
$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json)
Hash identifier: iu4LmPsrcpE1frs1oPAbiUoKP/qaMsgIbT7UyL93dbM=
Subject key identifier: 97:C0:21:4B:71:77:0F:2E:6C:1E:A2:A9:00:ED:8C:06:48:04:84:06
Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF
Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
Manifest number: 01D4
Signing time: Wed 25 Mar 2026 02:57:05 +0000
Manifest this update: Wed 25 Mar 2026 02:57:05 +0000
Manifest next update: Wed 01 Apr 2026 02:57:05 +0000
Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: f16wJ1lcouhDivZEqJ3QXc/ULuHYOunkvxUXoR1NlB0=)
2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: XpOJLqrrUhEc7ebQkkMofYS8+Tg7b9rkq4W6zmxVycM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl
rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
Validity
Not Before: Mar 25 02:57:05 2026 GMT
Not After : Apr 1 02:57:05 2026 GMT
Subject: CN=69c34f01-d3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:59:44:d2:78:c7:5d:d7:e5:0e:73:d8:43:
89:43:a9:a6:f7:0d:c0:1d:5a:77:78:76:d2:ca:f4:
25:22:b5:c4:d7:2f:65:e7:65:e5:67:5f:11:34:8f:
90:2b:10:93:a1:ad:bf:69:b4:a3:dd:d2:a0:fb:a4:
81:f8:84:1f:9e:5b:9a:6d:7a:47:57:34:c1:28:1f:
9a:21:d2:92:6e:b2:d4:1a:8c:13:7f:1d:40:3e:01:
6b:64:4b:b7:6e:96:e7:24:f2:66:9d:13:68:bb:08:
c3:54:55:a8:68:9c:26:ae:72:06:82:ce:6f:cc:02:
be:31:c8:56:67:33:a3:68:ea:59:e6:c4:f8:5b:df:
a2:3b:a6:be:91:64:c0:ee:f1:2d:b4:bf:4f:0c:91:
0c:1e:ce:e2:bf:d1:d3:7e:c1:14:27:f8:9b:7b:b4:
5f:5d:3b:60:68:8c:11:52:69:2d:3f:af:ad:7c:8b:
16:56:96:5f:b5:f9:66:41:ea:c2:36:5e:ba:64:1e:
d9:f4:5b:59:34:51:8e:02:92:3a:83:2c:37:b3:36:
52:63:b3:3f:b8:29:db:88:c2:b6:f5:fc:71:bf:2d:
c6:cb:1e:72:7a:aa:07:8b:e0:c4:5c:d5:c3:86:dd:
71:68:25:8c:6d:cc:36:ab:7e:a9:db:07:58:85:70:
c8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C0:21:4B:71:77:0F:2E:6C:1E:A2:A9:00:ED:8C:06:48:04:84:06
X509v3 Authority Key Identifier:
keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:7c:f1:b8:cd:11:2c:d5:62:27:1a:86:d5:ba:23:49:64:1f:
0a:28:cf:be:3b:5a:bd:37:de:20:3c:da:82:54:0a:42:19:4a:
8c:ff:80:0d:40:aa:02:3e:30:ee:29:98:d3:cc:bb:d5:84:b6:
17:dd:d4:fd:b4:22:73:58:1e:5b:15:92:e5:a5:d2:26:08:41:
7d:b3:3a:64:0b:4d:08:36:d7:ad:d3:d3:e3:e3:83:96:85:51:
1b:4d:69:d8:61:65:ac:a5:53:9c:5a:d5:30:8f:9f:f0:35:09:
81:98:29:6e:0b:a7:1a:d9:7e:29:35:de:ff:6d:f0:44:37:28:
cc:14:6f:5a:fa:c4:d0:ef:61:67:fb:f9:2a:44:15:47:09:ee:
fc:af:45:a8:b6:f2:a8:e2:bf:bb:34:ed:82:f7:31:b5:f6:6d:
66:b7:45:d0:69:af:b9:1a:c0:0e:8f:ec:8b:5b:11:25:41:02:
9b:68:fe:e5:5d:24:27:44:d1:6c:ba:ea:d2:32:eb:39:fc:59:
ff:e4:88:83:1f:b9:66:54:ba:aa:87:aa:4b:73:f4:61:15:a7:
0a:0e:bb:4d:66:0b:84:df:3d:2c:da:bf:a3:0a:2f:c3:95:58:
4f:69:d8:dd:e7:ef:d2:d0:17:e3:53:37:c0:3a:2a:7e:f7:53:
40:0e:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:41 2026 by rpki-client