
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
File: SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft (raw, json)
Hash identifier: XhC4ecKbteAGvP1itxktdfDqU8nJlQ5cRIh71mUd08c=
Subject key identifier: CA:6B:7B:C1:A0:B0:E8:B9:E7:65:D3:F1:49:57:02:C7:4F:D5:1B:48
Authority key identifier: 48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
Certificate issuer: /CN=A9146039/serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
Manifest number: 72
Signing time: Mon 19 Oct 2026 08:36:11 +0000
Manifest this update: Mon 19 Oct 2026 08:36:10 +0000
Manifest next update: Mon 26 Oct 2026 08:36:10 +0000
Files and hashes: 1: SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl (hash: +tNBrzUS4w8zJnRYW0H6houKvPzJ1iijYFrwNTXR20k=)
2: D6CF9ED61D5611F1A0EA4997233D8C67.roa (hash: SsE4AcFHHC4+KSYsRKUgPuWZ9aW/dPOP3ZBl/cGum9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 08:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146039, serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Validity
Not Before: Oct 19 08:36:10 2026 GMT
Not After : Oct 26 08:36:10 2026 GMT
Subject: CN=6ad5d67a-1e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:ab:2b:66:27:c6:f3:7b:dc:17:b2:06:2f:
b5:cd:65:be:0b:a2:83:03:19:53:8c:8d:50:d3:9a:
6f:31:6d:15:bc:53:88:51:a1:b6:bf:73:b1:1f:db:
24:a7:0b:e5:5e:88:9b:15:e4:f0:42:19:d3:4e:5a:
16:ed:55:c3:93:2a:97:2b:1f:68:22:c9:59:5f:14:
81:6b:ad:9a:f4:16:1f:15:d4:a9:0a:c1:ab:fc:c4:
51:05:0d:09:0c:b9:6f:56:cb:ac:9d:6e:57:fc:b1:
81:39:64:96:c1:70:1b:70:60:bb:a6:0b:eb:46:16:
e2:07:19:79:77:4b:e5:c0:75:3e:e6:a8:28:72:ed:
96:5b:4d:be:b8:fd:1d:c5:72:f8:c4:b2:b1:ff:a2:
dd:5c:b0:76:19:a9:62:4e:87:fc:ef:a0:cb:41:d1:
28:51:42:7e:3d:27:d2:17:c5:72:00:9f:14:42:29:
05:bd:aa:cc:ad:7b:58:47:2e:a3:66:ea:f0:48:3e:
0b:05:10:e6:0e:73:a8:a4:b7:c0:d8:b4:ad:cf:10:
21:80:41:0b:02:ef:bc:49:e3:c5:02:6c:e6:c0:20:
a4:3c:66:1c:89:47:6a:1d:45:e8:c1:83:55:6b:0d:
be:b1:e8:7e:0a:11:64:fc:44:db:2a:70:25:8e:67:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6B:7B:C1:A0:B0:E8:B9:E7:65:D3:F1:49:57:02:C7:4F:D5:1B:48
X509v3 Authority Key Identifier:
keyid:48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b4:5f:47:5d:15:f5:6d:eb:9f:5c:72:76:0c:f8:90:4a:5a:
a2:2f:b6:3a:ba:c5:19:81:0a:41:d9:a1:19:8f:99:5c:0b:9e:
f0:42:b0:f4:16:ee:d9:83:cd:3d:ff:b4:8e:dd:e7:68:cc:dc:
9c:a6:d7:b4:75:8d:51:b1:03:6f:36:58:3e:51:88:d0:c8:36:
58:4a:d6:0e:ca:c2:70:27:2d:50:e2:5a:a2:b9:b1:02:0d:ed:
c7:e2:34:3e:e6:86:0b:05:9a:19:e4:3a:e9:66:df:2b:55:10:
1c:24:0a:9e:24:92:18:78:1a:3c:27:c6:af:1e:18:9a:79:f3:
d2:c5:76:d2:90:20:65:eb:42:ec:4f:11:35:23:8b:42:ec:24:
75:2a:12:da:8c:b5:f9:70:8a:4d:0d:5f:6f:9e:cf:3a:f8:b8:
d2:8b:ce:19:f3:f8:a0:e1:d2:3a:f1:1e:60:74:bf:21:dd:39:
69:69:ee:74:ee:ac:c7:ea:b8:4b:28:4a:c1:e2:85:7a:c1:79:
55:4a:f4:f8:4b:5d:4b:0d:fa:d5:0d:cb:d7:e3:3f:79:7e:fd:
22:f1:5c:e5:e7:60:8a:73:7a:ec:94:50:e2:0b:10:8d:78:55:
ec:92:e4:eb:c3:43:c2:4b:8e:ca:f3:76:ce:d4:60:0e:b2:17:
15:bd:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:04:44 2026 by rpki-client