
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json)
Hash identifier: MOdjWjFLn0d/V0bu4Z7xxWhXSyKGoup0V7P8eHd+HXc=
Subject key identifier: BF:DB:E3:72:0D:44:54:48:87:E1:9F:62:31:58:C0:12:E7:34:14:98
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial: 353C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
Manifest number: 3531
Signing time: Thu 16 Apr 2026 15:14:25 +0000
Manifest this update: Thu 16 Apr 2026 15:14:24 +0000
Manifest next update: Thu 23 Apr 2026 15:14:24 +0000
Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: DA/kScDT3ybm1tBX+0dgEJ2OXVZSD3QQCHXnbImhpss=)
2: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: Iu3fSi12Z2U9AUNUC1OMiFixkCYrUHtslkvgsswiyxY=)
3: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: TuixmrjJztg/mXQeKBMMqGDhlis8qrixyvnyo1RBaA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13628 (0x353c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Validity
Not Before: Apr 16 15:14:24 2026 GMT
Not After : Apr 23 15:14:24 2026 GMT
Subject: CN=69e0fcd1-820a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:53:e0:b6:a5:44:7a:0c:b4:c4:00:37:f7:
fc:24:cd:d5:28:ba:fd:eb:2f:60:59:e9:89:5f:73:
47:d4:64:93:d7:1f:3d:09:ec:61:76:a1:a4:45:ba:
d6:5b:6b:ba:b0:75:f2:2f:77:37:8f:f2:c2:6f:27:
57:74:9f:37:49:b0:9d:5b:3e:ad:ae:c8:35:dc:00:
19:ea:fb:be:36:a1:a3:69:ba:11:57:e0:75:d3:0b:
d7:eb:89:13:46:30:2b:42:5a:f8:ed:f7:3d:e2:ef:
ee:31:65:fb:51:f6:03:a0:0e:2e:32:34:63:a7:6f:
e0:71:06:56:ed:4d:c1:f0:2b:c2:8c:97:a4:23:34:
94:5f:fc:b5:58:4f:07:be:09:f0:49:72:3a:a3:a7:
a2:07:d7:d1:db:d9:93:57:1a:ea:dc:94:a8:8a:27:
03:97:c8:6c:34:15:78:13:c1:4a:fe:a8:c0:36:3a:
61:a9:1b:4c:2f:1d:d2:94:e9:4a:4e:c6:7f:19:fe:
9a:62:d2:59:25:7d:8d:a3:2d:85:98:b9:d9:1b:82:
e3:49:83:bf:1e:a6:2b:e7:21:e8:5b:61:40:1e:ca:
bd:34:94:68:e2:d7:64:2e:db:75:1a:4a:cf:88:87:
5f:a5:df:d9:8c:29:44:80:11:1c:e3:cb:98:c1:3a:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DB:E3:72:0D:44:54:48:87:E1:9F:62:31:58:C0:12:E7:34:14:98
X509v3 Authority Key Identifier:
keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:52:4f:11:b5:36:c8:81:af:f9:49:c2:3c:f5:07:fc:74:37:
4d:29:3d:5d:49:2a:9a:af:0c:99:67:ee:5b:28:45:21:ac:2b:
18:d9:6a:6a:ed:76:ff:19:33:4b:d6:8b:0d:67:39:b5:2b:0c:
c9:45:83:a4:0b:77:bf:01:95:87:cb:13:00:3f:2f:f0:15:ac:
9e:74:c2:52:0c:20:17:87:c0:a3:bc:83:d0:79:b1:87:7f:dc:
bc:8e:18:1b:5a:d4:81:83:c0:72:66:7b:39:b6:7b:b3:67:a9:
e4:cb:ea:4a:d2:fb:ed:88:76:a0:bb:c3:82:12:c5:32:e8:32:
b7:4f:9f:e2:65:5b:60:9e:41:9b:7c:22:bd:84:bd:06:4e:db:
25:c5:d0:e5:1f:9c:6a:02:39:1a:bf:8e:c1:11:ca:67:d3:47:
03:35:c8:16:84:c4:d8:34:3e:c7:a6:af:7e:7a:27:dd:68:56:
05:aa:60:2d:16:a3:38:21:ac:b0:81:6a:22:d6:9a:28:29:0a:
70:f4:cf:cc:ed:e0:66:db:dc:96:c4:2a:f4:bd:12:19:f6:c3:
f0:5d:c3:4c:17:82:6e:c1:1b:12:e0:e2:b5:4c:89:b4:28:88:
72:3d:70:3c:7e:3b:32:17:ee:be:85:d5:f1:ff:7d:67:3f:c5:
4c:28:6c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:17 2026 by rpki-client