
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
File: SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft (raw, json)
Hash identifier: M1HZd2roIP0eFI/8bKC9xT2Q9Ao8eISKqc0GTPKbAiA=
Subject key identifier: C8:94:85:F6:0C:D7:2F:E9:7D:6D:C2:7D:39:31:0D:F7:11:F6:3F:8A
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Certificate issuer: /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial: 0EB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
Manifest number: 0E9C
Signing time: Tue 24 Mar 2026 17:34:52 +0000
Manifest this update: Tue 24 Mar 2026 17:34:51 +0000
Manifest next update: Tue 31 Mar 2026 17:34:51 +0000
Files and hashes: 1: SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl (hash: Mi1DJJFftH1Y44wA3lKJWzmA3hfL+YUf9bEdCzoKEnw=)
2: AE14DBAA997711EAB12AD74CC4F9AE02.roa (hash: guZuB0dXyOc4/gAv+AWXzPZOYx7scwoTWZS6jSL3120=)
3: DB87E692ADB211E99AAEE879C4F9AE02.roa (hash: q+2nyrLMqXsqCxGEfxTLEI4wzW4kiplsQd3yatXIX2g=)
4: 28BC5490487F11EAB8C7545FC4F9AE02.roa (hash: gqHandgTQfiQ8xRxCOHBOz8Fw9wJVOkwc20SZ1B8E3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3768 (0xeb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Validity
Not Before: Mar 24 17:34:51 2026 GMT
Not After : Mar 31 17:34:51 2026 GMT
Subject: CN=69c2cb3b-cecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5d:8b:23:99:af:0e:25:ae:5c:5c:a5:57:67:
c6:8c:3f:39:5b:27:ac:b1:8c:f5:43:25:0b:da:a0:
80:70:9a:e5:cf:42:85:46:98:fa:5b:ad:68:b5:dc:
03:67:6d:29:53:21:5a:90:74:ce:43:4d:57:a9:a7:
2b:ce:9b:9b:37:74:51:5a:04:f3:22:36:63:b3:eb:
a7:cc:ba:40:f8:b2:6e:18:ce:8f:9c:39:0e:67:f8:
97:ac:18:1b:22:41:6d:ab:13:f5:fb:7b:25:20:ee:
9b:01:b3:74:70:80:0f:07:b3:b3:8f:55:40:99:bf:
60:c8:c1:f0:14:3f:ab:78:3f:c5:0c:56:0d:8a:aa:
ac:20:b8:6e:98:d0:28:ac:fd:c5:3b:6d:b7:01:ae:
14:39:73:e6:df:e6:52:11:95:4f:78:58:fb:42:36:
2a:47:bd:7f:fd:30:a8:a7:2e:3a:0f:82:2e:42:8a:
5c:08:66:cb:e6:48:c5:9c:39:89:e5:13:6e:07:51:
6f:a5:05:b5:3f:c3:b6:ce:1a:f0:c9:40:2c:cc:81:
3d:84:ed:87:55:19:97:b5:a6:d5:65:69:cc:5a:b9:
bf:8f:a8:e5:37:9b:49:bb:37:80:b5:60:e3:61:ed:
a1:e8:7f:4e:23:5b:49:49:18:e8:e4:4a:d7:74:3b:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:94:85:F6:0C:D7:2F:E9:7D:6D:C2:7D:39:31:0D:F7:11:F6:3F:8A
X509v3 Authority Key Identifier:
keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:22:3a:a6:92:ff:d9:53:92:ea:86:47:f8:8e:73:53:80:67:
00:8e:96:70:97:b3:06:27:5c:dc:16:09:34:b3:72:06:ad:66:
80:e4:9d:a9:1a:f5:19:ce:f7:60:74:d3:2a:90:23:bc:8b:a0:
18:f2:15:9f:de:e2:61:ec:f8:77:cc:25:ed:be:1d:90:aa:9c:
d2:45:f9:91:1c:d7:23:43:42:7a:e1:fd:81:ec:5d:10:03:29:
66:67:23:45:28:d6:e3:05:3d:32:b6:33:6a:c0:e7:9a:65:a9:
fe:a8:e0:3f:9c:3b:be:57:73:05:a9:11:a3:f9:7a:47:b6:1e:
12:c6:fd:10:69:a7:4c:12:b7:fb:73:51:97:ed:a1:e8:a3:f1:
76:bb:9f:c1:c3:77:ed:53:12:7f:cb:89:4e:1f:57:64:ff:ff:
e5:a1:d6:f4:0d:a1:28:9f:13:77:f1:4d:51:27:d2:47:98:a9:
7c:1f:8f:f1:66:cb:7f:a8:05:68:34:c1:00:13:1b:6e:7c:1b:
d2:00:56:12:44:90:75:e5:c0:2a:e3:5b:b5:08:33:f8:f6:68:
98:ed:f6:ec:20:d3:2d:4b:3a:50:8a:2f:71:4e:29:e7:a3:70:
00:50:bf:a3:8a:d0:55:68:b1:33:77:9d:0b:47:2b:a4:c0:99:
40:cc:cd:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTMxNTMxMTAvBgNVBAUTKDQ4QzI3RkZGQjY0MjQ3MTJGQzZGQzYyODcxRDUzNkM1
MzFGRUYxOUIwHhcNMjYwMzI0MTczNDUxWhcNMjYwMzMxMTczNDUxWjAYMRYwFAYD
VQQDEw02OWMyY2IzYi1jZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7V2LI5mvDiWuXFylV2fGjD85WyessYz1QyUL2qCAcJrlz0KFRpj6W61otdwD
Z20pUyFakHTOQ01XqacrzpubN3RRWgTzIjZjs+unzLpA+LJuGM6PnDkOZ/iXrBgb
IkFtqxP1+3slIO6bAbN0cIAPB7Ozj1VAmb9gyMHwFD+reD/FDFYNiqqsILhumNAo
rP3FO223Aa4UOXPm3+ZSEZVPeFj7QjYqR71//TCopy46D4IuQopcCGbL5kjFnDmJ
5RNuB1FvpQW1P8O2zhrwyUAszIE9hO2HVRmXtabVZWnMWrm/j6jlN5tJuzeAtWDj
Ye2h6H9OI1tJSRjo5ErXdDvFjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMiUhfYM
1y/pfW3CfTkxDfcR9j+KMB8GA1UdIwQYMBaAFEjCf/+2QkcS/G/GKHHVNsUx/vGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzE1My84NjA3Nzk4MEFE
QjIxMUU5OERBRUM0NzlDNEY5QUUwMi9TTUpfXzdaQ1J4TDhiOFlvY2RVMnhUSC04
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NNSl9fN1pDUnhMOGI4WW9jZFUyeFRILThacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzE1My84NjA3Nzk4MEFEQjIxMUU5OERBRUM0NzlDNEY5QUUwMi9TTUpfXzdaQ1J4
TDhiOFlvY2RVMnhUSC04WnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnCI6ppL/2VOS6oZH+I5zU4BnAI6WcJezBidc3BYJNLNyBq1mgOSdqRr1Gc73
YHTTKpAjvIugGPIVn97iYez4d8wl7b4dkKqc0kX5kRzXI0NCeuH9gexdEAMpZmcj
RSjW4wU9MrYzasDnmmWp/qjgP5w7vldzBakRo/l6R7YeEsb9EGmnTBK3+3NRl+2h
6KPxdrufwcN37VMSf8uJTh9XZP//5aHW9A2hKJ8Td/FNUSfSR5ipfB+P8WbLf6gF
aDTBABMbbnwb0gBWEkSQdeXAKuNbtQgz+PZomO327CDTLUs6UIovcU4p56NwAFC/
o4rQVWixM3edC0crpMCZQMzNRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:18 2026 by rpki-client