Authority Key Identifier:
keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d0:60:4e:56:5a:4e:46:66:b4:f6:8d:92:37:4a:41:a0:8f:
be:3f:17:b1:28:00:3d:49:20:43:0d:64:ad:91:da:8f:11:91:
b7:34:5a:1e:c1:15:d9:b0:3a:67:25:e7:8b:96:af:54:29:ba:
d3:cb:6f:fa:83:c8:aa:ea:b8:f8:fa:1c:bd:9c:e8:4a:6b:a3:
7f:b2:f6:9b:11:28:fe:b0:97:67:bc:8f:e8:f0:50:53:f5:78:
87:ce:8d:82:b4:db:d0:61:4b:a0:8d:ad:44:2c:c0:2f:ec:78:
5e:f0:45:a2:6c:17:0c:5c:9a:3a:4e:1a:61:90:9b:bc:3f:34:
00:b9:c2:7d:c3:ef:98:ca:fd:09:f2:f8:d7:78:71:5f:83:2a:
27:eb:ab:5f:ae:39:ea:a6:c5:4b:0d:ed:66:39:a1:12:b0:7a:
d4:28:3a:18:af:13:e4:70:a4:41:02:f1:58:19:73:cc:55:fd:
0e:84:25:74:a9:38:e1:b0:35:bc:28:fa:79:16:08:8b:57:54:
67:c4:32:08:ad:33:52:a7:78:be:a0:d8:3e:93:20:af:8d:4f:
52:61:13:d9:20:ee:1b:dd:7e:32:01:2c:33:ac:aa:3b:71:ec:
d2:dd:71:54:79:a5:77:d7:c8:68:bc:69:6b:f0:1c:92:32:24:
f7:14:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:46 2026 by rpki-client