
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File: SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier: qrcM3OuDKaIba8IoX+ty8ZrJjD50nVuwuv/6bIzZxv4=
Subject key identifier: F8:E9:C4:05:A5:34:63:A5:BE:F7:38:A2:3F:30:33:0A:81:A5:A5:E8
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 0570
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number: 048B
Signing time: Thu 23 Apr 2026 00:42:42 +0000
Manifest this update: Thu 23 Apr 2026 00:42:42 +0000
Manifest next update: Thu 30 Apr 2026 00:42:42 +0000
Files and hashes: 1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: pSQV56iMQVtro/R23bSCSP3Kw1aq/wc2nEhcJzNahV8=)
2: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
3: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
4: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
5: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
6: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: n7XrDdLRgIOzlZQtMfnZ1wiO99lQrB5PrhvdGG1ja78=)
7: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
8: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: RcSedgyQP0f/Mx0R7YzTVV6LUvz5MpJuolu8SeEYtAY=)
9: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
10: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
11: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
12: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
13: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
14: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Apr 2026 00:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Apr 23 00:42:42 2026 GMT
Not After : Apr 30 00:42:42 2026 GMT
Subject: CN=69e96b02-4d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:c4:e6:70:d4:81:8b:48:aa:b9:b0:ab:9f:
1a:80:43:2f:89:b1:cc:8f:d7:62:3d:06:f7:20:4a:
9c:17:88:97:4b:11:d9:83:aa:47:19:0a:0e:24:00:
fb:88:55:79:d8:35:f5:b5:fc:c8:99:2b:69:6f:10:
ad:02:46:81:17:6d:8b:10:40:39:cf:be:bc:2c:b0:
cc:a5:a8:e5:19:5a:ea:c8:d6:e5:a1:ef:ed:36:4d:
2a:f2:98:59:0c:92:ec:f7:1d:c0:40:4a:9f:69:da:
d7:7b:70:14:ca:5c:6d:14:dd:3e:ae:50:64:7d:cf:
c4:42:6b:5e:7d:28:31:f1:f9:1f:3c:84:e1:1d:2e:
89:40:01:4c:e0:f5:04:ed:5d:20:fe:47:f0:22:c6:
4a:41:91:ce:ed:8a:1a:7d:28:52:99:33:d2:f6:54:
e9:6f:a5:e7:43:e9:4f:f6:e9:fc:34:e9:52:35:99:
48:0f:2f:75:b7:a5:2e:f4:ba:03:b1:9f:0e:de:d1:
53:6f:66:e4:1c:1d:2a:33:1b:1c:5a:fc:e5:0c:ad:
62:86:ac:85:37:8f:4e:a1:1a:d0:f3:ae:57:60:12:
40:b9:95:d5:b6:02:83:5d:3d:80:2f:eb:23:ac:3c:
43:e2:83:8f:47:24:a4:7e:1f:f8:0f:b0:44:bf:82:
3b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E9:C4:05:A5:34:63:A5:BE:F7:38:A2:3F:30:33:0A:81:A5:A5:E8
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:0d:55:4a:83:99:0e:88:b9:e4:7b:cb:c9:d7:72:dd:8f:a0:
55:cf:d7:1e:e9:3c:2b:72:d9:4a:89:f2:6a:6f:fb:0c:a2:f1:
64:c4:a8:c1:fd:ee:f9:65:8a:f0:59:02:f3:b6:6d:df:79:1b:
b5:60:7b:6d:9a:64:26:aa:8b:b2:d0:dd:e5:ae:a0:cc:e8:7e:
e4:a8:3b:88:2c:65:84:a1:25:9b:7f:43:a1:87:b7:26:ac:47:
d7:5f:c7:c6:83:8a:bf:38:00:f7:6c:c2:27:53:e0:3e:5a:89:
11:04:2b:61:1f:64:e8:1f:ba:05:25:4f:58:cb:b8:c3:0a:b7:
d1:b9:60:4a:5f:12:75:09:fb:f8:29:9e:25:3c:6f:e6:67:a4:
eb:f6:da:f5:b7:00:0b:a5:be:ce:8b:ea:80:ce:76:0d:72:1c:
f4:28:2e:54:b0:58:d4:4d:ab:da:0c:b9:19:ff:56:12:45:e6:
c9:ba:18:96:c4:c0:1a:64:b1:ee:67:93:8c:62:e5:25:2e:bd:
8b:90:13:14:77:9a:b5:38:88:fb:d1:fe:ab:cf:32:22:1b:4b:
a8:b3:65:c6:6e:ad:52:81:36:9e:76:60:f8:c1:96:da:16:7a:
61:7f:b4:50:62:03:44:ef:f9:ac:8f:81:8d:66:3d:02:dd:92:
ec:cd:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 07:59:36 2026 by rpki-client