
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
File: SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft (raw, json)
Hash identifier: jXdzXEHrZu3KezFteoBud5g3AKz4CWQgeJgFjlFxiTA=
Subject key identifier: 8E:44:31:FC:7F:90:E2:FF:03:A2:42:C1:33:2C:7A:54:C9:9B:1A:43
Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
Certificate issuer: /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Certificate serial: 0CAA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
Manifest number: 0C9F
Signing time: Fri 06 Mar 2026 16:55:09 +0000
Manifest this update: Fri 06 Mar 2026 16:55:09 +0000
Manifest next update: Fri 13 Mar 2026 16:55:09 +0000
Files and hashes: 1: SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl (hash: a78d48Gs9vvoh+FN4yskHfM9E85tUOTWooHWNQQFquo=)
2: 16572A3CEB3511F08C2D5B303F6F56BC.roa (hash: 1y/5rrZjiZi/wou/2ExgTOGyybm/GQapVPwAdz5lbX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 16:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3242 (0xcaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Validity
Not Before: Mar 6 16:55:09 2026 GMT
Not After : Mar 13 16:55:09 2026 GMT
Subject: CN=69ab06ed-7f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:c3:b6:88:4b:b1:c9:64:3c:c3:8c:be:a7:
f1:7c:ef:f2:a9:99:47:3e:82:c0:ba:e7:9e:53:45:
9b:4c:18:fa:bd:6a:4e:fa:19:13:13:5d:f0:18:8c:
b6:1e:f5:42:ff:7b:85:46:af:d2:ec:d0:ff:ff:f3:
bc:02:05:03:4e:b1:16:d0:05:68:5b:4e:4e:a3:25:
83:d5:a3:d0:89:0d:d2:a4:01:db:de:ff:70:bc:4c:
a3:86:54:63:44:b5:7f:a6:ee:da:d2:50:63:7d:6e:
2f:62:96:c9:5e:e8:85:17:6f:13:94:82:81:35:59:
55:fe:82:66:17:da:61:16:b6:99:3a:3a:f9:ed:76:
db:64:11:5d:0b:fb:f5:d3:01:ba:bd:5c:66:06:78:
46:7e:7d:1c:00:f9:3a:05:77:d5:80:1f:c5:6b:a6:
21:ad:d4:0e:42:fb:e6:ca:d8:a2:c8:ff:42:a1:54:
1a:db:02:08:f3:81:e5:8d:45:ca:8d:42:f0:c0:7d:
81:29:7e:f0:8e:eb:88:1c:93:ed:4f:82:04:3e:ba:
28:c2:08:0e:94:a9:b0:67:7b:6c:39:52:42:15:a3:
4a:dc:70:08:e2:9b:d5:b5:66:c9:d8:15:c1:b9:45:
7a:29:0c:e5:6b:a9:f0:8f:45:1a:25:54:9c:6d:5b:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:31:FC:7F:90:E2:FF:03:A2:42:C1:33:2C:7A:54:C9:9B:1A:43
X509v3 Authority Key Identifier:
keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:47:d4:de:1f:24:21:0b:5d:7e:ac:63:ec:9b:c5:9d:6c:5c:
c8:42:4e:67:3e:9e:e8:fb:9e:77:79:01:ac:2f:dc:8a:76:33:
9a:9c:bc:04:37:15:97:92:92:8a:89:9e:6a:dd:28:ec:5d:82:
cc:4b:19:18:a2:7b:76:36:b4:ee:79:81:88:5b:9b:58:b2:7e:
23:60:3c:af:bd:e5:f8:eb:78:93:ca:6e:02:8c:e0:7b:e5:f5:
a0:c2:04:a1:4f:94:7a:e8:cc:2f:4d:5b:c3:6c:87:2e:ef:14:
15:cc:39:fa:76:fc:49:e1:c0:8b:c1:b7:50:21:b8:e1:11:94:
95:c3:f3:33:3f:7e:bd:84:90:a3:9c:c4:e0:14:18:a5:0d:2c:
cf:a5:04:a3:22:77:82:3b:cf:0f:e5:a7:d9:e3:a4:78:02:7a:
ca:bf:07:a3:c8:0f:70:fd:a8:fe:e6:a3:26:ba:f3:4b:51:92:
c4:ac:c6:5f:f0:bc:90:7f:c8:f2:53:5d:43:4e:23:bd:12:5d:
cd:12:66:20:9f:0e:f1:a8:70:34:94:33:fc:dd:9d:22:9b:3f:
00:8a:8c:34:60:02:fb:8d:43:16:ec:f2:cd:da:6f:72:e6:a2:
a8:d0:99:48:ff:d8:71:52:81:6c:57:56:f5:b8:b8:1f:43:0e:
a4:1b:bc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:39:01 2026 by rpki-client