
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
File: SBcgosjubOySR3dhkymcEP63ykQ.mft (raw, json)
Hash identifier: glUuM1iXqwiu+I8+ICYmzn4w3SsNq9y6JJKWAUAwZw8=
Subject key identifier: 7E:C5:94:DD:DD:32:E3:50:A2:C1:2E:65:CD:FB:D4:BA:DE:95:54:8C
Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44
Certificate issuer: /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
Manifest number: 01D3
Signing time: Fri 17 Apr 2026 03:22:13 +0000
Manifest this update: Fri 17 Apr 2026 03:22:12 +0000
Manifest next update: Fri 24 Apr 2026 03:22:12 +0000
Files and hashes: 1: SBcgosjubOySR3dhkymcEP63ykQ.crl (hash: 1vMLiib3ugvxYYp0l5FuFlVeKQBfPOl10UZmhe+fh9M=)
2: A38F041873C011EEB1A68245C4F9AE02.roa (hash: HPmVyYKtLcFExM8piBe7+ZZtOvggOUmjJGRPn2DOqcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl
rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD2E3, serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
Validity
Not Before: Apr 17 03:22:12 2026 GMT
Not After : Apr 24 03:22:12 2026 GMT
Subject: CN=69e1a765-11e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:75:93:a9:6b:11:10:de:83:7e:f0:27:9f:6b:
37:ef:3e:75:be:d7:cc:a4:86:9f:5d:2c:58:09:ab:
53:c8:af:92:b8:a7:09:c1:e6:9c:db:3f:2f:54:56:
9c:60:11:08:b9:ae:d2:20:5d:57:14:fd:37:53:fb:
49:f0:b7:6e:d3:d4:29:24:ec:e5:77:0f:ed:0f:e0:
94:74:af:a4:5e:2e:1e:59:bc:56:df:32:27:38:5c:
5e:7f:e1:7b:2e:f5:3b:10:21:1c:b1:0b:ff:a2:8a:
18:c5:38:e4:c6:79:4c:b4:05:d2:8c:be:0c:19:ff:
27:e4:63:c8:ef:df:dc:b2:89:65:d8:fe:5d:e2:08:
70:8b:2e:ef:82:0c:6b:b6:58:da:60:bf:d4:5f:c4:
aa:d5:d5:74:2c:69:ad:2c:a4:6d:31:b2:dd:c2:c2:
18:b1:db:fc:7d:7d:79:31:37:69:9b:b4:22:54:f4:
25:d4:d4:f8:02:22:25:be:2a:8e:23:8a:fc:e8:ce:
51:28:64:e9:62:be:e2:8f:75:d7:6b:b2:6b:62:5b:
e1:81:d8:ba:e2:31:5a:c4:2a:2b:0a:b5:eb:3b:53:
fb:fa:4a:fe:89:10:31:00:f7:bd:7a:37:3f:f3:97:
cc:c3:65:a3:c9:04:5a:22:56:0d:62:61:f9:60:3e:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C5:94:DD:DD:32:E3:50:A2:C1:2E:65:CD:FB:D4:BA:DE:95:54:8C
X509v3 Authority Key Identifier:
keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:b7:73:02:e3:5d:81:62:48:f0:01:83:99:fa:36:c0:c0:fd:
38:bc:93:d2:e0:65:28:e3:02:37:b1:25:c7:63:a6:f6:d4:52:
5d:2a:2e:f5:e0:76:5a:50:b1:f4:75:37:cd:d5:9a:27:38:41:
89:ae:24:99:4c:15:28:c1:67:e7:23:a3:75:de:14:e2:a9:39:
79:1a:cb:9c:11:e5:1e:e8:0c:d5:44:92:be:5c:fa:6f:17:66:
fe:b7:a1:6b:26:c4:4a:5e:57:b8:0e:f1:99:21:ae:ba:54:08:
75:e4:19:31:79:f6:b5:70:43:c5:02:a1:58:42:6d:83:69:54:
cd:d4:5b:49:fa:2a:34:50:bb:0e:48:67:c9:f8:fe:9f:01:71:
66:71:0b:25:12:2a:c6:d0:95:42:30:9d:d4:f8:1c:87:14:e3:
11:dd:b9:6f:1f:fc:ca:65:65:20:9a:19:96:a5:de:c1:58:b1:
6c:70:c4:f9:bc:1d:28:ca:fb:49:20:c1:2f:5a:a2:2d:11:59:
05:d7:1b:98:3d:9d:a1:6c:7f:92:b2:16:70:68:d8:2f:66:a7:
e5:03:37:28:ac:3b:99:bc:ef:7d:58:3f:d3:ef:59:ad:4e:42:
3a:37:4f:7b:70:f1:af:3a:7f:55:69:81:cf:54:e1:37:20:2c:
5e:7f:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:06 2026 by rpki-client