
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File: SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier: pxWP46GHm+t82bEfbjvG4oN8CcWZ3xxhY2fHl66+uyQ=
Subject key identifier: 4F:65:E4:B0:4D:1B:63:A1:89:1C:DF:4C:2A:02:04:53:43:62:DB:C5
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 056F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number: 048A
Signing time: Tue 21 Apr 2026 00:39:11 +0000
Manifest this update: Tue 21 Apr 2026 00:39:10 +0000
Manifest next update: Tue 28 Apr 2026 00:39:10 +0000
Files and hashes: 1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: 3hqnQDzk41W1MGgZLRlrHw31B7FBqBB35vdxQplN/FQ=)
2: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
3: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
4: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
5: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
6: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
7: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: n7XrDdLRgIOzlZQtMfnZ1wiO99lQrB5PrhvdGG1ja78=)
8: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
9: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
10: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
11: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: RcSedgyQP0f/Mx0R7YzTVV6LUvz5MpJuolu8SeEYtAY=)
12: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
13: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
14: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 00:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1391 (0x56f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Apr 21 00:39:10 2026 GMT
Not After : Apr 28 00:39:10 2026 GMT
Subject: CN=69e6c72e-0d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:53:cd:1f:c5:be:a1:e8:6c:de:af:3b:64:
43:18:7a:8a:d1:8c:a1:1a:dd:a1:25:78:35:40:bd:
11:38:7a:59:83:a0:c0:75:f8:40:e9:b1:7d:28:5d:
5d:21:81:52:96:ad:6b:c7:4f:ce:15:ea:54:15:dd:
b3:85:43:df:bd:a1:dd:0a:8d:74:c2:11:a9:56:e6:
48:97:c8:f9:97:54:55:4c:74:42:d1:b9:92:87:aa:
93:95:89:f5:69:b3:6d:92:5e:6b:f8:e4:4c:47:ab:
01:20:f9:9b:ca:2a:f5:86:59:d3:1a:16:9f:d3:08:
e2:88:4d:f3:59:4d:e3:cc:83:75:64:d6:19:9c:ca:
5e:eb:78:7a:0c:f5:85:e8:0a:63:c7:06:c2:b0:8e:
ec:a6:5c:b0:ce:8c:56:67:40:45:72:85:45:97:a4:
71:9a:ab:19:89:4c:d7:a0:7e:9b:36:54:88:2b:5e:
9b:c1:4f:6c:db:86:ea:36:19:e5:91:b6:56:7d:59:
2f:91:d3:e5:57:7d:23:48:77:82:19:06:a1:34:73:
19:3f:5e:49:c8:60:37:a0:5c:12:c5:74:60:c8:bb:
57:2c:a1:7c:7b:2f:8c:a7:f1:29:d7:36:72:05:b9:
7f:36:fb:e8:d1:aa:00:cd:b3:d6:31:cb:6c:7b:4f:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:65:E4:B0:4D:1B:63:A1:89:1C:DF:4C:2A:02:04:53:43:62:DB:C5
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:5e:72:09:20:5b:07:ae:21:c1:ec:e0:f6:39:55:10:6f:0f:
e3:c6:93:c8:06:d7:92:9d:9f:51:5b:71:74:88:62:aa:b9:77:
66:f8:3a:f9:3a:f7:b6:17:74:c2:38:15:c1:5b:49:eb:b0:ad:
22:0d:fc:5b:84:a7:92:f1:f1:25:df:85:d4:3a:c4:2d:ac:2a:
3a:ef:b6:ad:e5:f3:ab:26:11:13:58:d5:f4:2f:d1:b9:0b:4a:
cf:79:33:b7:9b:21:49:30:79:9f:b2:04:98:7f:cf:19:a0:62:
f0:05:6b:a4:af:36:57:30:60:aa:0e:28:9a:33:01:b5:b7:11:
01:55:cf:10:a5:55:0b:90:8e:6e:0e:d0:47:99:e1:5d:66:4d:
e5:14:50:8a:51:5e:41:99:e5:24:d2:97:c8:ae:8e:15:42:ea:
a2:8f:a0:f8:4b:aa:3c:c6:90:59:b1:3c:aa:ca:1f:d5:f0:47:
88:3c:95:19:5b:75:ee:23:4c:52:81:c2:03:61:87:e1:3a:41:
1c:3d:f3:53:30:55:a6:90:ba:13:d0:dd:4f:d1:e2:4a:d8:8c:
b1:0c:2b:1c:ce:52:f0:43:28:30:1c:69:28:4a:37:64:59:ea:
07:98:21:98:e7:ef:99:63:40:b2:41:65:2d:f4:da:9c:bc:bb:
5d:6b:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 15:35:16 2026 by rpki-client