
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
File: SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft (raw, json)
Hash identifier: D9gMtWDDk4MdhSh8/ePv7Dkp1TZ8iu5k4f00bcNy7U4=
Subject key identifier: 05:16:C0:0F:66:EA:54:6A:B4:BD:2D:DA:3F:C4:4E:FE:2B:05:3F:BF
Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
Certificate issuer: /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Certificate serial: 0D24
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
Manifest number: 0D18
Signing time: Mon 26 Oct 2026 17:01:15 +0000
Manifest this update: Mon 26 Oct 2026 17:01:14 +0000
Manifest next update: Mon 02 Nov 2026 17:01:14 +0000
Files and hashes: 1: SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl (hash: s+zUY4Qa15VwYTpnyanZPZ/wZpVaQvRlWwyXC+wB/cI=)
2: 16572A3CEB3511F08C2D5B303F6F56BC.roa (hash: EYjWGbva1pZVNsTwphYUGW3QU2qMX7vEwKRCgoGqRuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3364 (0xd24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Validity
Not Before: Oct 26 17:01:14 2026 GMT
Not After : Nov 2 17:01:14 2026 GMT
Subject: CN=6adf875b-f0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:27:75:09:b1:35:ad:d9:4f:41:69:91:1a:
45:6d:a3:26:a6:6d:39:7e:00:d3:0c:1c:42:19:1d:
5e:af:a9:fa:17:c8:b1:71:38:43:81:e1:8f:c0:04:
cb:01:34:df:b5:6b:dc:01:5e:14:8f:06:1d:c2:e5:
30:9e:fd:5f:66:38:f1:31:66:61:89:3a:9c:59:c1:
43:44:71:c4:bd:43:53:ae:46:78:03:cc:b8:61:16:
d5:15:be:8f:cc:ea:11:90:6b:24:aa:cd:75:c1:92:
1d:8e:80:52:42:6c:e4:32:62:b8:71:92:4d:f2:e6:
cc:68:42:5d:d2:ee:68:9b:f6:8f:e9:dc:12:67:e5:
8b:bb:98:22:99:31:a2:a0:5b:7a:45:f8:4d:dc:23:
2b:2c:29:7c:0a:e4:b9:f6:b9:0a:e3:aa:7f:d5:c4:
ef:e7:4c:58:2d:8d:b0:de:8b:a8:da:b1:cf:29:17:
93:f3:e3:6b:f2:64:41:c9:c5:0c:e6:e0:33:90:6f:
f7:0e:d0:30:36:a2:74:a9:a9:33:87:3b:34:27:c4:
74:a7:c8:26:4b:8c:d2:c9:ab:17:15:df:40:96:f4:
18:a5:bb:fb:09:64:fb:07:2d:69:2c:b1:24:a8:a7:
7b:ce:23:36:29:fe:01:4a:89:79:c2:bf:3d:91:e1:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:16:C0:0F:66:EA:54:6A:B4:BD:2D:DA:3F:C4:4E:FE:2B:05:3F:BF
X509v3 Authority Key Identifier:
keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:52:eb:41:b6:b6:e4:25:71:68:3b:90:9e:5e:49:54:79:1e:
e6:bd:e6:f2:2a:1c:91:44:10:ec:2f:56:10:42:8f:0e:95:5f:
43:a1:82:c0:bd:1a:e4:dd:0b:1e:aa:00:b5:ff:7b:99:e5:29:
b3:fa:84:3a:d9:f9:ab:64:89:23:b5:9b:a4:ab:b0:35:62:97:
3e:d3:a7:44:5f:6d:3e:af:05:31:2c:be:f5:e0:f3:49:20:34:
65:24:2d:2c:74:23:b9:1e:6a:50:8c:cd:70:82:cf:9c:02:8a:
1e:4a:28:bf:27:0d:e5:4c:85:84:3f:88:2d:7e:f8:54:27:24:
0b:76:07:ae:b9:2a:3c:90:33:63:dd:29:d0:fe:a4:7c:8d:4b:
80:da:61:20:04:3e:f4:f3:8a:c7:f7:3c:4f:e1:b5:3f:1f:fd:
8e:5a:2f:f2:19:40:81:b2:b0:d9:b6:af:ea:c3:9c:53:da:45:
33:92:01:57:0c:e4:cb:89:95:60:7e:3b:a4:ac:21:59:3b:50:
9a:db:3b:de:05:b6:97:8d:2c:46:ac:ae:f5:ff:a3:66:a1:28:
72:45:c0:a7:20:b2:e7:06:f4:3b:4d:f2:2f:48:c4:99:56:f7:
fd:ef:2f:af:aa:3e:4b:97:7e:59:4f:48:1c:40:32:4a:85:63:
d4:42:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:09:45 2026 by rpki-client