
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
File: SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json)
Hash identifier: U9M95PmvnUPEbZHudc3jJaa60ZXtUMb/YWnIZQ0Mr+k=
Subject key identifier: A9:19:63:C1:CA:33:02:BF:9E:A2:B2:A3:83:2F:FE:2E:48:8A:15:80
Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
Certificate issuer: /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Certificate serial: 0781
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
Manifest number: 077A
Signing time: Thu 26 Mar 2026 21:25:54 +0000
Manifest this update: Thu 26 Mar 2026 21:25:54 +0000
Manifest next update: Thu 02 Apr 2026 21:25:54 +0000
Files and hashes: 1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: cOIENZDN0fGmqXknsZHqo2d0xRpY88p97E1njMUBl9A=)
2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: 0b0HxKXaBgsrMjbgtSVdcN+5q1xfdbTvPOaj8MWjzqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Validity
Not Before: Mar 26 21:25:54 2026 GMT
Not After : Apr 2 21:25:54 2026 GMT
Subject: CN=69c5a462-fff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:91:67:a0:fe:34:f7:38:9c:b6:87:cf:2a:
3c:d1:23:91:64:6d:91:a2:21:61:3b:1a:35:8c:5f:
3e:cd:c9:af:2b:d8:7e:44:a8:f0:46:91:1f:a5:d9:
f4:c9:fc:1d:b8:96:90:9f:18:6b:c7:6f:a4:bc:16:
96:c1:72:fe:33:c7:00:c9:96:95:0e:ea:9c:5f:6a:
ee:bf:d1:69:02:d5:49:75:f0:07:8f:6f:a0:7b:da:
ca:33:8b:5c:d4:90:44:37:6c:a1:e8:31:fd:09:1c:
0d:c5:d9:d2:e3:f6:31:0b:bd:0b:26:c6:3e:b1:f2:
3b:9c:84:2f:fb:da:9b:76:2d:d7:1d:e4:b3:7f:39:
ab:eb:c0:e2:f7:cf:ee:6a:53:94:85:ad:41:63:5d:
15:73:6b:f9:26:b4:50:1d:9e:9e:c8:74:7f:cf:68:
fb:d2:73:f0:c9:eb:24:62:ac:71:dd:ac:f4:32:77:
71:67:bc:a9:6f:40:34:49:ce:a2:cc:db:2a:46:37:
dd:28:90:1f:c1:81:61:9c:f8:91:0f:47:9d:ac:ba:
c5:f0:8f:e7:ef:6c:db:ac:af:82:f9:b1:cd:05:36:
81:d8:08:73:a9:cb:90:49:71:88:18:ce:a9:48:10:
5c:80:be:eb:20:75:41:d3:7f:ad:17:1a:94:91:dc:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:19:63:C1:CA:33:02:BF:9E:A2:B2:A3:83:2F:FE:2E:48:8A:15:80
X509v3 Authority Key Identifier:
keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:3c:4d:a2:4f:97:c2:e5:d3:2f:c0:d1:e2:a2:32:5f:f1:0d:
93:0c:d4:71:ad:21:32:53:da:87:f1:e9:d5:ca:41:a8:9f:a0:
98:50:e8:af:19:67:3e:30:14:b6:75:42:b5:6a:2b:10:80:87:
90:1b:a5:a2:65:0e:55:7e:b6:a1:57:6f:61:2d:8c:ac:80:58:
ea:f1:b1:0c:1e:ab:b8:14:64:4e:6d:f2:a6:7f:63:9d:b3:ee:
63:72:70:36:e6:fd:aa:58:5c:eb:cc:95:39:73:0b:41:55:c6:
7d:82:d6:e1:36:ad:cb:d2:e4:b5:b9:57:66:4f:b6:27:2b:65:
73:1f:ad:d9:8e:9b:23:64:91:4b:c8:6e:a4:ef:b9:54:d8:72:
3b:e2:bb:dc:32:f4:2d:ac:db:d6:6c:a9:1f:8b:b9:ed:90:52:
61:15:39:bb:ec:b6:a5:c3:28:a2:0e:c9:d5:aa:ee:88:90:fd:
1f:49:fd:89:a0:73:58:2b:74:e7:d1:c4:04:32:b2:2f:91:c1:
43:c8:2f:4e:37:5a:72:22:c1:95:3a:e0:a4:33:28:89:77:20:
80:7d:2f:e3:c6:e7:3d:2d:58:65:e3:38:1b:4f:cb:5e:dc:59:
75:a3:c2:8b:af:e5:e3:20:82:33:59:7c:63:22:28:8c:0e:74:
e0:c2:af:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:39 2026 by rpki-client