
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
File: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft (raw, json)
Hash identifier: HVKTZRyQIWPci5GFbJs17404seCZYGtWRo86gj6ctEw=
Subject key identifier: 10:1F:B6:BC:FC:46:E4:CE:F3:D5:42:F1:C2:77:6A:76:81:49:C9:05
Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
Certificate issuer: /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
Manifest number: F1
Signing time: Mon 21 Sep 2026 06:23:54 +0000
Manifest this update: Mon 21 Sep 2026 06:23:53 +0000
Manifest next update: Mon 28 Sep 2026 06:23:53 +0000
Files and hashes: 1: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl (hash: rfbd0N7RZSWeOIQ2zmc25Q50GtaqhuHGkdGnOlKeh1w=)
2: 850105504F3D11F0A0960F7CC4F9AE02.roa (hash: qNWHgfJsoNs5L5U5kNXNpJEP/6NUawEmBu4riDVc1MI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Validity
Not Before: Sep 21 06:23:53 2026 GMT
Not After : Sep 28 06:23:53 2026 GMT
Subject: CN=6ab0cd7a-487d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:e9:8f:69:af:89:07:90:8e:43:e8:6a:14:
03:ef:54:95:cf:2b:a4:d5:39:c7:e1:14:63:b8:f9:
80:3a:6b:5e:9b:e5:83:99:c8:9d:db:b9:0c:81:85:
97:f9:70:71:cb:bb:62:83:bb:17:75:77:94:c2:35:
6b:4a:b4:d2:81:91:e2:6f:82:8f:9e:35:63:00:f2:
62:30:cf:64:03:43:b1:05:3c:09:ab:59:fc:51:8f:
09:f2:a7:c6:24:f6:8f:0f:5d:61:8f:df:2a:3d:91:
c6:25:5f:f6:c1:98:c6:5f:9e:8a:0c:6a:2f:64:cf:
84:0d:13:a3:b0:59:0c:08:a5:dd:b0:ec:5c:9f:ba:
b1:dd:37:72:a9:e1:19:0e:b5:58:bf:8b:28:70:e8:
3b:44:bb:1d:fb:91:46:f4:44:36:44:0d:7d:79:b9:
cc:55:fa:2d:ec:db:52:3c:e3:39:a5:49:b0:56:71:
64:9f:ae:0f:91:10:38:05:28:c7:0a:56:72:34:c4:
07:6c:86:e9:f5:28:25:97:75:58:d5:92:ae:7e:ad:
e5:5f:e3:9d:d6:d2:e5:24:ed:3c:ff:4a:22:2f:63:
ac:5e:99:db:12:1a:4d:44:bd:13:42:a2:f5:ce:a6:
f6:9c:f1:b0:00:3e:a1:f8:7e:03:38:df:89:d4:fb:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1F:B6:BC:FC:46:E4:CE:F3:D5:42:F1:C2:77:6A:76:81:49:C9:05
X509v3 Authority Key Identifier:
keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:30:1c:5e:1a:a2:9d:48:9f:bd:36:a0:8a:bc:47:b7:02:f1:
7e:cc:3c:58:56:45:97:2b:da:5d:04:f3:3c:04:2f:50:82:a4:
2a:3d:a8:5c:18:45:03:95:5f:19:84:2b:b0:8e:1d:80:67:45:
80:44:da:b0:9a:54:c6:9a:24:60:2c:e3:da:7b:13:0b:b0:c3:
f2:f4:03:26:7d:53:62:96:f1:f1:fc:51:7e:0f:f7:7a:a2:1a:
14:31:94:ee:91:bc:a7:b2:04:e5:10:0e:48:96:6a:b8:40:65:
76:cd:f0:03:0d:07:85:c2:16:16:ef:5b:cf:9a:e3:0d:70:4d:
c0:31:15:4d:cb:60:a2:04:03:05:81:33:ba:f5:3b:77:3c:36:
99:f9:5f:a9:cf:d1:b8:84:6a:a9:bc:8b:83:89:13:09:a5:ad:
39:c8:46:9a:dd:07:5b:5a:36:20:35:ae:53:21:c1:a4:7d:e7:
32:8f:f0:e5:2d:1c:50:66:96:48:87:a1:54:98:c5:c7:db:71:
8c:58:f5:42:3c:4f:7c:fc:60:ea:66:28:f0:03:24:e8:3b:a1:
64:dc:28:87:1b:8b:99:7c:ed:c0:e7:a6:74:86:de:25:8f:9c:
b3:f5:33:d4:0d:92:93:14:37:fa:58:5f:e8:f2:ee:e8:8e:cb:
39:f9:45:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:59:22 2026 by rpki-client