
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
File: snbxWm1Kl8SBkekr0WYfNovvIeQ.mft (raw, json)
Hash identifier: GaXy3OB3jP5fV7PXDh+uVpVqKXB6Gy0LS6cdMW9DLi4=
Subject key identifier: 4A:D6:46:79:E8:C0:C8:E0:BD:BE:11:04:9C:CA:76:5C:8C:08:93:BC
Authority key identifier: B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4
Certificate issuer: /CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
Manifest number: 0141
Signing time: Tue 23 Jun 2026 05:37:22 +0000
Manifest this update: Tue 23 Jun 2026 05:37:22 +0000
Manifest next update: Tue 30 Jun 2026 05:37:22 +0000
Files and hashes: 1: snbxWm1Kl8SBkekr0WYfNovvIeQ.crl (hash: n0cVP2dpoICKNcDGIsEFg2xgHZ3zQ0ZKs727IMRbav0=)
2: 3E4B01008BDA11EFA4A11684C4F9AE02.roa (hash: efzaqQoS8xAy0qR24miaNeo4rUHDpnVE5YQrIw9jbAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl
rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 05:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B37C4, serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4
Validity
Not Before: Jun 23 05:37:22 2026 GMT
Not After : Jun 30 05:37:22 2026 GMT
Subject: CN=6a3a1b92-0753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:ef:77:4c:b0:a7:49:c5:9b:1d:39:aa:e7:
c3:53:ee:d8:68:3b:10:ff:44:ee:61:42:72:9e:1d:
69:d8:03:3e:8d:08:a6:ba:fb:93:0c:ed:c7:3e:55:
d7:33:21:76:bd:ce:a8:1d:37:e8:32:ee:91:9a:26:
ad:c7:e2:92:8d:72:fd:f9:08:0f:8e:18:e8:eb:5d:
c6:34:25:2d:a0:e5:80:eb:28:65:f4:78:a9:30:39:
39:01:8c:d6:7f:f5:ad:13:75:7e:2f:52:b2:93:df:
05:83:04:f1:64:56:0a:0f:df:06:79:0f:95:2d:7d:
9d:c6:64:4d:c4:6e:43:de:c4:03:fe:fe:0c:32:2c:
80:cb:1e:e1:dc:2a:4d:b9:ca:be:a1:08:54:b4:32:
08:b1:04:a3:d9:ca:74:0d:c6:c9:d7:ee:4a:90:35:
52:e1:76:b4:8f:ce:d9:f2:1d:1d:8d:e0:30:b7:11:
e9:29:24:10:c6:d8:ec:26:e3:cb:97:43:77:cb:6e:
41:5c:1d:76:b7:5d:79:38:fd:74:01:6b:1b:25:ec:
e2:ce:ae:84:c1:a7:d4:74:17:0b:75:ca:70:7b:35:
4b:f3:45:3d:28:cd:8c:ba:f8:76:94:29:a4:d0:ab:
ff:60:c6:01:61:e6:7b:21:5c:32:8b:22:96:01:fe:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D6:46:79:E8:C0:C8:E0:BD:BE:11:04:9C:CA:76:5C:8C:08:93:BC
X509v3 Authority Key Identifier:
keyid:B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:e7:19:8f:c4:12:5b:f5:5a:7c:cb:06:76:41:66:53:66:12:
18:4e:ea:e3:26:30:d4:e5:69:a9:cb:a3:2a:8f:84:6f:81:f9:
48:93:b2:fb:0c:a7:d7:4a:25:81:64:0b:f3:14:60:3c:6e:8c:
16:99:57:ad:7c:b7:85:20:c6:1a:99:98:a0:74:b1:ad:f3:35:
9d:99:d4:04:dc:b2:06:8a:ab:b4:ea:11:31:71:12:63:e5:2c:
2e:29:fd:22:b8:78:d5:a2:b3:b8:41:69:21:0c:24:af:86:62:
ca:95:73:c6:c0:0a:ca:54:cc:ab:8d:02:4a:60:1d:65:c4:6f:
2d:b7:a4:31:75:bc:4c:ff:bc:f3:58:fc:91:4c:f5:c9:7b:10:
cb:c6:99:30:bc:33:df:88:61:ce:87:7a:7f:ed:3f:be:ca:e2:
db:6f:43:f5:a4:c8:d8:6b:e0:04:6a:2c:39:4e:da:02:5d:d7:
39:76:4e:8a:5c:aa:29:53:6e:74:0c:d9:64:ac:a4:86:e7:ad:
c7:7e:63:08:ef:92:b5:5a:d3:41:54:6d:d4:b8:61:13:b5:28:
c6:36:9a:1d:60:ec:cb:05:03:06:29:28:aa:25:e1:e0:2d:b4:
05:42:ed:5f:64:bd:8b:7a:ed:e0:05:89:55:8e:44:7a:ab:b5:
78:f9:77:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:31 2026 by rpki-client