
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json)
Hash identifier: /dVd1qbDBjHv/VBO5LDB+jfi8cL+kCoOdSfMaIShoQ8=
Subject key identifier: 78:26:32:E6:17:DC:22:8C:99:25:00:8A:3B:02:5F:42:23:24:4F:B8
Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Certificate serial: 0240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
Manifest number: 023B
Signing time: Thu 21 May 2026 02:34:53 +0000
Manifest this update: Thu 21 May 2026 02:34:53 +0000
Manifest next update: Thu 28 May 2026 02:34:53 +0000
Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: 6lnBcF71aOG/lOMw0Vv/jSJH5YHCtSV43gihgBiWYVM=)
2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: nbWrxCDFQoo/aNFlk67YAqdBIRuq49WlvoXbRE0llls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:34:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Validity
Not Before: May 21 02:34:53 2026 GMT
Not After : May 28 02:34:53 2026 GMT
Subject: CN=6a0e6f4d-5140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:54:e4:a4:3b:8e:e9:64:c9:5d:2b:aa:19:
b2:a2:47:b2:5a:d7:b5:bd:85:53:60:22:b1:12:71:
5c:d2:b4:40:a2:55:5d:7b:24:59:10:4e:ff:83:19:
43:b2:4d:ac:5f:11:90:91:af:a9:93:63:69:ac:43:
71:38:89:2d:1e:73:9d:86:60:92:ce:55:8a:a3:9d:
df:ce:21:31:a8:68:f5:7e:ba:22:b6:f1:04:dc:c0:
06:bc:7b:eb:4c:3b:77:31:fe:e3:92:24:81:7c:32:
90:ff:96:16:86:d7:cd:76:2b:66:c2:08:7f:fe:c9:
5e:ca:9e:dd:26:86:4a:57:8e:0c:9f:18:e1:c0:50:
4b:02:57:08:ff:35:3a:9c:84:a7:57:8a:1e:a2:64:
ed:02:a8:4b:52:62:c8:94:00:b3:3e:b9:d5:a2:a2:
ee:66:dd:e1:ef:58:18:c1:70:08:50:16:cf:4f:5e:
c1:6c:f1:f0:cb:6b:2b:9f:73:5e:d7:12:28:df:94:
77:97:01:0d:8a:7f:c3:dd:60:60:d2:dc:c8:f4:3f:
30:73:9e:82:94:d5:45:a8:e6:58:c1:49:83:77:32:
5c:bc:a6:57:90:af:0d:de:6d:fc:6b:7a:ef:7e:0b:
94:94:1c:e3:53:7b:92:82:48:84:fe:b4:a2:7c:e7:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:26:32:E6:17:DC:22:8C:99:25:00:8A:3B:02:5F:42:23:24:4F:B8
X509v3 Authority Key Identifier:
keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:db:57:4b:8b:25:c0:87:a1:4e:02:f5:3a:e1:1b:95:f2:ac:
86:89:d1:6c:a7:1c:72:98:8b:6d:1c:55:82:a9:2f:18:aa:dd:
ec:19:ce:4c:38:3d:14:b0:ab:de:81:db:bf:3d:af:9b:29:66:
68:97:50:06:e9:8e:09:9e:d5:bd:85:20:eb:49:cb:63:73:49:
0d:08:92:0d:6d:15:e0:53:08:02:7b:19:77:b5:f7:f8:96:e4:
9a:f4:16:d4:e3:17:4e:13:ca:52:cf:84:6d:29:7c:64:27:3d:
93:00:67:2d:42:e5:35:4c:2a:ad:b5:3e:3b:49:e5:5c:ff:ab:
9a:97:0f:b5:fd:94:0a:d2:2e:41:93:09:ab:6f:08:cf:5a:f2:
4b:83:b3:29:48:2d:dc:c4:bd:f9:bc:e7:05:db:ef:a4:22:a0:
1f:02:54:f7:9d:25:4d:e1:1c:ce:af:8c:e1:5d:20:05:1c:61:
1b:31:3b:0e:56:4e:9d:8f:4e:f0:46:71:d7:d8:db:8a:e2:a2:
18:ca:db:74:ab:e6:41:bb:6a:bc:8c:11:e8:4c:4f:8d:12:c0:
cb:42:32:20:51:f8:ee:07:4b:fd:e4:0f:bb:5b:4b:ea:5e:71:
c4:e7:c9:42:7f:ca:8f:9b:2a:97:95:db:10:dd:22:b8:36:37:
ac:4c:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:54 2026 by rpki-client