
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
File: SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json)
Hash identifier: hQ0+aN7kf0Y5qTeXLm2Mi9uxqMe/fUXn0JyOjkZogkQ=
Subject key identifier: 34:1D:A8:84:B0:8B:3D:54:05:7B:01:07:D2:C1:2F:3C:C4:1E:4A:3D
Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F
Certificate issuer: /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F
Certificate serial: 2076
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
Manifest number: 2067
Signing time: Thu 16 Apr 2026 15:54:47 +0000
Manifest this update: Thu 16 Apr 2026 15:54:47 +0000
Manifest next update: Thu 23 Apr 2026 15:54:47 +0000
Files and hashes: 1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: Gjsa/etFJVB5kSXkoxA7O2d9G6W8vsCK73D4sLq//pc=)
2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: vjWgPjyP1dqeWvKxkKTcsD2vuPHSp4MP/FzZfYjUz8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl
rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8310 (0x2076)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01A9, serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F
Validity
Not Before: Apr 16 15:54:47 2026 GMT
Not After : Apr 23 15:54:47 2026 GMT
Subject: CN=69e10647-2dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:9d:cf:d1:4b:de:cf:97:13:c4:50:25:45:
b2:82:89:21:43:60:c4:73:e7:f0:ae:36:08:f9:58:
d8:64:76:7f:e4:36:f2:41:07:47:b7:99:78:84:69:
d4:48:45:a5:09:5f:fb:4b:69:38:a0:ff:fa:f1:67:
6c:ba:8f:50:82:86:a3:97:bd:43:d9:96:1e:48:a0:
4d:20:b6:ff:ab:70:b5:4b:de:59:cd:09:c6:53:ff:
11:50:37:00:c7:54:ea:6e:d0:8f:77:9c:95:8e:14:
d1:1f:93:24:31:ed:72:34:1b:d6:cb:8a:e4:9d:06:
2c:d2:19:97:e6:77:58:88:a7:34:7b:9b:78:8d:49:
ca:d8:b9:97:11:6e:dc:2f:a5:e2:19:38:5b:54:33:
7e:7e:a3:e5:5b:8a:55:44:98:53:2f:2b:03:0c:cf:
20:d5:59:c0:a0:1f:d0:99:b9:a6:04:b4:41:28:ae:
4b:54:c5:11:3b:b5:27:81:75:75:d2:a2:06:e5:ca:
5f:02:d6:4f:42:a8:bb:58:86:8d:5a:ca:7c:0d:2c:
37:47:44:4a:e3:c5:12:2c:bb:16:e0:2c:97:53:46:
bb:60:81:eb:11:ea:45:c3:d7:2c:42:8d:b6:86:0d:
aa:97:07:08:9b:66:0f:fd:2a:a0:23:b9:b4:f7:52:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1D:A8:84:B0:8B:3D:54:05:7B:01:07:D2:C1:2F:3C:C4:1E:4A:3D
X509v3 Authority Key Identifier:
keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4e:94:6f:97:de:34:13:55:b2:c4:b3:94:a4:20:a9:4a:c7:
2a:35:16:90:a8:62:dc:44:8e:dc:6e:5c:92:5c:f7:1e:86:da:
45:b0:c8:e6:1c:8a:80:cd:01:f2:00:ff:d1:6f:05:a5:59:d0:
7b:0d:6f:75:ca:13:9f:1c:f3:d8:57:6c:12:f8:2b:be:06:be:
53:fc:1b:79:a6:8d:f2:ee:3d:5c:6f:b7:c8:f0:91:00:69:5c:
6c:5c:1d:b5:c3:38:8b:a7:33:d6:6d:05:48:6a:42:fe:1f:30:
a9:bf:70:3b:dc:da:c0:45:fd:04:25:33:e3:df:28:f5:6c:3d:
7e:a1:a3:74:25:e5:d2:56:e6:af:9b:17:00:a6:f2:21:a8:2a:
3d:5f:37:39:82:1a:7b:98:3e:68:b1:dd:c5:54:af:a5:8d:c8:
34:ec:50:c1:e4:4c:38:7a:c9:f6:2f:41:e0:11:e4:d6:c1:7a:
94:7a:9a:33:48:39:b7:83:cf:40:77:0e:a0:2f:a3:2a:b3:92:
70:63:01:6e:17:20:22:7a:fc:ef:72:9c:a2:f2:45:b5:e0:ba:
c1:c4:0a:ec:a5:e7:12:4c:59:b5:39:77:18:a4:25:01:72:de:
9e:5c:e4:27:f2:81:38:da:3d:08:76:7f:0f:df:d3:63:f5:c7:
32:64:ee:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:51 2026 by rpki-client