
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
File: SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft (raw, json)
Hash identifier: /gaYupzKrt+cL6kixg43EVyhpNPKt7Hw1KPjEPaCLuo=
Subject key identifier: EC:53:F7:A8:69:9B:21:6C:34:C0:1A:D1:EC:D8:C8:39:68:28:3F:6F
Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
Certificate issuer: /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Certificate serial: 0CC1
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
Manifest number: 0CB6
Signing time: Mon 20 Apr 2026 17:00:57 +0000
Manifest this update: Mon 20 Apr 2026 17:00:57 +0000
Manifest next update: Mon 27 Apr 2026 17:00:57 +0000
Files and hashes: 1: SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl (hash: JrmV2HbBHTZ5t8s3tGkjpiob+0OqtRdDw6vfUcEFRdE=)
2: 16572A3CEB3511F08C2D5B303F6F56BC.roa (hash: 1y/5rrZjiZi/wou/2ExgTOGyybm/GQapVPwAdz5lbX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3265 (0xcc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Validity
Not Before: Apr 20 17:00:57 2026 GMT
Not After : Apr 27 17:00:57 2026 GMT
Subject: CN=69e65bc9-43c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:ac:84:1c:b9:6d:18:11:db:94:9b:b3:85:
ad:f7:1d:6c:c5:7d:57:09:78:8c:8c:b5:cd:53:d1:
85:72:65:a1:33:49:dd:c8:61:39:b7:b5:6a:12:e9:
4e:bd:22:6c:df:9a:2d:51:c9:de:c9:6b:64:e6:d3:
05:80:19:a9:3c:b4:fb:ea:dd:ea:8a:b0:8a:97:1e:
79:e0:7a:a6:8a:68:19:84:1f:ea:68:35:8a:69:61:
03:f2:fd:e7:ae:61:13:ec:62:e3:3f:5d:ba:35:4a:
54:bd:1b:f0:f1:22:0d:16:a9:71:1c:89:49:37:ae:
4c:ef:4d:e6:01:4b:ac:b2:2a:6b:3e:74:3e:75:1f:
dd:18:79:b6:2b:ae:8d:0e:8f:cd:29:e8:b2:41:d9:
40:04:82:99:af:a4:86:50:71:4e:34:5c:d1:72:66:
74:45:da:5b:26:d2:8e:d8:69:c6:0e:9b:3a:4a:12:
df:d6:d5:2d:2e:e0:1b:2e:6f:e0:21:2f:a9:10:84:
87:72:a1:f7:0e:ca:59:fd:20:33:48:ee:08:51:00:
a4:2d:45:f4:5b:0b:93:3c:03:51:bf:92:2b:5c:ef:
c6:24:ea:23:1f:e9:d0:ae:6c:61:02:bb:18:24:e5:
ec:01:42:39:d3:8c:d3:be:11:59:4c:78:56:4d:48:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:53:F7:A8:69:9B:21:6C:34:C0:1A:D1:EC:D8:C8:39:68:28:3F:6F
X509v3 Authority Key Identifier:
keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a5:d9:43:18:38:4b:f2:08:3a:6a:b7:57:30:19:98:71:c4:
63:94:a4:8b:db:d7:52:3d:fb:d3:e6:a7:3b:22:03:72:09:3e:
b0:dd:e0:21:b5:1a:33:02:46:8a:20:12:64:9e:53:d2:21:7e:
c0:23:d9:2d:68:15:be:c1:6a:97:e9:60:90:2c:bf:92:28:e2:
01:39:4e:21:2f:0c:dd:90:50:9b:fe:09:71:57:b0:7c:4b:ee:
f8:fb:10:65:ec:4e:92:ef:f7:47:33:ba:b6:59:54:4c:cb:ec:
2d:d8:6d:39:8b:e9:34:f5:d1:12:f8:74:67:f2:b7:5e:42:bc:
11:62:2a:ea:b1:7c:cc:21:b1:41:b4:65:de:ef:6f:e0:ee:0a:
57:b3:d1:77:e7:7d:d3:9f:d0:52:56:17:76:d7:4f:35:5c:94:
5c:64:ff:b6:02:d4:b4:87:45:5f:a6:69:00:78:b0:bf:18:6f:
1d:f7:26:91:30:c0:ed:43:93:f1:cd:7d:ab:90:c2:d2:07:7a:
43:93:71:d0:eb:28:ae:e1:bd:59:54:69:94:60:d9:25:f6:c6:
40:f4:5a:69:fd:ce:df:79:bd:c6:04:02:a1:2f:f5:14:9a:be:
02:e5:e4:72:4f:38:94:b3:81:32:87:ee:0d:16:65:fb:29:b7:
80:f3:a1:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDREYxMTAvBgNVBAUTKDQ4NTJFODcyNkMxNDQ4QTEwNDBDQ0ZBMDQzQjgzMTRB
QUU0QzRFOUEwHhcNMjYwNDIwMTcwMDU3WhcNMjYwNDI3MTcwMDU3WjAYMRYwFAYD
VQQDEw02OWU2NWJjOS00M2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0jishBy5bRgR25Sbs4Wt9x1sxX1XCXiMjLXNU9GFcmWhM0ndyGE5t7VqEulO
vSJs35otUcneyWtk5tMFgBmpPLT76t3qirCKlx554HqmimgZhB/qaDWKaWED8v3n
rmET7GLjP126NUpUvRvw8SINFqlxHIlJN65M703mAUussiprPnQ+dR/dGHm2K66N
Do/NKeiyQdlABIKZr6SGUHFONFzRcmZ0RdpbJtKO2GnGDps6ShLf1tUtLuAbLm/g
IS+pEISHcqH3DspZ/SAzSO4IUQCkLUX0WwuTPANRv5IrXO/GJOojH+nQrmxhArsY
JOXsAUI504zTvhFZTHhWTUiSdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxT96hp
myFsNMAa0ezYyDloKD9vMB8GA1UdIwQYMBaAFEhS6HJsFEihBAzPoEO4MUquTE6a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9DMUNCMkRGMjEw
RDgxMUVBOUJEMUE1NURDNEY5QUUwMi9TRkxvY213VVNLRUVETS1nUTdneFNxNU1U
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1NGTG9jbXdVU0tFRURNLWdRN2d4U3E1TVRwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkNERi9DMUNCMkRGMjEwRDgxMUVBOUJEMUE1NURDNEY5QUUwMi9TRkxvY213VVNL
RUVETS1nUTdneFNxNU1UcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD6XZQxg4S/IIOmq3VzAZmHHEY5Ski9vXUj370+anOyIDcgk+sN3gIbUaMwJG
iiASZJ5T0iF+wCPZLWgVvsFql+lgkCy/kijiATlOIS8M3ZBQm/4JcVewfEvu+PsQ
ZexOku/3RzO6tllUTMvsLdhtOYvpNPXREvh0Z/K3XkK8EWIq6rF8zCGxQbRl3u9v
4O4KV7PRd+d905/QUlYXdtdPNVyUXGT/tgLUtIdFX6ZpAHiwvxhvHfcmkTDA7UOT
8c19q5DC0gd6Q5Nx0OsoruG9WVRplGDZJfbGQPRaaf3O33m9xgQCoS/1FJq+AuXk
ck84lLOBMofuDRZl+ym3gPOhPQ==
-----END CERTIFICATE-----
Generated at Tue Apr 21 23:05:53 2026 by rpki-client