
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
File: SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft (raw, json)
Hash identifier: JTqZB3ZMaHdGOt/AwQqSGJSRCb3lxH+hwi+3WIM92H0=
Subject key identifier: 5F:A5:B8:89:05:DA:3D:29:DB:73:C2:F5:3D:5D:0D:91:A1:B7:ED:CB
Authority key identifier: 48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
Certificate issuer: /CN=A9146039/serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
Manifest number: 2C
Signing time: Mon 01 Jun 2026 09:32:14 +0000
Manifest this update: Mon 01 Jun 2026 09:32:13 +0000
Manifest next update: Mon 08 Jun 2026 09:32:13 +0000
Files and hashes: 1: SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl (hash: gM7aHm8FVNnT+QEqiT6ntxONzTzgS1he7h468ZQOZmw=)
2: D6CF9ED61D5611F1A0EA4997233D8C67.roa (hash: SsE4AcFHHC4+KSYsRKUgPuWZ9aW/dPOP3ZBl/cGum9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146039, serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Validity
Not Before: Jun 1 09:32:13 2026 GMT
Not After : Jun 8 09:32:13 2026 GMT
Subject: CN=6a1d519e-0390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:f3:a1:9d:a0:db:c1:09:7b:1b:57:79:19:
7f:45:67:75:66:f4:65:e1:ea:8e:c5:30:7d:39:63:
9d:5a:e7:b2:f6:1c:c5:06:0e:f3:c1:82:e8:97:2f:
c5:c3:42:1a:6b:d8:06:a5:44:94:b1:af:99:9e:58:
08:76:45:cc:e9:f7:0a:7f:99:a1:5e:70:5f:db:1e:
66:c1:ef:fb:25:d3:f7:eb:43:e0:54:dc:f6:e5:c2:
0d:ac:14:ae:b1:45:df:66:3c:7e:3c:12:90:29:fc:
20:6e:b2:fa:99:d9:d9:62:8a:46:75:ea:e0:11:73:
4e:39:bb:19:df:ce:a5:22:17:d4:98:ed:2d:35:f5:
c1:c8:0e:eb:ae:9a:47:96:79:27:c9:1f:09:44:99:
36:82:bc:ce:d5:84:de:3e:63:e5:88:1a:9c:fc:07:
f7:f0:6f:96:05:63:07:7b:0b:07:17:64:64:ea:06:
32:dd:dd:b8:11:e8:51:f6:01:ab:25:4e:7a:b2:14:
62:f5:d9:05:f5:d8:7f:41:34:e5:06:71:dd:a1:92:
a3:93:9b:91:e6:b4:02:0b:bf:7b:d1:a7:2a:9d:f0:
75:3a:8b:78:77:49:7e:f0:05:4d:ef:2b:90:36:a4:
3b:34:53:89:08:11:ac:77:7c:d6:9a:98:6e:20:aa:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A5:B8:89:05:DA:3D:29:DB:73:C2:F5:3D:5D:0D:91:A1:B7:ED:CB
X509v3 Authority Key Identifier:
keyid:48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:51:cd:2e:95:1c:fa:71:fb:63:03:6f:97:d1:4b:d9:ba:24:
20:8a:46:6b:80:ea:03:a1:30:ef:ea:92:ce:aa:0f:15:42:47:
cd:b9:2c:13:48:8e:a7:f2:86:b9:cd:fc:e8:cc:91:e2:4e:05:
e4:3f:54:8a:75:9e:8d:41:ac:d1:bb:6e:03:bd:ed:0c:f8:6a:
37:1c:72:8e:4c:0a:2b:24:49:05:6c:12:41:65:49:5e:2f:aa:
2e:f7:07:bc:b8:f7:e0:0b:44:71:8d:3e:80:bf:ea:ce:6e:94:
04:93:92:31:92:a5:a8:34:f6:49:48:10:ff:00:84:3d:b6:4a:
2b:3c:a6:d5:4c:9e:79:70:8b:18:cb:d0:fd:8b:35:09:20:1a:
f4:ab:d9:88:53:07:cd:88:bb:cb:fa:5f:f4:db:d4:0b:db:b8:
fd:a1:a5:f5:62:86:70:b2:e3:6d:bb:b6:60:c6:1c:af:b9:3b:
b1:c7:89:04:6f:66:b0:af:94:b7:f0:2a:9b:48:35:75:f4:6b:
81:d9:bb:67:5a:fc:73:92:4c:37:52:1c:a9:02:d2:bb:93:0d:
9b:4e:87:d1:c9:e4:bd:eb:8c:cb:36:67:ef:ec:60:ef:4f:8b:
b9:24:1d:d3:79:a0:d5:77:76:ee:7b:a7:f1:92:7b:89:1e:f0:
be:a0:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:43 2026 by rpki-client