
$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
File: Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json)
Hash identifier: zu1h5DQJeCjFY4+0NYJ6U9MmBsh0UlK6I/j4t4GnKOc=
Subject key identifier: EB:BD:2D:3F:BB:4D:FF:7E:C4:06:63:BF:7E:33:C9:C2:98:27:A1:EF
Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
Certificate issuer: /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
Manifest number: 013B
Signing time: Thu 23 Jul 2026 07:33:11 +0000
Manifest this update: Thu 23 Jul 2026 07:33:10 +0000
Manifest next update: Thu 30 Jul 2026 07:33:10 +0000
Files and hashes: 1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: OEJJs5oZOG7hWak48TjjNgDAyj600mOTswgoCcKyeiM=)
2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: k13/oiDM+4Sed6PAxjKJdfsAARWmsAIGq3EH0KkUFBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl
rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Validity
Not Before: Jul 23 07:33:10 2026 GMT
Not After : Jul 30 07:33:10 2026 GMT
Subject: CN=6a61c3b6-24f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:2b:b6:28:d1:59:8a:46:0d:d0:c8:b1:ff:
a1:9d:03:4e:d4:91:60:88:ff:ef:2c:2e:0a:a9:7c:
d0:2e:5c:55:48:ae:08:88:3e:ef:12:a9:36:12:c4:
63:03:2e:a5:a6:45:8e:76:1c:24:c5:f3:d2:39:81:
6d:6b:2e:22:9b:19:0c:dc:20:39:16:51:3e:47:59:
7e:26:e5:38:59:6b:7e:9c:b2:fd:9c:e1:41:c2:3e:
6c:7a:64:a4:c8:96:39:6b:f1:1c:45:5d:41:77:7c:
32:fd:f5:88:fb:5c:6b:46:fe:d7:cd:35:34:93:d8:
8e:84:b0:d1:9b:ea:08:85:f9:59:3d:9b:6c:fa:4e:
13:3f:36:82:22:aa:22:0f:8a:95:55:9d:93:df:bf:
92:fd:d0:29:81:29:58:34:fe:04:e7:bb:d1:1c:69:
99:1f:fb:fe:2a:a8:0e:89:dd:29:e4:ff:15:9c:74:
57:4b:d0:1a:66:e2:e4:e8:fd:16:ea:6f:ea:34:a8:
b9:4b:62:7e:a9:ae:2e:5a:e9:07:65:cf:40:50:35:
47:f4:5f:6a:3c:cb:53:a6:da:a3:0c:ef:cc:53:e7:
1d:23:a8:88:c1:17:90:e1:53:70:74:1f:16:b3:a6:
f4:7b:4f:cd:1f:b2:03:c8:d5:1b:fc:18:13:df:b8:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:2D:3F:BB:4D:FF:7E:C4:06:63:BF:7E:33:C9:C2:98:27:A1:EF
X509v3 Authority Key Identifier:
keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:08:96:ce:61:d5:3e:dc:df:d4:6d:e1:a8:33:d6:0a:61:9f:
37:22:d2:13:1c:a9:02:5b:f6:d5:a9:e2:d0:a3:8c:72:40:99:
32:a1:5a:d1:96:05:92:e8:69:d6:e7:6a:56:fe:49:7e:6c:b9:
96:24:b5:5f:d6:5d:c8:ad:df:d2:f2:64:f7:20:cf:20:97:a5:
b7:7e:07:f6:6c:78:6d:4d:f7:90:80:2d:70:38:df:55:f7:fa:
02:1e:96:4f:28:56:50:43:a3:de:71:05:69:86:38:a1:69:3c:
59:f2:1d:7f:82:13:9f:f9:13:35:f3:59:c6:db:e4:af:7c:1f:
e0:48:fa:26:c7:0a:c3:8b:47:a7:6b:24:22:44:a4:88:32:e6:
b8:a9:00:c2:1b:34:eb:92:59:8c:57:6c:aa:ea:59:a5:96:48:
4f:d2:e8:c7:b8:26:ae:7b:53:eb:f1:48:64:81:2e:de:60:21:
09:96:74:8d:9d:f3:07:f7:de:99:c6:f1:71:6a:c9:28:46:59:
65:06:be:90:6d:60:e5:2e:f8:34:0d:a6:38:e1:90:07:e0:dc:
2a:96:69:16:ee:38:19:c0:19:cb:47:0e:57:80:e4:fa:51:7c:
99:5a:0c:2b:83:12:6b:a5:79:0b:00:c1:eb:70:9c:46:91:fc:
18:81:5e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:31:28 2026 by rpki-client