
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
File: sae05J_PFfDFALickX8mZHJQ8K4.mft (raw, json)
Hash identifier: Udg5vez8VvvkMsPlvmy6MTe7HrmARZ4rdTfxYQJcA70=
Subject key identifier: 65:97:81:99:19:B6:D7:E9:53:84:BC:BC:1D:2E:83:F9:93:83:2E:5E
Authority key identifier: B1:A7:B4:E4:9F:CF:15:F0:C5:00:B8:9C:91:7F:26:64:72:50:F0:AE
Certificate issuer: /CN=A914B462/serialNumber=B1A7B4E49FCF15F0C500B89C917F26647250F0AE
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
Manifest number: A0
Signing time: Wed 25 Mar 2026 06:31:21 +0000
Manifest this update: Wed 25 Mar 2026 06:31:21 +0000
Manifest next update: Wed 01 Apr 2026 06:31:21 +0000
Files and hashes: 1: sae05J_PFfDFALickX8mZHJQ8K4.crl (hash: Dwwle7WVRNJhzQZxWh0pRRks7gGXo7z9vHZqIItiBD8=)
2: BA4C0E94330911F08D233546C4F9AE02.roa (hash: 573MTXJVqmhSNpvv+bdQ+e7fWCNO2NnB5tYStsyoo2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.crl
rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B462, serialNumber=B1A7B4E49FCF15F0C500B89C917F26647250F0AE
Validity
Not Before: Mar 25 06:31:21 2026 GMT
Not After : Apr 1 06:31:21 2026 GMT
Subject: CN=69c38139-f3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:ac:8e:82:b7:bd:ee:9c:4b:d8:60:9f:74:
db:92:2f:1c:1e:4e:47:fc:ba:1b:cb:ee:04:cd:3c:
eb:16:56:d7:e3:78:bf:fa:8c:ee:85:9f:27:5e:81:
d4:29:a4:78:39:83:05:8c:ff:af:db:54:b1:62:5d:
3b:d7:06:be:83:42:5e:f6:2d:18:3a:04:98:ec:2c:
10:24:42:c6:5d:b2:88:46:40:49:0f:bc:be:51:56:
4b:4b:71:0f:5c:78:f2:87:5c:dd:9b:46:22:7b:68:
e8:d2:dc:1d:a3:d8:88:db:30:db:f6:b6:00:5f:30:
5e:33:38:df:e6:2e:3c:b5:9d:8b:84:35:6f:7c:d1:
1b:42:54:81:20:ad:32:a5:2a:c4:b9:65:f0:de:62:
f0:bc:03:d7:66:81:a5:ba:31:ab:32:44:12:fa:f4:
9b:24:1a:b4:a8:fa:d1:1c:f2:99:db:28:0d:26:fd:
80:24:f3:6f:a0:40:a8:7b:b1:41:27:20:4c:fd:28:
ec:fc:09:3d:70:7b:8c:5e:61:b5:9b:c2:14:6b:fd:
e6:7e:e4:11:17:31:69:83:03:42:38:ef:17:68:22:
e6:47:52:db:48:07:24:ac:30:16:5f:1e:02:b2:ab:
ab:45:ef:1e:d0:75:7a:0b:df:68:06:c5:57:7e:57:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:97:81:99:19:B6:D7:E9:53:84:BC:BC:1D:2E:83:F9:93:83:2E:5E
X509v3 Authority Key Identifier:
keyid:B1:A7:B4:E4:9F:CF:15:F0:C5:00:B8:9C:91:7F:26:64:72:50:F0:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:fe:a7:5a:96:3d:ed:32:e8:55:3e:c9:03:84:63:16:c1:2b:
25:b6:ae:e8:df:6f:1a:57:28:6f:fc:90:19:26:84:72:ea:b7:
ec:6e:58:41:66:55:14:98:4a:1b:ac:3b:70:aa:04:65:fd:8d:
fb:2a:1a:63:d0:eb:95:89:9f:89:05:f0:69:1c:0b:16:69:f9:
ef:ec:01:1a:05:37:95:f1:b5:8d:1e:02:af:66:16:18:da:56:
dd:c9:b3:03:61:fa:19:d6:55:7b:0e:e4:6f:b2:82:b7:39:3a:
24:87:ee:91:7a:b1:38:a8:7a:e7:6a:b5:6a:45:c9:cb:ce:f7:
ef:c7:1d:54:76:ae:6b:69:9d:2e:77:4b:0b:a7:46:6d:66:8c:
76:6e:dd:48:b9:84:af:11:ec:87:7a:24:cb:6a:06:a6:ea:5f:
ff:c8:7c:f8:9d:e7:43:d4:dc:ca:c7:eb:f8:f8:52:c5:67:78:
63:74:92:ed:58:4f:36:cc:8a:0a:ec:41:75:66:a1:b9:a7:51:
c0:d9:8a:0a:c2:26:9d:b8:0c:46:62:74:56:c1:ef:11:b9:96:
d1:a0:aa:e7:28:fa:d2:2d:39:f6:b7:8b:d9:f3:aa:8d:a2:22:
03:28:e1:bd:6c:49:11:80:fd:29:f2:06:41:34:b6:8d:b3:83:
f5:7f:96:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI0NjIxMTAvBgNVBAUTKEIxQTdCNEU0OUZDRjE1RjBDNTAwQjg5QzkxN0YyNjY0
NzI1MEYwQUUwHhcNMjYwMzI1MDYzMTIxWhcNMjYwNDAxMDYzMTIxWjAYMRYwFAYD
VQQDEw02OWMzODEzOS1mM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZusjoK3ve6cS9hgn3Tbki8cHk5H/Loby+4EzTzrFlbX43i/+ozuhZ8nXoHU
KaR4OYMFjP+v21SxYl071wa+g0Je9i0YOgSY7CwQJELGXbKIRkBJD7y+UVZLS3EP
XHjyh1zdm0Yie2jo0twdo9iI2zDb9rYAXzBeMzjf5i48tZ2LhDVvfNEbQlSBIK0y
pSrEuWXw3mLwvAPXZoGlujGrMkQS+vSbJBq0qPrRHPKZ2ygNJv2AJPNvoECoe7FB
JyBM/Sjs/Ak9cHuMXmG1m8IUa/3mfuQRFzFpgwNCOO8XaCLmR1LbSAckrDAWXx4C
squrRe8e0HV6C99oBsVXfldZbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGWXgZkZ
ttfpU4S8vB0ug/mTgy5eMB8GA1UdIwQYMBaAFLGntOSfzxXwxQC4nJF/JmRyUPCu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2Mi9BQUJFNkY2MjMy
RkYxMUYwODU5QjVBMkRDNEY5QUUwMi9zYWUwNUpfUEZmREZBTGlja1g4bVpISlE4
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NhZTA1Sl9QRmZERkFMaWNrWDhtWkhKUThLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjQ2Mi9BQUJFNkY2MjMyRkYxMUYwODU5QjVBMkRDNEY5QUUwMi9zYWUwNUpfUEZm
REZBTGlja1g4bVpISlE4SzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKf6nWpY97TLoVT7JA4RjFsErJbau6N9vGlcob/yQGSaEcuq37G5YQWZVFJhK
G6w7cKoEZf2N+yoaY9DrlYmfiQXwaRwLFmn57+wBGgU3lfG1jR4Cr2YWGNpW3cmz
A2H6GdZVew7kb7KCtzk6JIfukXqxOKh652q1akXJy87378cdVHaua2mdLndLC6dG
bWaMdm7dSLmErxHsh3oky2oGpupf/8h8+J3nQ9Tcysfr+PhSxWd4Y3SS7VhPNsyK
CuxBdWahuadRwNmKCsImnbgMRmJ0VsHvEbmW0aCq5yj60i059reL2fOqjaIiAyjh
vWxJEYD9KfIGQTS2jbOD9X+WvA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:48:03 2026 by rpki-client