
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json)
Hash identifier: kyzvQiW6o1c2P4RBApNwoYCmU8LhxGEBAFdi3sd6B20=
Subject key identifier: 73:DA:0E:62:DE:5F:DD:27:8C:C8:05:1B:49:A8:93:B7:70:CB:3A:7E
Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Certificate serial: 0551
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
Manifest number: 0542
Signing time: Tue 12 May 2026 23:35:58 +0000
Manifest this update: Tue 12 May 2026 23:35:58 +0000
Manifest next update: Tue 19 May 2026 23:35:58 +0000
Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: +kYmd2vFClxgtb91tl0kH2svBSToisBor2owlQs9kAw=)
2: 34788E285FD711F0AE80057FC4F9AE02.roa (hash: 2VF4ZBcYU1NgumYKCnjL8hY4a3QKesS7mGAqok92V4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl
rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1361 (0x551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Validity
Not Before: May 12 23:35:58 2026 GMT
Not After : May 19 23:35:58 2026 GMT
Subject: CN=6a03b95e-b9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:8f:c5:2c:38:25:9f:49:15:41:08:7c:6d:
29:e1:0a:1f:04:d4:3b:cc:7f:3c:5d:87:29:a0:80:
fd:7d:0a:6a:d8:95:b5:cc:c0:47:3d:8c:11:54:7a:
3e:df:74:65:84:f7:b8:ae:da:99:43:11:bc:65:bd:
c8:ec:10:5d:da:7f:e6:2c:91:e5:a9:80:06:76:ec:
c9:60:72:00:76:81:3a:0e:cc:60:08:c3:70:ce:de:
74:9b:ba:3f:0b:ce:84:66:8a:47:0c:d5:f5:42:9f:
38:b5:1e:52:78:b7:b6:9a:5e:1d:ea:c4:69:c6:cc:
ea:64:8b:fe:a1:23:28:cf:d8:b3:98:86:0b:48:2c:
8e:5d:8c:62:11:bf:56:7c:02:8b:3d:38:c9:d8:d3:
5b:5c:ed:70:7c:12:8b:d6:7d:20:b4:b8:54:89:2e:
61:57:0f:d4:fd:36:ff:39:50:c4:47:18:48:3e:fe:
e0:5f:9d:72:8d:74:5b:e6:c9:d1:92:24:5e:89:87:
90:5c:df:8f:a1:17:2f:f3:36:ee:2a:10:bc:ba:b8:
b4:44:b0:90:cf:f7:79:16:c5:ba:ca:9e:59:a2:c8:
a2:84:6e:e0:12:aa:24:31:01:ff:76:9b:e3:8f:e2:
73:5f:86:11:88:20:1e:95:dc:a0:9b:2a:b5:63:f3:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DA:0E:62:DE:5F:DD:27:8C:C8:05:1B:49:A8:93:B7:70:CB:3A:7E
X509v3 Authority Key Identifier:
keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:c3:d4:1c:94:e6:31:b8:39:ea:82:b4:a1:1c:7a:20:0f:6a:
9c:21:0c:08:ec:04:aa:3b:27:5f:9b:a4:88:09:bc:62:64:a1:
3c:15:b7:04:2a:9e:39:2c:ff:e4:be:3a:51:c2:d5:19:9e:44:
c8:a0:f2:b5:26:3f:d1:8c:4b:dd:c1:19:bc:e4:a1:bb:18:68:
89:9d:ce:f7:37:c6:10:3a:39:61:18:a7:40:ec:96:13:18:02:
4f:ec:26:24:ca:76:66:4d:d2:c2:ac:02:b6:96:97:f2:2f:0e:
25:06:c9:46:e3:a5:3e:31:03:86:5e:7d:fe:55:a1:1b:fa:cd:
60:a1:d3:44:23:7f:21:e5:00:dc:5c:2e:8f:9f:db:44:8f:31:
64:6b:6a:19:6b:38:4c:a1:06:cd:82:7a:1e:44:1d:51:0c:d6:
f3:18:88:2e:c0:5a:92:a1:12:48:2a:12:0b:b6:6f:1a:48:33:
e2:26:73:5c:ef:e3:46:f4:b9:5a:19:55:6f:9a:30:87:1f:8b:
aa:bd:4c:a1:47:7c:17:2d:bf:9a:47:26:f4:f0:61:13:16:1a:
db:50:54:15:61:9f:3b:c1:bc:ee:f0:a8:0f:be:38:aa:da:8d:
a9:7b:71:42:12:ff:a3:7d:53:44:c9:df:51:93:13:8d:bf:f8:
b2:72:0f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:33:43 2026 by rpki-client