
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json)
Hash identifier: oSuHzdYW6ydqH+syzBn3dlk7ckBkrdvz+4uzTwuaCLo=
Subject key identifier: A5:15:71:3E:CD:CC:5B:A3:C5:A9:A4:64:9F:4A:3F:F0:9D:C3:09:C2
Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11
Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
Manifest number: 016C
Signing time: Sun 05 Apr 2026 04:17:02 +0000
Manifest this update: Sun 05 Apr 2026 04:17:02 +0000
Manifest next update: Sun 12 Apr 2026 04:17:02 +0000
Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: qeCWojICjBaKLZvIYTlhhWmqELyAEiB+s6Gjmi2sNns=)
2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: 1WmqXCaGoy8d1Y/+sJTFSYYcOn86Qor6prAagLIyE6A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl
rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811
Validity
Not Before: Apr 5 04:17:02 2026 GMT
Not After : Apr 12 04:17:02 2026 GMT
Subject: CN=69d1e23e-0577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:cd:9e:67:df:63:ea:db:12:20:57:0e:26:
16:92:6f:06:84:99:2d:64:f9:5a:5d:6d:7a:ec:dc:
8c:d8:39:71:1d:b7:61:ff:71:51:86:c1:f2:6a:e9:
ec:0c:e3:c9:f5:e2:57:92:12:cf:f5:57:f1:9e:52:
47:16:ce:ec:6e:9a:47:7b:36:0a:22:5f:80:6d:94:
a0:66:33:ae:94:05:53:2d:b1:c4:58:0d:6c:e5:3c:
35:21:6f:15:98:af:37:6d:bb:62:95:54:a8:b6:33:
07:77:d6:ec:aa:3f:d4:aa:66:87:f3:8c:3f:d7:94:
3d:a5:fa:2f:e0:4e:62:e0:da:6c:8f:6c:a1:65:02:
f7:ee:ad:ef:11:ff:cb:2d:06:f1:ea:ea:10:2f:5b:
7c:4b:0e:2a:8a:93:6e:e3:bd:f9:0b:79:4b:ba:09:
e8:3d:b8:d8:db:9f:52:6c:57:b0:e8:9d:65:b6:4f:
4f:2f:48:df:65:c4:fb:96:af:19:f5:3a:3c:00:2d:
3e:28:44:56:2f:d2:0c:e4:e8:1e:4e:15:69:a7:05:
dd:4c:40:07:76:ac:e6:eb:46:a5:95:a0:1b:47:f6:
6a:d2:a2:ca:8e:9d:df:89:20:67:27:3e:b1:02:69:
94:6d:ed:8a:a7:7e:55:ff:c3:8a:1f:16:12:f4:38:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:15:71:3E:CD:CC:5B:A3:C5:A9:A4:64:9F:4A:3F:F0:9D:C3:09:C2
X509v3 Authority Key Identifier:
keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:45:15:bf:ed:82:b7:75:69:05:13:11:95:04:8d:4f:6c:d2:
cc:9e:4e:da:71:96:8f:c2:4d:9f:cb:3f:6d:b4:39:9e:a4:d9:
43:02:a8:83:db:6e:e8:74:4f:83:53:79:b8:6d:60:99:76:28:
24:7a:61:a6:a6:58:cb:15:2f:f7:b0:ad:38:53:02:89:c1:22:
2e:f7:30:0a:a4:1c:ca:21:14:f8:13:31:68:2e:c1:ca:83:ab:
f3:de:e6:a5:0a:06:c3:b4:3b:3f:8e:35:e5:fe:54:fd:da:54:
37:9e:97:17:a7:1b:29:c8:73:d2:39:2a:ac:fc:75:c7:b5:a2:
51:68:6b:f5:7e:c5:32:1f:81:fd:3b:e1:55:0c:00:1a:a6:ab:
ca:d0:eb:a1:d4:a3:b9:be:c8:a4:8c:29:bf:8b:8d:fe:cf:fc:
28:d2:64:ab:25:80:3e:cd:b5:72:bc:81:e2:16:10:15:2e:24:
84:89:fc:fe:52:d3:a5:f8:d8:5d:84:71:e3:d8:db:0b:28:3d:
76:7e:e4:d2:d6:2f:93:a7:ae:ee:b5:d3:50:99:dd:c3:da:59:
fd:c0:91:1f:b2:ce:d5:e8:05:ba:d3:bc:a8:49:2f:a5:1e:bc:
f8:21:83:33:52:dd:aa:b6:e8:2a:da:a9:66:10:d5:3c:0c:23:
cf:f7:37:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjRFMkIxMTAvBgNVBAUTKDRCM0I5RDkzMDU4ODBGRjY2QjdGMUU0QzkwRkY5ODc1
Mjg4NjM4MTEwHhcNMjYwNDA1MDQxNzAyWhcNMjYwNDEyMDQxNzAyWjAYMRYwFAYD
VQQDEw02OWQxZTIzZS0wNTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsk7NnmffY+rbEiBXDiYWkm8GhJktZPlaXW167NyM2DlxHbdh/3FRhsHyauns
DOPJ9eJXkhLP9VfxnlJHFs7sbppHezYKIl+AbZSgZjOulAVTLbHEWA1s5Tw1IW8V
mK83bbtilVSotjMHd9bsqj/UqmaH84w/15Q9pfov4E5i4Npsj2yhZQL37q3vEf/L
LQbx6uoQL1t8Sw4qipNu4735C3lLugnoPbjY259SbFew6J1ltk9PL0jfZcT7lq8Z
9To8AC0+KERWL9IM5OgeThVppwXdTEAHdqzm60allaAbR/Zq0qLKjp3fiSBnJz6x
AmmUbe2Kp35V/8OKHxYS9Dg2vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUVcT7N
zFujxamkZJ9KP/CdwwnCMB8GA1UdIwQYMBaAFEs7nZMFiA/2a38eTJD/mHUohjgR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUyQi9GODM2QkRFQzBD
RUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURfWnJmeDVNa1AtWWRTaUdP
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09CRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NEUyQi9GODM2QkRFQzBDRUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURf
WnJmeDVNa1AtWWRTaUdPQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuEUVv+2Ct3VpBRMRlQSNT2zSzJ5O2nGWj8JNn8s/bbQ5nqTZQwKog9tu6HRP
g1N5uG1gmXYoJHphpqZYyxUv97CtOFMCicEiLvcwCqQcyiEU+BMxaC7ByoOr897m
pQoGw7Q7P4415f5U/dpUN56XF6cbKchz0jkqrPx1x7WiUWhr9X7FMh+B/TvhVQwA
GqarytDrodSjub7IpIwpv4uN/s/8KNJkqyWAPs21cryB4hYQFS4khIn8/lLTpfjY
XYRx49jbCyg9dn7k0tYvk6eu7rXTUJndw9pZ/cCRH7LO1egFutO8qEkvpR68+CGD
M1LdqrboKtqpZhDVPAwjz/c3uQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:50:50 2026 by rpki-client