
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json)
Hash identifier: O4HS8kOlrNWDIT0VLGJRQ1nWnUh2Iiwvi17CiE+NmSI=
Subject key identifier: F8:B4:24:CD:A9:D0:AF:1D:29:E2:06:7D:96:D2:45:AE:DE:E8:E9:C2
Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Certificate serial: 022E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
Manifest number: 01FF
Signing time: Mon 11 May 2026 03:42:50 +0000
Manifest this update: Mon 11 May 2026 03:42:49 +0000
Manifest next update: Mon 18 May 2026 03:42:49 +0000
Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: u5+di/VFbimM/WbJ5cywDckveHK5uUEwHsskk14L4BE=)
2: C93C3BD2BF1211F0825A8B67C4F9AE02.roa (hash: n9/IQR0BwLZbi9yJcCTUnntLY2aytZXC8mDV+WP0G4o=)
3: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (hash: ByWsIE/4rVUD5qRgH7zOnv47Eu0MEqBdDSj3mKfG9BU=)
4: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: NLqzgNFavgTlNRmtQJjQn4BF1LQ5ql0PYZJVK2eWqBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Validity
Not Before: May 11 03:42:49 2026 GMT
Not After : May 18 03:42:49 2026 GMT
Subject: CN=6a01503a-d976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:50:dd:9a:ee:23:2d:30:39:71:46:a1:7f:
42:72:44:43:74:a4:c6:93:d8:d4:e5:95:67:5f:f3:
29:6b:01:95:2b:22:30:3b:09:37:09:70:f5:66:6e:
1a:37:e1:2d:ce:32:a0:44:41:15:b6:cc:0e:e1:5f:
1e:e5:4a:f9:6b:87:0e:34:9d:ae:ca:2a:d4:cc:56:
8c:51:48:ce:7f:e6:8a:de:ed:dd:19:6c:41:18:0c:
b8:b4:9b:7f:16:09:7b:d0:3a:7d:b5:78:f9:df:15:
84:68:cb:ea:cb:6c:06:8c:76:48:ab:b2:3d:4e:af:
7b:de:a6:c0:0c:52:9d:94:f7:50:bb:b4:2d:dc:3e:
4c:8b:54:36:a3:f6:44:17:01:0f:8e:be:3c:63:4b:
5a:95:43:8d:fe:a5:6e:64:9a:7e:43:b8:3d:38:5c:
11:7a:1d:a2:50:e7:28:4f:97:9f:59:2a:cf:55:ba:
06:90:a2:fa:a9:02:81:4f:0e:51:8b:ab:32:6a:9f:
c9:82:d4:ae:71:dc:61:44:43:86:72:89:e3:c8:08:
35:29:02:ae:c1:1c:90:1e:69:cf:29:ce:62:9d:3d:
c1:c5:60:e3:a8:35:e3:9d:1e:a2:9f:2c:bf:09:d8:
74:96:3d:1a:35:86:c5:47:c2:6f:80:4e:df:01:fa:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B4:24:CD:A9:D0:AF:1D:29:E2:06:7D:96:D2:45:AE:DE:E8:E9:C2
X509v3 Authority Key Identifier:
keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:38:9d:34:87:bd:f3:01:16:ef:e2:7b:5b:87:67:2a:4f:00:
04:03:b5:f2:27:91:73:f2:89:2f:66:32:52:37:a3:78:4a:d7:
66:c5:7b:c1:96:d4:38:c1:61:eb:d5:37:72:b0:00:30:77:6b:
b9:49:b9:b4:9d:b4:df:a8:3b:f5:41:6b:77:fb:56:09:a0:8a:
da:3b:ad:58:8a:80:27:e1:99:9b:3d:e5:05:1e:7a:84:43:aa:
e2:6e:81:bf:b0:49:2f:03:4e:2d:34:1d:b3:55:ea:42:a8:7f:
c8:83:9f:40:7a:9f:02:89:c6:a8:74:a6:c9:63:80:13:82:36:
77:8f:06:3b:08:f5:bb:3a:37:b1:ee:e2:2d:c4:d0:1f:b9:dc:
d9:01:88:bb:59:81:94:23:e6:2a:7d:d0:c0:6c:a3:69:6f:76:
fe:4f:23:51:6b:74:d9:09:f0:21:ea:27:b5:67:ed:fc:c7:07:
fe:37:b8:f0:2f:dd:b4:ff:03:c9:23:e8:29:19:3d:2d:25:99:
64:66:dd:cf:2a:8a:20:69:a6:5f:cc:38:04:6f:20:b4:c4:1e:
dd:8c:10:3c:c6:bf:e7:25:28:fd:38:72:4d:cf:32:fb:06:56:
1c:62:a8:50:dd:3a:cc:83:d2:c1:bf:34:de:e3:9b:43:7d:b6:
f6:03:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:51 2026 by rpki-client