
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File: SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier: oW+QI+mxc8C2oR7vZ9nWx7KF6uKNEibRAxGwZVbxIV0=
Subject key identifier: AD:EA:8F:0F:23:9E:DA:E1:35:DB:9E:35:06:67:1A:B8:FA:3C:B6:8B
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 055A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number: 0475
Signing time: Wed 11 Mar 2026 00:17:07 +0000
Manifest this update: Wed 11 Mar 2026 00:17:06 +0000
Manifest next update: Wed 18 Mar 2026 00:17:06 +0000
Files and hashes: 1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: ueyv09xCU4DoBL3XyJ215CpMLEzg4gdwgAjxOahWAgg=)
2: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
3: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
4: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: n7XrDdLRgIOzlZQtMfnZ1wiO99lQrB5PrhvdGG1ja78=)
5: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
6: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
7: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
8: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
9: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
10: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
11: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
12: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: RcSedgyQP0f/Mx0R7YzTVV6LUvz5MpJuolu8SeEYtAY=)
13: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
14: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 00:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1370 (0x55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Mar 11 00:17:06 2026 GMT
Not After : Mar 18 00:17:06 2026 GMT
Subject: CN=69b0b482-9cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:dd:6c:7f:08:cd:4d:39:20:a0:f0:b1:bf:
3f:61:3f:26:69:36:2a:74:2f:3b:f7:63:2e:45:ac:
ce:af:e1:bd:d5:7f:4d:f2:42:4a:30:3f:57:74:77:
62:89:2a:fb:b4:a7:66:94:45:f1:3c:0b:8c:d0:6a:
dd:cc:08:a2:67:cd:ef:d4:88:c0:31:fb:bb:1b:9e:
e1:ea:19:4a:19:a5:d7:af:3f:31:29:f4:64:5c:a6:
7b:cd:2a:b5:70:b3:3a:8b:3a:89:a3:49:be:a9:c0:
08:af:48:6b:99:08:76:0d:2e:46:14:ca:fa:40:3d:
45:6d:bd:1a:21:e5:25:d4:f7:9f:5a:da:f8:7e:ef:
16:60:51:82:2a:cf:55:92:86:c3:f8:83:8d:27:77:
3f:c4:51:e3:d1:62:c7:90:c1:b7:b4:b5:4e:37:1d:
87:2a:ec:d3:27:b7:52:bf:41:98:9f:ff:7b:bd:04:
dd:2b:64:8f:e5:09:83:ec:cb:9e:da:f6:f2:90:a1:
4c:64:1d:11:17:e4:6e:87:68:a2:64:7e:d2:19:39:
34:68:6d:18:dd:7a:4e:8c:b8:90:06:39:bf:52:2f:
c9:7b:cf:db:c7:8f:1f:90:81:af:35:21:0f:6c:ea:
41:d4:0e:50:7d:c0:16:08:0c:c9:56:83:94:b6:b2:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EA:8F:0F:23:9E:DA:E1:35:DB:9E:35:06:67:1A:B8:FA:3C:B6:8B
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:7c:c0:74:7d:02:2f:23:1d:0b:ed:a3:87:45:c7:d4:2c:58:
da:c9:47:81:58:ce:cf:ec:97:e2:56:01:fc:40:a9:76:5f:5e:
cc:13:b9:2f:a7:2c:fb:bf:20:79:cf:89:19:8e:08:c4:a5:fe:
47:6a:fc:35:93:e6:b4:b9:66:9b:ce:1c:b2:99:51:8c:1c:f1:
aa:5e:09:08:06:73:3b:e0:95:87:d7:66:6f:d7:09:c6:3a:6d:
d3:b7:3d:2a:5f:0f:f4:a6:b7:72:e3:33:b7:03:9a:67:9d:32:
e2:3c:10:68:e5:83:46:41:8e:75:5d:96:85:04:e3:32:80:02:
9f:2b:4e:2c:56:65:e7:50:20:0f:6f:e4:2a:15:61:4b:93:8c:
80:21:1c:12:39:f7:fc:20:b0:ec:20:25:e4:48:33:ae:19:25:
e1:e5:79:3c:bb:eb:e4:db:b2:df:e4:36:fa:85:08:06:95:38:
a7:b1:99:65:c3:4b:31:c6:c5:bb:7a:ff:14:7c:29:ea:75:02:
35:60:4e:7c:5b:d1:ad:6f:99:d5:f4:2a:02:f9:a1:6d:cd:6f:
74:f1:0e:c2:af:be:7f:ed:08:cb:a9:23:9a:ef:23:61:a6:78:
16:c2:5d:66:6f:80:25:b8:97:3b:3a:a4:25:d4:cf:bd:f0:f2:
e2:01:1e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 09:21:49 2026 by rpki-client