
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json)
Hash identifier: Ewy6t4iZyOuM+LgJwgFUqTWjInUssnSWsJ3Nzu2O0gs=
Subject key identifier: 62:E2:44:EF:D3:7A:F8:D3:46:F5:B4:4A:0E:E9:F6:5A:59:B8:41:A5
Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Certificate serial: 053E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
Manifest number: 052F
Signing time: Sat 04 Apr 2026 23:20:11 +0000
Manifest this update: Sat 04 Apr 2026 23:20:10 +0000
Manifest next update: Sat 11 Apr 2026 23:20:10 +0000
Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: tejcY3oJbLuzspVPlTW6v7G725VNnf/KIxV4HvfVMds=)
2: 34788E285FD711F0AE80057FC4F9AE02.roa (hash: 2VF4ZBcYU1NgumYKCnjL8hY4a3QKesS7mGAqok92V4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl
rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Validity
Not Before: Apr 4 23:20:10 2026 GMT
Not After : Apr 11 23:20:10 2026 GMT
Subject: CN=69d19cab-ea98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:22:da:7b:87:4d:f4:81:81:9c:d4:31:bc:
f4:e4:aa:ec:7f:5b:df:4e:9c:d2:3c:ae:fb:2d:8b:
8b:fe:fd:a9:f1:65:df:24:9d:14:dd:be:d8:0c:ce:
57:8e:54:7f:ae:b9:7f:1e:08:33:fa:f2:b9:f3:d4:
be:e7:4a:b8:b5:e4:96:1c:7d:47:c4:39:0b:0c:cb:
c8:dd:fd:35:46:62:c1:a2:0b:4e:e4:56:63:40:f6:
12:72:f9:2c:f7:d0:a6:2f:99:65:b4:17:15:fb:82:
80:8c:e8:cc:36:93:a8:da:8e:ca:22:c1:64:13:d8:
eb:1f:d2:14:59:e4:db:78:e6:30:e7:82:8b:40:ef:
63:bf:b9:ad:61:35:fb:a6:a5:d8:da:ae:1b:90:9b:
e8:39:5b:31:f7:f1:13:af:94:3d:96:a7:d1:3e:e8:
c5:72:4d:93:70:5d:15:69:9b:f3:1e:eb:77:7d:b2:
b5:6c:05:3f:7d:d2:5e:58:54:aa:f2:60:8c:5b:ac:
b2:01:49:fb:77:a0:1d:d3:64:13:d8:e6:00:56:1d:
3a:81:3b:ba:66:8f:f4:7c:c1:cd:8c:92:68:39:b7:
da:d9:d0:64:5b:e4:fd:34:5c:cd:e4:5e:a7:07:6b:
11:f0:95:cc:bc:0f:04:19:99:48:6c:c0:b2:4e:c0:
8e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E2:44:EF:D3:7A:F8:D3:46:F5:B4:4A:0E:E9:F6:5A:59:B8:41:A5
X509v3 Authority Key Identifier:
keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:52:9b:12:8e:ac:a9:a3:86:57:f6:c6:ee:4a:fc:0c:77:e1:
4b:5f:89:ea:da:3d:62:78:aa:52:e0:0a:56:32:0d:71:27:d4:
40:7f:fa:89:42:53:dc:79:5b:fa:1a:06:82:d2:1a:15:3a:b5:
0c:8c:b5:4f:44:18:e8:3c:48:ed:df:87:f6:68:5f:63:ed:4f:
c2:9b:e4:86:09:d4:8f:f8:f7:58:7d:82:29:13:b5:e8:f2:ef:
c0:d2:5a:91:d0:cd:27:06:90:e6:ad:04:8b:55:1a:12:91:be:
86:6a:e8:aa:9e:1b:9f:44:b3:ec:7b:99:86:b8:cf:0c:e4:e1:
d0:53:04:fb:51:5e:e7:51:28:18:e0:d1:11:64:bb:28:bf:30:
6b:49:8a:fd:f8:37:f7:66:a0:9b:fd:61:73:cc:a7:5d:1e:b5:
42:9f:6d:07:8f:16:9e:e4:73:d1:b4:91:8d:11:d3:0f:79:d4:
d5:8d:f2:c4:d8:d2:38:f6:a1:a8:ad:fd:92:c7:cc:67:d9:eb:
b9:60:e0:3f:14:e6:f9:f3:10:e3:5e:6c:eb:e9:68:ba:f6:6e:
61:81:77:1b:1c:2b:f8:0e:61:52:54:39:6f:00:83:cd:94:34:
a1:dc:75:00:61:32:a0:ce:1e:a2:e4:9c:e6:7b:8f:7d:1e:d1:
e8:e8:be:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:53 2026 by rpki-client