
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json)
Hash identifier: CVDmK8JWc0fcIJdt6RXAmb76BSDyPohyfAwKXsPIR0Q=
Subject key identifier: 3B:E3:1F:5E:D7:E5:76:64:00:88:07:79:B2:8B:33:77:B5:8C:FF:36
Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Certificate serial: 058C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
Manifest number: 057D
Signing time: Fri 04 Sep 2026 23:04:47 +0000
Manifest this update: Fri 04 Sep 2026 23:04:46 +0000
Manifest next update: Fri 11 Sep 2026 23:04:46 +0000
Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: fyuJ0PjVSDHt4aj12FQd8ldCo/zY1cKqFQimfcZQRgM=)
2: 34788E285FD711F0AE80057FC4F9AE02.roa (hash: 2VF4ZBcYU1NgumYKCnjL8hY4a3QKesS7mGAqok92V4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl
rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 23:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1420 (0x58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Validity
Not Before: Sep 4 23:04:46 2026 GMT
Not After : Sep 11 23:04:46 2026 GMT
Subject: CN=6a9b4e8f-b846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:56:cd:79:cf:b1:ac:ed:db:82:5c:60:c5:
54:67:7f:05:f7:37:2c:02:30:1a:26:e4:6f:7a:5a:
8e:d2:1e:f3:7d:3c:31:f9:d9:94:65:b4:a3:7f:40:
82:e5:62:37:f3:1d:60:48:99:06:4c:3c:43:09:d9:
a7:1c:26:e5:86:26:3a:88:ab:14:5b:2a:2c:81:18:
20:c5:e3:67:3d:e6:a2:fa:0e:66:47:48:b2:5f:1a:
09:73:6e:f8:93:f3:0d:d9:d4:8a:1e:cf:16:02:dd:
d2:26:44:7a:e4:ad:e6:9b:06:d0:09:df:ab:89:e7:
86:e9:11:5c:c5:94:dd:ad:7e:81:ac:11:24:56:ab:
2a:b6:19:12:66:d6:b3:df:2b:f3:e3:1e:11:88:f5:
f6:96:0e:c9:c6:f0:be:51:a7:a4:9e:4c:d2:d9:06:
d6:a9:8c:51:ca:94:25:29:fa:8d:76:ed:52:24:39:
12:53:4a:78:bb:ca:6c:9a:cd:3e:51:e4:de:67:ef:
e8:a6:96:0c:6f:ce:14:69:6a:f0:74:02:ca:7e:04:
40:ec:b7:13:b4:42:b5:0f:ba:6a:92:3a:15:ee:00:
64:3c:60:4d:83:32:85:d4:89:31:f6:9c:3b:3c:6c:
38:7a:5a:31:f0:2c:a4:a6:a3:36:1b:d7:5d:70:76:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E3:1F:5E:D7:E5:76:64:00:88:07:79:B2:8B:33:77:B5:8C:FF:36
X509v3 Authority Key Identifier:
keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0e:40:77:7b:a0:72:80:46:55:23:d5:ca:0c:ae:ef:ed:14:
1b:77:0a:3b:c9:6a:a4:93:11:16:f2:ff:f9:51:db:43:a6:a1:
e1:76:9a:06:9f:ac:7b:d0:0a:50:1e:0c:95:06:73:ff:4f:31:
c1:f4:88:db:af:11:5e:40:06:f8:ee:45:00:7b:1e:49:f2:93:
5a:cf:08:0c:1c:52:7d:c4:71:50:14:97:6a:2a:81:e7:e8:c1:
28:b1:95:04:ad:70:d2:21:09:a3:13:a5:a4:4b:78:0e:8d:9b:
e9:8c:1a:fa:c4:d8:bb:f1:b0:2a:e9:4e:35:ff:08:73:72:99:
da:ca:eb:77:4e:90:83:f7:71:3a:e8:4b:f9:df:ce:f4:6b:e0:
f6:41:d0:8f:3e:a6:ec:0a:82:59:1f:95:92:09:de:bc:71:9e:
25:4c:b5:f2:cd:49:38:f5:b2:67:ba:0f:5a:9f:10:fa:d1:14:
93:ed:f2:88:84:fe:bc:b8:eb:6a:04:72:c9:de:dc:1d:f5:da:
30:3e:64:3e:44:eb:70:78:be:12:ed:5b:25:68:5a:d1:24:1e:
93:c8:3e:f0:80:86:04:b1:76:b8:68:85:56:d7:b4:60:6c:88:
1a:34:87:4e:2e:2f:83:fb:5e:43:69:3f:80:bf:21:30:a2:b0:
84:4d:20:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:11:47 2026 by rpki-client