
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
File: SBcgosjubOySR3dhkymcEP63ykQ.mft (raw, json)
Hash identifier: m8tUzvdCSZkl5TV96CKElk2LfFzamOppGEmsD5EUM/U=
Subject key identifier: 69:85:D3:F5:F1:B0:1D:FB:12:11:E0:28:FC:52:0E:BB:5E:91:37:D0
Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44
Certificate issuer: /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
Manifest number: 01F4
Signing time: Tue 23 Jun 2026 03:27:52 +0000
Manifest this update: Tue 23 Jun 2026 03:27:51 +0000
Manifest next update: Tue 30 Jun 2026 03:27:51 +0000
Files and hashes: 1: SBcgosjubOySR3dhkymcEP63ykQ.crl (hash: wTe/zM2k6CtG17xi7gxEF3M68YJt6YxYni4VKmk3Kf0=)
2: A38F041873C011EEB1A68245C4F9AE02.roa (hash: HPmVyYKtLcFExM8piBe7+ZZtOvggOUmjJGRPn2DOqcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl
rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 03:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD2E3, serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
Validity
Not Before: Jun 23 03:27:51 2026 GMT
Not After : Jun 30 03:27:51 2026 GMT
Subject: CN=6a39fd37-6082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:9f:66:a4:6c:b7:c3:ab:60:c2:8b:91:d6:
2b:6a:3f:8a:aa:e1:a3:4e:9a:39:dc:34:28:30:52:
dc:eb:98:99:ae:95:5d:3a:34:52:fc:c3:35:a3:68:
04:91:ad:f2:61:31:70:ac:2b:fd:11:2d:89:e1:2c:
97:9c:7a:ff:48:52:bd:0e:cb:1d:4f:3a:b2:05:65:
6e:c0:da:9c:ec:9c:bb:41:8e:26:e4:72:f4:90:7e:
9d:25:2d:7c:3b:46:99:e1:5f:ea:d2:69:7f:70:2f:
4f:7d:c9:4c:9b:63:a9:6b:41:ba:02:59:d6:05:1f:
1b:47:5e:54:41:5d:29:38:77:bc:1b:b8:32:7b:07:
77:44:48:25:02:b5:b7:91:62:d0:8f:78:36:1d:45:
a6:a1:60:fe:e7:a2:e4:65:a0:95:b4:49:ff:f1:7f:
cb:df:fc:ef:0e:d3:a1:53:78:29:82:4e:74:b9:5d:
2c:e4:b6:37:62:8f:ac:f7:9a:14:fc:53:4b:c6:ce:
d5:96:82:4b:fa:e6:c7:c6:89:ca:e4:82:c2:29:ca:
19:96:86:5c:c2:da:96:79:72:2b:ab:8c:0d:2e:4d:
b4:4c:84:a4:1b:6a:bd:4c:27:8a:7c:f6:3f:f3:1e:
e3:09:20:d2:a2:1d:5a:21:5f:12:96:5a:31:57:76:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:85:D3:F5:F1:B0:1D:FB:12:11:E0:28:FC:52:0E:BB:5E:91:37:D0
X509v3 Authority Key Identifier:
keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:c4:87:1a:b9:4b:5c:35:fc:58:48:9a:72:3b:76:6b:77:39:
f1:80:1b:44:dc:44:93:9c:32:16:26:3e:f7:69:47:56:c2:e9:
11:90:01:d9:8b:33:22:23:7e:08:10:8e:12:1d:fa:f5:bd:18:
70:62:45:88:48:af:92:89:4e:57:f5:00:79:15:fb:21:af:a8:
e6:a0:5f:b0:48:8b:bc:df:90:6e:a4:5c:eb:fa:a2:32:3f:0d:
7a:0a:b1:6b:6c:a6:fd:3e:c1:5e:f1:b8:4a:8a:f8:d9:78:0f:
b9:8c:65:0c:1f:8b:b0:b9:6b:5f:74:e6:96:2f:4e:7c:41:c9:
0c:b5:df:27:c1:b1:39:f3:26:3a:9b:db:ff:0d:61:2c:a8:5f:
5d:2a:1e:c1:7b:dd:7f:59:dd:37:e7:a4:f2:67:d9:8f:b7:da:
79:80:ab:24:27:e0:7c:d0:71:fa:39:80:cb:d2:ae:93:d5:eb:
4b:f9:28:94:51:c5:71:ee:6b:92:e1:40:42:83:b3:c3:78:13:
4f:41:43:f9:90:74:b1:96:97:90:78:9c:f6:7f:f0:b3:5f:73:
2e:3d:1d:e0:0c:e5:1c:4d:ae:a9:fd:ad:d0:13:75:65:41:44:
a6:3e:76:7f:e6:c9:c5:59:15:8b:52:01:c7:12:1f:4d:31:5b:
b0:a0:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:12 2026 by rpki-client