
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
File: sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json)
Hash identifier: yqqoqVOJP0b8scDO3eFoB6RhLv0NN++Z1M3QSL9Ri/c=
Subject key identifier: 04:5A:0C:22:3F:27:BA:DF:9A:A1:E1:17:72:4C:DE:92:79:6B:56:48
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial: 0346
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
Manifest number: 030E
Signing time: Fri 17 Apr 2026 01:18:30 +0000
Manifest this update: Fri 17 Apr 2026 01:18:30 +0000
Manifest next update: Fri 24 Apr 2026 01:18:30 +0000
Files and hashes: 1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: tIZALKWOI/oKhQ+nohKUsNUu+2vRe8mDcv1LYAK5g8s=)
2: DF9C04F4897811F08A9D002AC4F9AE02.roa (hash: 1eWJrnzvRDCq+R12qi5MDc8zwDz6onremzl8rIyFdWg=)
3: D6D1A360323911F0BDA2E834C4F9AE02.roa (hash: 6w7CckVV6rG/tG2tTXK+P2qxsctnyNA9gMl+grLKt2E=)
4: 826A614C16D911F183D175C0323D8C67.roa (hash: ycmuh8Nj0r0LWzIjLbjrvo9pWQhXULrkKa+U8zn3Gr8=)
5: D14FB73439DA11F1B4AF0311B9833773.roa (hash: 98qj9ACGoLIV5uiZE8wJ/8qhEcL1JY5MLgWrObpjwjc=)
6: 36282A602FB311F1BAA2499190833773.roa (hash: ZhezHZjIimq5M2gqm3AOHJtdV6x+qdTacZqo95wm3Sw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 838 (0x346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Validity
Not Before: Apr 17 01:18:30 2026 GMT
Not After : Apr 24 01:18:30 2026 GMT
Subject: CN=69e18a66-8b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:dc:68:37:91:f5:07:df:36:1b:ea:04:b3:
cf:ad:a8:7c:17:d4:14:22:42:91:3b:c4:66:16:38:
1e:52:40:c1:90:d4:fa:49:ad:08:41:fe:e5:78:f8:
ab:4c:29:8f:d9:88:55:e0:23:28:2a:96:9c:d5:3c:
f1:fd:1c:59:d1:8e:05:46:be:15:fa:64:85:35:ce:
4f:30:a1:78:a8:20:a8:e6:ac:22:24:6f:ac:ab:0e:
74:29:f0:45:8a:6e:5c:40:bf:76:e5:f2:47:a6:18:
5d:ab:9e:1b:2d:3f:a6:1a:df:3a:90:5d:71:c7:a1:
6d:1d:9b:76:46:67:a3:0d:6e:8b:a3:6e:5c:9e:f4:
6a:44:43:71:9c:e2:c0:af:d5:5a:00:ec:91:0d:90:
2e:b9:7d:01:57:53:97:2d:36:93:05:b8:02:5f:24:
2a:35:8c:c4:4a:89:39:45:24:4c:0b:43:34:30:57:
72:78:da:25:3a:75:7c:48:82:65:1e:e9:79:e6:44:
08:5f:64:39:5e:af:9d:bc:93:a0:45:cb:7b:5a:d5:
fe:2e:42:cd:4f:51:cd:d2:25:3d:c8:a4:89:af:82:
0f:32:8e:db:00:cb:9e:06:24:92:aa:e1:e8:68:7e:
6d:30:47:28:23:8f:e2:0e:f4:1c:a0:bb:95:d1:85:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5A:0C:22:3F:27:BA:DF:9A:A1:E1:17:72:4C:DE:92:79:6B:56:48
X509v3 Authority Key Identifier:
keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:f1:78:6d:4a:7b:3b:bc:4e:27:da:fb:90:a5:d2:b0:78:87:
78:d7:12:3c:f5:c1:81:35:14:9e:0e:13:f2:c3:6d:c6:44:4d:
37:7e:d8:d7:c2:81:09:11:3b:f4:dc:21:53:ba:5d:ca:7e:d2:
92:4a:18:57:71:7f:0a:f7:f3:1e:17:ea:5d:68:be:a5:ea:2c:
b0:fd:f0:15:5a:8e:68:a2:6e:88:dc:2c:50:36:10:63:4d:09:
24:07:5e:6c:2e:f9:89:a2:2b:56:77:36:14:7c:bd:ad:14:6d:
fd:ce:af:21:f9:8e:96:03:da:55:03:cd:fd:a8:61:12:e7:70:
4e:47:93:4e:89:b9:fd:dd:85:3b:7e:1b:2b:14:d4:dd:3e:8c:
d4:42:28:85:4a:cb:5d:27:96:30:64:a3:c9:e6:6c:9f:5d:71:
f5:47:75:5a:9b:47:6e:3d:7a:75:fe:bc:45:e0:09:9c:b8:7e:
c7:58:db:39:f1:03:f2:e2:5b:d3:11:0e:ce:95:22:c4:f6:91:
bf:d8:6d:15:20:ba:62:5b:a3:f1:f7:6d:71:2f:e1:a7:6d:c1:
1e:85:35:bb:4f:e3:1c:38:86:2d:49:1a:a6:8a:43:4e:3a:40:
4c:39:36:75:b3:08:e6:7c:95:bc:90:85:8a:b1:25:ec:27:d7:
44:ad:9a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:01 2026 by rpki-client