
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
File: SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json)
Hash identifier: 2rRxP7y626wDCE/B76nGepOfjvA/dHsoqgnK+rKTidY=
Subject key identifier: A1:DD:D4:0B:79:02:99:3F:72:5E:09:12:38:98:F6:D3:4B:4A:D2:33
Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F
Certificate issuer: /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F
Certificate serial: 2070
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
Manifest number: 2061
Signing time: Sat 04 Apr 2026 15:53:04 +0000
Manifest this update: Sat 04 Apr 2026 15:53:04 +0000
Manifest next update: Sat 11 Apr 2026 15:53:04 +0000
Files and hashes: 1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: QaM9SB0t/eD4ykOkvjRexNPL8RceDTm5yIKRZ+an+/Q=)
2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: vjWgPjyP1dqeWvKxkKTcsD2vuPHSp4MP/FzZfYjUz8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl
rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8304 (0x2070)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01A9, serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F
Validity
Not Before: Apr 4 15:53:04 2026 GMT
Not After : Apr 11 15:53:04 2026 GMT
Subject: CN=69d133e0-e11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:50:78:f3:00:fe:1b:60:cf:7c:86:6f:56:
18:cf:cd:42:4d:94:ea:ea:22:a4:86:60:7f:e2:dc:
02:4e:ea:cd:59:bd:54:f6:27:2d:67:b5:fb:cc:80:
db:5d:db:1f:97:55:1b:59:15:3f:ff:d9:78:49:7b:
ed:fd:aa:6b:94:7a:2b:7b:76:43:c6:51:f4:95:0b:
f7:70:6b:88:5a:e0:57:e1:2f:7c:c1:3a:fc:60:34:
da:7f:44:d0:88:0a:a0:f2:20:d7:ca:97:33:0f:7c:
61:60:b5:45:17:27:67:f2:44:9c:2b:cc:7d:87:6c:
15:9c:95:4a:49:d3:6a:7c:0a:02:e7:62:7b:37:cc:
69:b6:b1:48:4e:24:a3:dd:94:12:2b:f8:c2:c7:71:
a5:9d:93:4d:d4:c1:eb:56:97:90:1f:52:f5:c0:f4:
0d:60:00:2c:c8:ed:61:26:71:9f:7e:7c:ac:73:c9:
13:07:1b:01:79:eb:1c:af:b9:8f:94:07:50:4e:58:
f0:94:86:19:bb:c4:25:8f:5f:ac:e1:d7:df:a5:50:
47:f4:db:6c:4f:e4:f9:10:b8:fc:7a:ab:1f:39:93:
72:ca:1d:bc:31:af:e3:a7:a2:55:2d:ae:52:45:58:
d7:b8:3a:0d:57:11:59:91:d4:ea:56:a1:c6:26:f8:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DD:D4:0B:79:02:99:3F:72:5E:09:12:38:98:F6:D3:4B:4A:D2:33
X509v3 Authority Key Identifier:
keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:b3:93:8b:1b:58:2a:7f:b4:82:f9:d8:f4:ca:81:00:53:12:
40:00:97:19:44:dd:da:ce:61:49:75:cc:ba:c4:5d:88:a3:4b:
98:d6:b7:7f:92:06:3b:24:7a:c2:f2:25:3b:57:a7:b3:4a:5c:
59:21:00:f7:fd:15:93:0a:d0:a3:56:b2:22:2c:59:05:5f:7c:
d6:45:b8:ca:56:87:b2:99:d5:85:1c:82:3f:cb:c5:c8:b3:0f:
53:52:3a:2b:81:b5:42:88:92:98:64:e1:5d:1d:d1:c6:d7:e8:
f3:f5:91:ea:52:ea:26:f5:31:68:16:e7:fb:28:5d:8a:b2:2f:
c4:bd:a4:90:4a:e1:99:38:91:b5:02:db:4f:83:e7:d7:cf:2d:
ff:e3:ad:3c:82:3a:8a:37:f9:b1:96:88:41:21:5c:fc:aa:1d:
77:fe:8c:24:3d:c6:6f:63:e9:5d:22:b7:f4:8d:ce:96:79:7d:
24:64:39:b3:b0:3e:46:c3:bc:34:87:05:4f:a9:a9:65:ab:dd:
a9:36:f8:6b:f3:ce:69:4e:b3:ae:b1:6f:7b:3b:3b:a4:b9:82:
01:1c:7d:a2:83:c9:b9:6d:79:ab:78:85:36:ab:21:f0:dc:1a:
70:14:87:93:61:8d:98:67:06:35:12:05:2f:41:c5:f3:9b:95:
3c:7d:56:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:37 2026 by rpki-client