
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
File: SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json)
Hash identifier: MFlwNB3HsfIvztjljZcaZw4kaOTIAmWEY3wTGw/rdZo=
Subject key identifier: 9D:67:CE:B6:90:E0:D4:C2:A0:1B:D4:75:99:A1:7D:8A:B1:4A:2A:EA
Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
Certificate issuer: /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
Manifest number: 025A
Signing time: Wed 07 Oct 2026 02:39:10 +0000
Manifest this update: Wed 07 Oct 2026 02:39:10 +0000
Manifest next update: Wed 14 Oct 2026 02:39:10 +0000
Files and hashes: 1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: GSGrFHBCoGyb5fKeGGm2et2PwjCAEv7/vxX562DTHL4=)
2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: nfSDHyxIpYxuJaa572+JGo1gsCxYp6fGEhVukj2YiGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Validity
Not Before: Oct 7 02:39:10 2026 GMT
Not After : Oct 14 02:39:10 2026 GMT
Subject: CN=6ac5b0ce-2afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:28:4f:64:71:2c:a8:a1:2b:26:1b:00:d0:
e6:40:7d:82:d8:7e:59:94:f8:e1:a4:34:af:97:45:
83:9e:9a:5c:19:70:3f:a7:c8:b0:74:d5:22:80:b8:
05:2c:e9:31:7b:99:af:d3:eb:31:0f:9d:ef:ee:6a:
34:a3:91:c3:21:06:b8:c9:a1:c8:21:16:3f:9f:70:
76:0c:cf:4d:e8:ce:4e:23:80:da:47:51:d6:dd:2d:
07:ad:19:82:b4:a9:5c:79:22:6c:3e:58:ed:35:c9:
c4:3b:c2:26:97:d2:f8:0b:10:27:a2:db:4f:f1:03:
80:0c:5e:7a:79:d9:28:ef:7e:4c:ed:89:aa:3f:b0:
29:65:7b:9e:0a:b6:4c:3c:32:30:fd:2c:44:72:34:
9a:d8:a1:bf:a5:d7:2d:53:af:e4:b6:50:87:24:c2:
98:51:c5:71:b8:50:87:0a:4e:d4:36:7d:44:e4:c4:
f5:c3:53:91:3c:78:f7:44:ef:a1:2e:ae:93:99:c9:
b4:c6:46:9d:17:bb:9f:c7:1b:9e:d4:23:12:dd:9d:
01:2d:06:82:02:e9:71:e7:9d:b3:49:89:8d:68:a6:
c5:0a:0e:e9:82:af:d6:ad:25:1d:cc:75:24:cf:a2:
6f:e9:ac:f1:27:3a:ce:29:69:21:bb:83:b3:0a:9e:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:67:CE:B6:90:E0:D4:C2:A0:1B:D4:75:99:A1:7D:8A:B1:4A:2A:EA
X509v3 Authority Key Identifier:
keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d6:37:8f:f7:fe:63:e6:40:84:60:ab:25:fb:e3:c0:81:2f:
ae:85:61:4a:d2:98:df:e4:21:8b:12:5e:fb:e6:e2:a0:b4:85:
bf:33:3f:1a:cc:b5:b6:e1:31:df:5a:65:4d:1a:56:36:86:14:
77:47:dc:e2:b0:7e:4c:ba:8c:b8:32:34:eb:fb:7d:64:b9:fc:
9e:a4:95:c3:03:82:5b:c3:9d:64:b3:18:44:21:94:cb:58:51:
44:00:e0:c7:b0:a4:f2:3f:90:35:3e:25:29:c7:7c:71:b9:b3:
28:62:53:ad:ce:a6:23:f3:5f:af:21:86:63:ea:dd:96:87:d6:
95:03:73:b3:9e:83:7f:d5:eb:73:4d:4e:b6:5c:e6:a6:51:38:
26:37:b5:14:ef:0b:d6:ab:f0:60:76:3d:16:1f:93:c9:52:a0:
09:e9:b9:c1:f6:4a:87:fe:68:e3:80:df:4a:a0:7a:cd:43:ce:
34:df:b9:ab:e7:b0:2c:68:aa:d1:18:89:74:e7:d0:6e:25:27:
5e:27:3c:21:8b:5d:72:d1:b4:7c:f2:75:64:5e:11:9c:0a:da:
88:2c:57:02:bc:63:7a:d7:d8:26:cf:ec:c5:54:11:e1:19:05:
d2:64:38:06:f4:89:bf:fe:23:b2:ea:5a:79:30:e3:c9:e7:3a:
7b:37:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:55:52 2026 by rpki-client