
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json)
Hash identifier: Rgqe79zsgBZX4FOwJOgkaNay+49k29VjkfG8XmEsBIY=
Subject key identifier: 0A:A9:7C:05:29:23:51:F3:77:23:EE:3C:33:91:47:24:06:C7:7C:CD
Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
Manifest number: 0224
Signing time: Sun 05 Apr 2026 02:18:26 +0000
Manifest this update: Sun 05 Apr 2026 02:18:25 +0000
Manifest next update: Sun 12 Apr 2026 02:18:25 +0000
Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: L1I8L+cLqj5smJID/PdoIYHmVDbrlxkXIFOhhKGAJq4=)
2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: nbWrxCDFQoo/aNFlk67YAqdBIRuq49WlvoXbRE0llls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Validity
Not Before: Apr 5 02:18:25 2026 GMT
Not After : Apr 12 02:18:25 2026 GMT
Subject: CN=69d1c672-d905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:48:0f:ae:33:b6:d4:0e:82:e9:45:c3:42:
2f:2c:22:6a:b2:00:33:23:a2:48:5c:3d:4a:81:01:
eb:ca:94:73:a9:c9:cb:b4:20:1a:43:84:8e:f4:b6:
97:df:50:76:3f:7a:7e:74:12:e1:b2:a0:a8:a2:48:
97:34:f5:8c:19:6d:76:26:9c:c7:57:c6:64:e2:75:
e8:0e:55:8e:bf:d5:6a:c6:5f:35:40:0f:cb:42:f5:
74:46:7e:28:3b:6a:55:c0:d5:49:38:fe:72:e0:9f:
66:d6:10:ec:f4:e4:2c:37:3c:db:cc:fa:62:0d:fe:
3e:dd:9f:4c:24:b8:be:13:c3:8d:40:bf:0c:45:4a:
75:03:7a:cd:ee:88:85:f7:93:fb:98:89:8e:13:fd:
93:bf:54:ae:2d:0d:71:fb:11:d0:30:5e:83:d1:8e:
5d:41:05:18:d4:14:de:67:71:e4:f6:c4:91:03:2d:
b1:3a:5a:11:6e:76:58:ca:56:39:b0:ca:0c:60:6f:
9a:87:eb:02:44:8f:4c:e4:6e:cd:e2:eb:84:26:13:
dc:86:73:91:d4:7f:eb:f5:c8:7f:4f:ec:72:6a:ef:
5b:a9:23:39:44:1b:9f:98:ba:35:47:8f:ca:64:cc:
e3:3e:eb:3e:cb:5b:82:d7:00:33:34:e4:6f:1a:56:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A9:7C:05:29:23:51:F3:77:23:EE:3C:33:91:47:24:06:C7:7C:CD
X509v3 Authority Key Identifier:
keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:4b:7f:0d:d5:2b:9d:05:ac:3b:9e:07:cb:87:09:83:dd:e8:
ac:40:0c:f5:47:a9:c6:08:37:fe:df:79:16:f6:fa:98:6f:90:
66:3d:ed:55:46:b7:e8:28:a2:17:96:34:be:89:7d:2f:44:cb:
51:63:c6:df:82:6a:4b:04:0f:69:15:e3:9e:dc:c7:93:e5:2a:
e9:48:76:c1:db:f3:c4:91:8b:3f:04:6c:99:fd:b9:75:c8:5f:
d2:3e:4e:60:ca:82:3c:fd:27:22:ce:34:a9:ec:2c:c9:6e:f0:
c3:10:cf:b1:8c:2e:a6:2c:52:5b:f5:5b:05:2d:34:58:1a:68:
32:fe:d2:a5:56:d0:55:a9:06:7b:11:ef:d3:23:62:0d:46:92:
f9:95:c2:e8:8b:23:12:12:91:4a:9d:10:90:b2:18:5f:36:da:
4c:8a:5c:75:7a:7b:19:dd:26:72:25:6a:97:7f:8e:f4:41:4a:
70:ec:d8:f6:44:12:9c:55:0e:e9:bd:0c:10:f9:d7:a6:03:a2:
83:2a:ee:2f:0e:0a:e8:f5:72:01:5f:7e:ce:77:d6:49:69:07:
6a:85:63:03:c0:be:44:6b:49:a1:10:48:df:e5:35:31:9c:45:
d4:1b:49:ce:b1:ae:11:75:f9:2a:fd:e5:a9:0f:a1:72:37:9a:
b5:2f:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:28 2026 by rpki-client