
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
File: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft (raw, json)
Hash identifier: eb6/yyWUm4OFfFc9RV8YGNgcqU7vw3VkPbf67WZ8bVU=
Subject key identifier: 7B:30:47:42:16:94:46:DD:DA:E5:C0:BF:0B:27:33:F5:8F:FF:15:CA
Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
Certificate issuer: /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
Manifest number: F8
Signing time: Mon 05 Oct 2026 06:44:01 +0000
Manifest this update: Mon 05 Oct 2026 06:44:01 +0000
Manifest next update: Mon 12 Oct 2026 06:44:01 +0000
Files and hashes: 1: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl (hash: TYSNWIagW5kLYBnGTBtPluK/l8aV7iFJqfN6iHMWqxE=)
2: 850105504F3D11F0A0960F7CC4F9AE02.roa (hash: qNWHgfJsoNs5L5U5kNXNpJEP/6NUawEmBu4riDVc1MI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 06:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Validity
Not Before: Oct 5 06:44:01 2026 GMT
Not After : Oct 12 06:44:01 2026 GMT
Subject: CN=6ac34731-7b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:6e:9a:da:18:c0:c7:00:9b:5b:07:40:e4:
7d:1a:14:07:1b:d9:00:5e:25:cd:ad:78:a0:1f:04:
36:10:6a:66:03:d3:df:b0:1c:c2:39:ab:10:56:de:
21:f6:79:1d:75:f0:06:4c:e0:a6:fc:39:a3:12:8a:
e8:cf:54:56:f6:02:66:e3:d5:85:95:a3:93:5b:8c:
07:48:bc:b3:e9:d7:8e:d9:e7:3b:60:93:c9:d0:54:
6b:f9:52:37:b4:53:91:50:37:35:48:56:6d:2b:15:
8f:bd:19:d3:cc:29:d4:76:cf:60:08:f1:69:cf:8a:
ee:f4:f2:83:fa:4f:e8:30:3a:2a:70:9b:e7:30:f0:
5b:e5:5e:20:dc:4f:53:bb:c5:80:ca:73:f8:52:cb:
74:42:24:ea:bd:3b:3b:c5:db:08:14:41:45:14:25:
9c:3e:9c:26:41:ab:3d:c0:2d:ce:25:86:87:1e:96:
8c:65:7f:ea:81:5d:24:b5:18:6a:88:08:30:07:38:
b5:91:5c:60:43:88:28:52:d4:3d:e0:19:7c:cb:b9:
16:50:51:03:7f:f0:51:73:3b:04:d8:5f:d9:5e:57:
00:34:b3:6d:fa:fb:40:65:89:b5:69:75:db:bb:df:
35:76:9c:de:52:a7:f2:7d:50:df:b0:c1:fd:51:da:
d2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:30:47:42:16:94:46:DD:DA:E5:C0:BF:0B:27:33:F5:8F:FF:15:CA
X509v3 Authority Key Identifier:
keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:14:00:61:d9:1c:f6:1c:bb:03:c4:96:ce:0e:82:26:af:a2:
7e:24:5e:46:ec:8e:90:19:4c:af:cc:15:b5:55:27:97:d2:e2:
c3:24:3a:ad:06:f6:85:45:83:83:14:7e:59:44:4d:fe:c8:b5:
45:54:26:56:59:3e:1a:d0:4e:53:30:05:06:eb:7a:57:58:4d:
c4:bd:14:e4:c7:f3:01:06:c8:4c:a3:25:cb:a3:e2:ea:94:0a:
b3:e3:2c:8e:17:bd:cf:a0:66:96:57:bb:04:6b:e9:30:a4:fd:
dd:2c:fb:00:68:ab:3d:14:f7:fb:7e:47:d6:74:02:f0:2c:42:
c0:93:1e:08:25:6f:54:91:f6:f3:a5:1a:7f:f2:4f:69:73:a6:
78:52:23:77:c8:08:d4:88:65:46:65:1c:e0:0f:96:6d:2c:bb:
a3:b9:5b:ea:b0:f1:e1:88:82:57:40:c9:f8:e5:20:59:42:43:
f5:4f:8e:b9:0d:95:05:52:60:4e:2b:7f:44:a7:01:24:3a:cd:
17:e1:5c:2c:dd:b4:fb:6a:93:e6:c9:f3:3e:0d:5b:60:78:b9:
07:eb:d2:1b:e3:7b:df:7f:c9:58:6f:c9:4a:cb:43:99:f6:c7:
d4:ad:7e:30:fe:22:a1:3c:cc:4b:97:e3:ab:e6:51:32:7c:d2:
f9:61:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:51:24 2026 by rpki-client