
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json)
Hash identifier: 09ttMiJJbxx5TbAyHRAxjCbwbTZ1+UljmYVAwu+SRYc=
Subject key identifier: 7D:1B:9A:54:5D:B7:76:1A:FB:1A:41:AE:2A:5A:EE:2E:FD:D1:63:E3
Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE
Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE
Certificate serial: 10EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
Manifest number: 10D3
Signing time: Sat 04 Apr 2026 17:13:16 +0000
Manifest this update: Sat 04 Apr 2026 17:13:15 +0000
Manifest next update: Sat 11 Apr 2026 17:13:15 +0000
Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: bTKt+SbVafD2bZvxQFSAwEcji8MPDiXzXkxYkJgkoFE=)
2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: TwYATUTcZOqT2PE79Ayni601C0ew8QPNyjOGtV30Eds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl
rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4332 (0x10ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE
Validity
Not Before: Apr 4 17:13:15 2026 GMT
Not After : Apr 11 17:13:15 2026 GMT
Subject: CN=69d146ab-8920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:bd:6d:71:b0:1c:d6:7e:63:fb:8d:e5:52:
39:e5:56:f4:cc:b4:e5:73:af:5e:5d:3c:1e:18:67:
6e:40:70:98:67:dd:f6:94:45:9c:b0:49:e1:92:31:
87:f2:7a:ea:c0:08:22:e1:68:54:f3:c0:75:5f:24:
9d:78:9d:c7:2a:f9:60:9f:0a:38:27:de:19:4b:9f:
09:21:81:78:cc:14:04:83:8d:e3:7a:6a:95:1a:e2:
70:81:c5:b1:b0:ac:67:c3:c8:19:51:a1:b6:86:46:
9a:11:44:a4:10:09:e5:4a:2d:2d:d2:70:ac:13:51:
65:87:36:fa:34:ed:2e:53:7a:6e:ef:52:b1:4d:ac:
29:7e:93:3a:b4:23:14:dd:52:28:dd:9c:2c:7c:dd:
42:aa:a4:14:08:27:06:b9:a2:ef:66:70:ab:5e:e3:
ec:e5:ae:5f:64:f7:cc:6b:d0:e5:b9:e7:f6:d6:5d:
a3:e2:b1:72:44:77:fb:fd:41:ed:77:78:03:f4:c4:
73:ec:72:af:11:90:9c:7b:fb:90:44:78:08:1a:25:
8f:37:9e:e7:e4:8c:41:7d:55:96:f2:95:19:c2:6e:
92:37:0d:d4:2f:3c:c5:66:18:fb:40:8e:49:0b:82:
99:31:81:50:42:8c:01:e8:1a:a0:fb:bd:7e:50:f2:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1B:9A:54:5D:B7:76:1A:FB:1A:41:AE:2A:5A:EE:2E:FD:D1:63:E3
X509v3 Authority Key Identifier:
keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:95:2e:1b:f3:40:21:c4:f0:20:f5:9e:d6:25:26:2d:73:0c:
ee:64:e6:fb:33:4e:e4:c3:5a:41:ef:fe:f0:bb:4e:00:b4:1c:
d9:f9:f7:aa:fd:de:0e:0d:29:ea:b4:3a:35:7a:e4:da:87:3c:
46:2a:66:fc:a4:3f:16:71:24:97:ae:6e:e8:fd:59:53:2c:6f:
e7:43:22:c4:79:47:0b:29:da:16:4c:6c:ed:e9:97:e3:fd:dc:
f1:88:22:a2:72:d3:ce:d8:82:85:9c:db:bf:60:92:1d:63:e2:
e3:7c:40:55:40:2c:b5:0e:29:02:60:56:d9:15:91:b1:f9:d1:
a6:65:35:c6:26:69:35:4c:03:7c:75:95:23:43:55:09:38:d9:
d2:e7:f2:b4:d6:40:4f:75:c1:c5:fb:14:73:10:cf:95:ef:49:
0e:e8:c7:3b:11:74:1f:06:48:e9:43:74:d7:f0:a0:7f:51:93:
59:e7:ba:96:d9:2f:b6:20:ab:f9:17:8c:41:a7:1b:7f:c1:11:
1e:53:8c:c7:80:af:05:7f:1f:a3:91:a9:25:73:d7:d2:a4:87:
08:a9:76:d1:a3:fe:f8:70:a9:cc:3c:b9:74:fa:f6:8e:3a:a2:
10:cd:98:47:f5:92:c5:0d:32:d4:ed:95:d7:02:27:1f:a0:e8:
5b:08:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:37 2026 by rpki-client