
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft
File: SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json)
Hash identifier: HRDuHfjWJuV4kIpdmIWGE+89p6WPRxNMob2vcQAzczY=
Subject key identifier: FD:58:67:6D:B9:AC:BF:5D:59:69:C4:64:62:E5:3A:ED:81:61:4C:15
Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48
Certificate issuer: /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248
Certificate serial: 032B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft
Manifest number: 0321
Signing time: Wed 23 Sep 2026 00:41:07 +0000
Manifest this update: Wed 23 Sep 2026 00:41:06 +0000
Manifest next update: Wed 30 Sep 2026 00:41:06 +0000
Files and hashes: 1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: BNjClzMN0PRutlaRDcUqkwLaESdjWcJ5MRFspWpt9E8=)
2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: aa24kb6qKLNCnDG1gdz76Ok2XVyq3UQZ01sPvzz77sQ=)
3: 7CB3B5E67F6B11F1B7897B5462A30FBC.roa (hash: TtLOYslTWjvi5gLI8VQKX2/3xx5i9/TsRnrz9ExqHXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl
rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D167, serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248
Validity
Not Before: Sep 23 00:41:06 2026 GMT
Not After : Sep 30 00:41:06 2026 GMT
Subject: CN=6ab32023-2d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:62:82:33:94:00:cd:9e:95:f2:d2:a2:73:
ce:b9:e5:0f:c0:fe:25:fc:8e:1f:a6:4e:62:60:00:
a7:e7:61:f4:18:6a:ff:0f:48:b9:b2:64:de:fa:81:
37:88:6c:41:64:08:63:0e:1f:25:34:39:7c:8d:e9:
7b:ed:c1:2c:fb:52:2e:10:15:8b:3a:b7:38:28:5f:
4a:34:34:81:b9:3f:ec:e3:07:12:6c:b0:91:b7:c7:
f0:5f:3f:b0:09:1a:2b:38:a9:72:57:4e:b3:ff:ca:
41:83:db:98:f5:76:73:e7:b9:d5:ea:36:54:b3:48:
28:83:9c:f0:a6:da:55:81:84:0c:af:8b:50:81:7f:
68:61:ae:d4:9b:8f:27:62:8c:ec:b3:41:be:75:68:
e3:d1:a2:58:0d:ff:e0:ed:16:11:bb:30:34:e2:4d:
15:3c:09:b0:73:4b:51:3b:d2:9a:7c:53:83:e4:98:
91:83:9a:34:38:67:c7:13:01:d8:0a:cf:55:18:97:
27:8e:88:1a:7f:ca:58:6e:88:ec:3f:93:70:9d:37:
0d:c0:a1:6f:12:b1:79:37:64:f1:9f:48:4a:05:3e:
f2:77:bb:8a:e6:31:29:a7:06:14:6b:40:70:6b:88:
3b:8f:44:87:85:86:eb:6c:46:51:e2:14:49:68:bc:
99:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:58:67:6D:B9:AC:BF:5D:59:69:C4:64:62:E5:3A:ED:81:61:4C:15
X509v3 Authority Key Identifier:
keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:92:96:de:73:d3:7e:25:ee:e2:ca:28:3b:f5:7d:87:96:b0:
79:8d:e1:93:35:94:a3:b9:8d:9e:50:a3:cb:dc:28:67:38:b2:
db:6a:df:19:12:87:53:34:f3:f4:c7:a0:86:d3:b7:a7:61:d0:
27:ce:35:94:ba:21:b7:88:32:60:e8:e0:87:35:d9:6e:d7:cf:
b5:32:54:26:1c:01:76:44:83:14:75:e7:44:2a:d3:64:2e:40:
7c:bf:44:37:98:6a:0f:28:2d:81:b0:bb:d4:ec:44:ed:1f:d2:
a0:c8:5f:2a:27:9c:93:dd:df:90:32:ef:f7:34:a7:87:68:85:
44:58:32:eb:29:e2:b7:ff:50:6a:88:ce:21:8d:bf:7f:43:d1:
05:13:8c:94:2f:69:64:31:b1:6e:89:8f:61:db:24:78:63:1f:
54:1f:e3:f1:ad:59:4b:35:9a:ba:86:97:13:87:67:0a:99:8d:
bd:0a:2f:ad:66:32:bd:68:a2:49:60:23:d0:0c:6b:64:d6:43:
62:77:89:87:1b:11:3a:b1:c1:fd:85:66:76:95:ed:cb:2c:cd:
72:fb:43:23:02:30:c2:3a:4c:ff:49:d9:e7:7a:2c:f4:6a:af:
1e:85:80:6d:0e:3d:59:2a:09:c1:f7:47:2f:6f:9d:cb:ce:d7:
d7:c3:53:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:47:47 2026 by rpki-client