
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json)
Hash identifier: m4sDH/GljJn9RC3NAA7jFnE+hGZ2aFpmJSAxdPguZ5I=
Subject key identifier: 37:92:00:BB:0C:F8:22:2A:48:E3:5A:3D:5D:A3:16:AA:71:F0:A7:EC
Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
Manifest number: 0285
Signing time: Wed 25 Mar 2026 01:16:00 +0000
Manifest this update: Wed 25 Mar 2026 01:15:59 +0000
Manifest next update: Wed 01 Apr 2026 01:15:59 +0000
Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: /IrcW8e179lDH8Q8QD/uzAV+dc4p0YZo+kj1aYWBhug=)
2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: P7sSHVPuY1Kf596MnR9z8qqEbhcKodu0GCazYWuA9b8=)
3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: PDnEhXpybcfU5TbW/vsPqy6UwZtYUKAhQ/oRyYe81/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Validity
Not Before: Mar 25 01:15:59 2026 GMT
Not After : Apr 1 01:15:59 2026 GMT
Subject: CN=69c3374f-4d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:04:38:18:2a:41:37:98:05:de:0a:a9:41:
14:8b:d5:c6:9a:8c:2d:ba:4d:86:01:58:f7:fc:b4:
b9:b4:f1:20:87:43:8f:79:5d:60:c5:c5:a5:00:95:
db:33:89:66:65:79:f7:c1:51:2f:b6:8c:68:6d:0a:
f6:f5:c5:5d:ee:8b:11:58:eb:1a:b9:19:6d:d9:92:
30:27:c6:2d:ec:ba:d6:40:a5:64:60:01:c5:85:cc:
3a:17:62:4a:8b:89:97:5f:61:0a:9c:bc:1b:ad:10:
65:3d:65:ab:4c:b5:fe:8d:4d:dc:c9:01:c6:ca:7e:
75:e3:08:f9:e0:36:22:bf:46:d9:16:91:f2:d4:e2:
f8:20:17:9f:e5:eb:2a:d1:ae:f9:ef:1a:92:0b:e5:
2c:dd:f7:f7:dc:61:b0:81:7e:71:72:86:99:fe:45:
f4:c0:52:88:91:48:ad:cd:05:f1:f7:4e:75:fd:fc:
86:e8:a1:a6:19:0f:7f:dd:dc:3a:7d:0b:ce:85:f8:
88:18:c4:07:11:67:30:62:ee:d2:0c:1c:c3:48:7d:
e1:eb:fa:c1:4f:a6:ef:a1:b6:3e:d3:c2:64:67:c3:
c5:c5:c5:9a:cc:59:e9:95:19:e7:8c:94:1a:dc:08:
f4:47:6f:d8:a0:15:12:2d:45:e2:53:83:39:e3:f8:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:92:00:BB:0C:F8:22:2A:48:E3:5A:3D:5D:A3:16:AA:71:F0:A7:EC
X509v3 Authority Key Identifier:
keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:76:e2:5e:7b:ad:9c:8c:e2:80:72:66:d9:41:75:0c:49:4a:
07:f2:22:e9:23:7e:c6:4c:dd:f6:37:91:b7:ff:86:4f:b9:51:
8e:3a:a3:22:d4:a8:a3:7c:4c:3f:50:22:c4:a2:88:4d:30:43:
12:75:c4:b8:c1:e4:dd:32:ef:ca:1f:c8:04:0f:92:59:56:56:
ff:fd:02:cb:e7:96:19:ba:3b:4d:1e:8e:22:e3:46:81:33:dd:
34:8c:c9:5d:41:6d:78:3f:b6:a8:91:84:ed:86:7d:9b:47:ce:
9d:fb:42:e8:99:0c:8a:6a:53:2d:38:2b:01:20:7a:1b:09:f0:
aa:bf:35:fd:5f:bd:a2:22:63:6e:0f:b2:c6:a5:ac:24:c9:cc:
bd:b9:40:70:ff:0f:94:e6:4a:09:39:b8:c8:be:ed:4e:16:45:
7f:2a:bf:d7:27:b6:33:45:a0:1b:9c:13:ee:75:80:9f:0f:b4:
a8:ac:b7:45:63:44:c2:84:12:4d:fb:12:9e:63:f9:c2:88:75:
67:36:de:6f:a0:b1:ef:0e:d4:27:7f:9e:e2:78:8b:0f:c6:b2:
61:8b:e3:0c:71:5f:bc:cc:eb:57:51:ee:d4:35:ea:e4:d6:1c:
71:eb:80:77:0a:86:0c:1a:2b:c9:fe:2b:cd:8f:85:dc:70:4d:
b4:1d:ca:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:25 2026 by rpki-client