
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
File: snrsU_-6svW1vAy0fAhwbVBTMhA.mft (raw, json)
Hash identifier: QD1A+cktXfQz+yQjKa3x8TV0StPfoKTCWZRxxSOHW6I=
Subject key identifier: 4E:E5:DF:1D:D4:54:84:D8:31:70:10:6F:96:05:70:00:31:54:2C:FC
Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
Certificate issuer: /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Certificate serial: 058A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
Manifest number: 057C
Signing time: Tue 24 Mar 2026 22:59:42 +0000
Manifest this update: Tue 24 Mar 2026 22:59:41 +0000
Manifest next update: Tue 31 Mar 2026 22:59:41 +0000
Files and hashes: 1: snrsU_-6svW1vAy0fAhwbVBTMhA.crl (hash: K1JG+5b8jW5jr5LppIMNqoIFeVKUSnQo/s1gWU2N0AU=)
2: FAB56D7E154711F1A1427AB42F3D8C67.roa (hash: XQL75+py8gyPYwB7NS3YOvOj6Z0ixaWmfV1k8DLv7QY=)
3: CEE6CEF4154711F189DFF69F2F3D8C67.roa (hash: bD2vSh6F3onMkjZooSCHZ2td+IAzevu9CKlwLZD0kBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1418 (0x58a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A7D6, serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Validity
Not Before: Mar 24 22:59:41 2026 GMT
Not After : Mar 31 22:59:41 2026 GMT
Subject: CN=69c3175e-8d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:75:b6:be:73:07:9c:04:92:5a:c5:cd:74:
33:0d:1b:aa:07:c1:87:fb:cc:1d:94:8e:c5:ea:48:
0e:e5:d8:81:24:e2:eb:b5:2d:1a:5e:57:93:d6:30:
af:fa:6e:a1:41:06:87:b3:a6:cb:5b:01:9d:fa:34:
21:16:1d:f7:d7:8a:08:00:0f:b0:f3:f4:47:b3:2b:
b5:14:e2:21:3e:18:c5:84:04:d5:82:f4:d6:05:9c:
d6:05:54:c5:f6:c0:2d:4c:29:be:6c:d3:2c:ee:73:
bd:5a:db:2e:4c:2a:b6:a9:c8:30:8b:13:a4:26:2c:
cd:cb:99:6f:31:69:89:8f:52:02:60:d0:ba:c7:db:
35:9b:c2:77:41:8b:97:9a:09:87:1f:4b:13:1f:1f:
1b:de:24:8f:e7:c9:f3:96:e9:6f:2f:67:f4:17:94:
b1:a0:19:a6:2d:e2:66:94:f6:fc:47:0b:0e:a1:13:
1f:2b:9f:f3:c4:d2:8d:d5:c6:f2:22:b8:16:e7:f7:
99:a4:5d:2d:a6:d8:f8:c6:c5:ad:6f:62:d4:69:48:
64:4b:e4:93:eb:ca:e8:a7:2e:7b:62:c2:cd:58:59:
84:5a:51:d3:82:d0:8e:2a:11:71:a4:3b:dd:fd:4b:
3f:61:23:5a:8a:bc:06:58:fa:e1:9f:ba:83:be:ff:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:DF:1D:D4:54:84:D8:31:70:10:6F:96:05:70:00:31:54:2C:FC
X509v3 Authority Key Identifier:
keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:f6:6d:ed:a5:77:c4:27:b2:4f:59:90:23:34:96:3d:75:22:
49:88:91:0f:2c:12:c9:43:7e:46:a3:5f:44:a5:d1:95:f0:56:
9c:b5:11:f0:ae:69:e2:17:0c:45:ae:e6:36:22:35:db:37:60:
49:7d:7b:b7:10:5b:e8:d5:98:40:3d:59:c9:d8:61:9e:54:48:
fb:26:50:e2:d1:52:7f:7a:88:0f:c3:46:04:ad:cb:fa:86:51:
c4:41:a3:9c:b8:d0:83:27:61:75:c8:f8:a1:62:14:fe:f6:7c:
0a:4b:43:b5:73:5b:8b:c0:b8:e6:58:88:0f:6d:29:69:1f:68:
4a:fc:60:72:e5:57:c0:58:7a:c4:1b:dc:7b:38:6f:9b:e5:5a:
08:db:8e:1f:9b:cc:1f:52:58:6d:68:2b:41:29:74:83:11:3a:
3f:06:4f:e5:11:93:73:2a:66:65:6d:65:6e:40:d2:33:43:5b:
77:7d:b3:ac:66:06:d1:be:ac:1a:56:d7:60:6b:cf:87:02:aa:
11:97:40:8f:a7:b2:8f:9a:18:d4:c5:f5:12:b4:fe:10:5b:7d:
b2:f4:5b:88:99:81:0d:8b:79:9b:39:13:f3:6f:da:ab:b7:17:
01:d0:29:fd:8f:69:6b:8a:49:0d:eb:60:85:50:5c:14:3a:d8:
fb:7d:e6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:40 2026 by rpki-client