
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json)
Hash identifier: JlRe6ErPEbgtYXynY1x+FCWy0ezof8xfurDt/rcEpR4=
Subject key identifier: AE:82:AF:1C:51:20:EC:8D:1C:65:F0:E0:87:E7:C0:C0:72:6B:CF:A8
Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA
Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
Manifest number: EC
Signing time: Fri 17 Apr 2026 06:08:43 +0000
Manifest this update: Fri 17 Apr 2026 06:08:43 +0000
Manifest next update: Fri 24 Apr 2026 06:08:43 +0000
Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: ELk8qwwP6E0UWeokn7yjH3Q5o1nRyF9g8StinnBioN4=)
2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: VY1rUPr6EXTZh6NWaqpR1v2JRKFtMHVjZuzu+EK7FeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl
rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA
Validity
Not Before: Apr 17 06:08:43 2026 GMT
Not After : Apr 24 06:08:43 2026 GMT
Subject: CN=69e1ce6b-2d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:14:7c:94:68:32:4c:0d:e1:f6:34:2e:84:
51:2e:32:0d:b3:2c:fb:79:01:77:05:25:c5:c1:bc:
b8:5c:9e:89:63:0f:08:d3:ee:de:66:8d:74:dc:36:
f7:d8:05:64:8f:cb:5d:04:70:0a:40:44:ed:25:5f:
b9:5c:28:6f:0e:7c:cc:d1:b5:01:cd:74:35:00:66:
0f:32:92:15:b0:24:86:f8:04:da:20:3d:25:d5:f6:
85:0e:46:15:85:56:fa:40:d0:50:b3:7a:23:55:d3:
d6:a3:72:42:47:2c:0f:2c:67:f4:1f:36:3d:9c:9d:
1b:80:4b:1a:d9:36:b4:cb:57:df:e4:d5:c5:83:40:
41:4c:96:75:f5:51:74:d3:0c:14:b0:22:8e:e6:2b:
2f:9b:01:fb:ea:d5:dc:8c:3c:28:f7:df:a2:0f:21:
9c:38:ba:30:0a:cd:7f:de:68:1b:81:61:46:bb:1c:
66:c1:70:3f:d6:2a:11:50:42:58:ba:1f:0b:3b:a4:
ed:5d:57:bd:17:be:2f:89:a3:f1:de:b3:e9:ce:05:
b5:5e:cd:94:54:7c:00:bf:ef:e8:f6:e8:e3:de:31:
4f:29:51:c9:52:48:a5:0b:a7:7a:45:8e:72:d0:8b:
96:8d:5b:42:c9:c2:d4:70:ac:0a:94:45:ad:6b:ad:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:82:AF:1C:51:20:EC:8D:1C:65:F0:E0:87:E7:C0:C0:72:6B:CF:A8
X509v3 Authority Key Identifier:
keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:7d:e3:7e:a5:ed:85:4c:fd:03:a1:7f:3a:62:32:41:ee:23:
88:3f:f8:16:f6:26:1b:43:e7:9c:c8:87:c3:dc:69:49:80:50:
0a:ab:de:96:f4:57:1f:40:64:9a:86:49:0e:30:78:61:be:b5:
33:cc:b8:db:cc:d6:aa:65:69:f4:5a:54:87:2b:55:1d:42:e5:
3e:f2:22:b8:08:1c:9c:a0:5b:25:e2:28:1a:f6:26:d5:6d:52:
68:7e:c4:a4:cb:60:54:0a:dd:56:35:0a:79:3d:8c:8b:6b:80:
1b:79:fb:48:b1:67:c0:4b:06:18:7c:d0:8a:11:02:29:a3:87:
78:62:c8:74:20:88:db:4c:b5:d1:60:83:d4:c3:62:79:4a:4a:
d3:17:a0:b7:9d:8b:dc:71:6f:13:a9:7d:6d:f1:bb:a6:02:46:
bc:4f:1c:40:4c:fe:09:0c:10:97:d5:9f:3e:c3:b7:2e:03:25:
94:9a:5c:95:93:8d:0f:b8:77:28:3c:21:e3:f4:a8:6e:eb:52:
17:b8:da:6e:1c:c7:18:54:4d:f4:b1:ec:2d:dc:2e:b3:65:f6:
f6:11:00:0b:ca:8f:39:19:c9:d1:00:a8:2c:39:00:33:61:78:
23:ce:a7:fc:ef:93:9b:5f:e0:aa:83:be:33:9c:b9:f9:06:44:
44:1b:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:24:04 2026 by rpki-client