
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json)
Hash identifier: KYnzJWjAEu1HXLwGSZlr/NJbweQ/bqMm4JjjN6UQd10=
Subject key identifier: B7:81:92:24:BC:2B:1D:57:7C:BC:84:E8:46:C7:C3:E7:79:54:05:B2
Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Certificate serial: 03BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
Manifest number: 03B6
Signing time: Wed 19 Aug 2026 00:57:45 +0000
Manifest this update: Wed 19 Aug 2026 00:57:44 +0000
Manifest next update: Wed 26 Aug 2026 00:57:44 +0000
Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: /ZA8tSz/uBxHg/Dpuri9LkxG1XxDo9kcSOcv/eov+GY=)
2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: ky7BpvXCWWvVGX/3oyVJJwDRQTX3DEgXUQn+49Yrj9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 956 (0x3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Validity
Not Before: Aug 19 00:57:44 2026 GMT
Not After : Aug 26 00:57:44 2026 GMT
Subject: CN=6a84ff89-b0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:2e:7b:a4:5f:91:d2:78:d2:17:be:4e:cd:
af:5e:79:80:2d:31:ae:55:ee:f4:bd:3a:73:e1:a8:
61:50:77:6e:03:3e:2c:c0:8d:88:e4:31:b6:d8:d8:
7e:5e:eb:44:9b:56:a9:27:ce:c3:b3:6d:14:45:56:
51:70:16:bd:ab:68:6a:8d:5a:e9:10:a8:50:4d:da:
18:d0:c4:d6:77:80:1f:8a:cb:c7:6c:b9:d6:1b:ab:
6e:8e:78:c8:d9:04:1e:e2:d1:74:0a:e7:9f:5b:d6:
85:58:f9:11:2a:cf:42:d8:89:67:27:d2:3f:d9:52:
a7:39:99:40:13:e4:30:91:b2:52:70:e0:00:3a:5a:
a7:c4:7b:6b:bb:f7:25:e7:5d:4b:f0:5b:b6:a8:7f:
84:d4:87:02:78:49:ed:16:d1:f0:a0:83:f5:b0:ec:
e6:70:f7:8e:38:a2:b2:4c:9b:76:fe:52:23:90:1a:
90:2c:ab:cb:f5:ca:de:d2:39:b8:44:f1:2d:f2:a8:
c1:a2:93:3e:c3:10:b0:71:06:43:73:38:be:44:0e:
ad:99:69:4d:83:ba:7a:1d:09:97:fe:be:24:86:75:
bd:07:e8:65:88:37:f9:94:ae:a0:8a:92:2c:0d:aa:
c5:18:b7:44:c0:22:5e:7a:03:de:46:6f:01:4c:01:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:81:92:24:BC:2B:1D:57:7C:BC:84:E8:46:C7:C3:E7:79:54:05:B2
X509v3 Authority Key Identifier:
keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:8a:5a:59:f5:f3:ae:c4:d2:96:d2:5a:ec:1e:8f:30:cf:25:
05:c2:d6:93:67:d0:56:ff:26:18:3b:ac:b8:9a:c9:66:5c:80:
26:71:72:3b:73:a1:e8:d0:d9:53:8b:88:ff:a2:5f:83:0f:51:
6b:a9:41:80:97:83:c9:95:eb:a1:27:56:4f:eb:00:4a:46:d0:
2b:fd:06:cc:b8:a7:7e:9d:26:1e:73:bf:89:7a:20:c0:a6:70:
01:21:a0:a3:69:34:2a:b1:ce:d6:cf:21:c7:4b:ec:3d:f5:58:
b2:e7:ac:2e:47:b7:03:10:2e:10:0d:c0:7a:e4:74:f8:e1:d9:
ad:c8:2a:d5:0d:b3:cd:9d:9b:e6:94:8d:37:eb:3b:3f:99:ad:
0b:15:f2:5c:69:f9:fd:9c:81:a6:12:9a:18:65:cd:40:c6:27:
d5:30:52:83:d9:e2:ce:de:98:03:7d:39:b9:25:14:95:d1:27:
31:a6:ce:0c:8e:da:4f:f0:f3:6e:88:d0:26:12:ee:6e:6e:e9:
17:2d:c2:55:19:d2:5f:c8:c0:63:79:db:89:62:82:21:45:92:
ef:9d:5c:c4:1a:16:8c:88:d9:e9:a9:65:ca:68:44:73:3f:24:
1b:c0:0a:cd:a1:f9:a0:ec:24:9b:be:0b:c6:d9:ae:15:2f:0c:
0b:fe:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:55 2026 by rpki-client