
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
File: SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft (raw, json)
Hash identifier: LWSbuDcZH4EJintuk4COcHo2P5qBe7+340Q6XQ9U8fc=
Subject key identifier: E9:36:96:1D:F7:5D:CC:85:2C:D7:08:4F:11:9F:C5:05:55:14:BC:7D
Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
Certificate issuer: /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Certificate serial: 0CF0
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
Manifest number: 0CE5
Signing time: Wed 22 Jul 2026 17:09:41 +0000
Manifest this update: Wed 22 Jul 2026 17:09:40 +0000
Manifest next update: Wed 29 Jul 2026 17:09:40 +0000
Files and hashes: 1: SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl (hash: ETnJVdST8ckNemhQFhVzC/42Ip/yoN9ShsvkOFPSpg0=)
2: 16572A3CEB3511F08C2D5B303F6F56BC.roa (hash: 1y/5rrZjiZi/wou/2ExgTOGyybm/GQapVPwAdz5lbX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Validity
Not Before: Jul 22 17:09:40 2026 GMT
Not After : Jul 29 17:09:40 2026 GMT
Subject: CN=6a60f955-b67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:6c:2e:4f:0a:89:ad:6a:9d:22:66:10:11:
52:42:41:fb:28:07:77:ef:ab:80:d7:71:7d:eb:f7:
20:30:bf:ff:65:f5:b6:a4:32:e9:a5:77:88:41:3d:
96:d8:2c:17:9e:9b:71:cc:70:22:3f:9a:57:e9:31:
3a:2f:da:62:30:ab:57:73:46:b2:bb:fa:50:89:f5:
43:75:05:f7:f3:6d:c9:8e:50:c0:42:3f:41:11:59:
73:64:c9:a0:4c:d9:bc:c3:55:50:7e:7c:75:6c:f3:
c0:6c:d4:f9:17:1e:3f:a8:29:b8:9f:8c:6c:1b:13:
8a:58:f5:e8:d7:bb:9c:06:2e:01:85:20:06:27:0e:
8a:fd:43:45:65:dd:e9:e4:d6:c9:b2:14:d3:c7:ae:
4c:12:e1:76:40:36:95:a7:ac:d4:e0:4e:59:ea:11:
d9:64:1b:06:ac:1d:89:3c:fd:e4:61:fe:b7:28:5a:
bb:d6:85:d9:fb:d3:a0:cc:cb:d1:a9:29:8d:a2:7b:
e3:e7:ca:e1:1a:67:5f:db:e0:8b:92:6b:26:58:4d:
38:77:1a:3c:fb:cb:57:cb:7a:df:52:2e:70:a5:d2:
13:dc:c2:6b:50:74:db:c0:b7:ee:f5:9e:3c:8c:06:
8b:69:4c:86:12:82:78:4c:f4:d4:ef:be:62:0b:55:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:36:96:1D:F7:5D:CC:85:2C:D7:08:4F:11:9F:C5:05:55:14:BC:7D
X509v3 Authority Key Identifier:
keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:f9:40:bb:3f:ee:78:b5:71:74:a5:f0:08:07:00:8a:61:9c:
27:7d:de:5c:ac:cd:79:69:ae:cf:29:ba:18:a5:5f:ec:75:28:
16:c0:6d:9e:f0:9d:58:56:c5:9d:68:b2:a8:e0:a5:67:2f:2c:
8e:d2:49:4a:13:81:eb:ba:d6:77:6c:d6:2d:d6:1e:14:40:49:
9a:36:41:f4:b5:de:f2:72:9b:fc:1f:09:81:00:0c:d0:f1:25:
4f:fa:60:81:54:05:37:72:e0:29:8d:73:29:9b:af:2f:03:ca:
e9:4b:0c:ff:d6:05:3d:c1:db:5f:70:9c:61:2b:7e:c2:c3:5e:
a5:b2:c7:83:b4:77:01:5f:a8:5d:56:ce:5b:7c:c6:b2:9a:ee:
35:5c:7e:56:c5:05:e3:5e:4e:90:ee:5f:ed:14:5a:2b:63:4c:
73:1d:50:2a:71:e1:10:fe:e2:b4:7f:b9:54:96:21:a7:ca:e5:
74:3b:a2:82:1e:a3:95:11:79:1b:85:40:91:1d:fa:5e:ad:9b:
e7:08:5e:52:fd:da:b0:d7:db:9a:d9:bf:20:a1:b3:2b:15:da:
4b:23:75:6d:70:fc:cc:1c:25:88:7d:01:77:80:de:3a:1c:ae:
20:fe:ac:b0:a9:ec:c6:01:06:75:ca:73:6f:3c:c5:72:23:b0:
c2:40:3a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:36:21 2026 by rpki-client