
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json)
Hash identifier: WMsFh1YhPpcugZwNdFnDuY4WTMBfIm8RfY2W1Q3LhuM=
Subject key identifier: D7:19:A2:7C:51:25:79:D2:FD:A3:7F:62:CB:24:E3:A8:38:77:6E:7A
Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
Manifest number: 027C
Signing time: Wed 23 Sep 2026 01:48:02 +0000
Manifest this update: Wed 23 Sep 2026 01:48:01 +0000
Manifest next update: Wed 30 Sep 2026 01:48:01 +0000
Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: XTF8mnJJwjqkuugRPUzN6oFguBHm5yg24+93be2RpoQ=)
2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: EfG+36SStR0WHTDyKSDlepdPiSlIwRWgDKeiF4FZPTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Validity
Not Before: Sep 23 01:48:01 2026 GMT
Not After : Sep 30 01:48:01 2026 GMT
Subject: CN=6ab32fd1-ee3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:9c:8e:0c:d2:8a:75:4a:f1:e5:36:8f:0a:
0b:d9:ad:ad:37:66:58:a7:e8:11:bc:a4:a2:36:8c:
9d:46:31:78:57:f7:cf:39:b1:26:39:1f:a6:dc:84:
4a:96:13:80:2e:4f:34:ef:a0:e7:5a:9c:1f:e1:6e:
62:f1:f8:3c:38:36:2f:99:63:05:e5:d4:e5:2a:1f:
b2:9c:2a:9a:5c:42:f0:75:51:f0:50:83:54:3a:f9:
00:01:ca:aa:a9:2a:98:59:39:0c:b7:df:39:67:16:
96:9b:12:69:f6:e6:77:8f:72:b8:bb:7d:76:aa:93:
b9:45:ee:03:79:f5:73:d9:51:c1:55:40:ef:c1:62:
12:5f:d8:2a:e7:b3:d6:a7:0e:7c:7e:3f:76:bd:6b:
7e:8b:46:35:60:b6:32:3c:d6:fd:39:09:fa:78:cb:
8e:73:1d:8a:3a:86:e3:5e:c4:01:44:e3:a9:28:ee:
c2:63:e4:d4:7f:7a:6e:98:77:6e:21:5a:b1:3b:bd:
67:9c:da:69:80:d3:0e:7e:f8:8e:e7:09:fb:3b:33:
b8:5d:d3:d8:b8:b9:01:c3:83:9f:c6:d5:68:a6:ea:
db:91:dd:64:f7:7f:81:42:4e:7e:53:5f:d7:a6:13:
b1:8b:3c:32:26:66:3b:9a:6d:77:79:63:f6:c7:12:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:19:A2:7C:51:25:79:D2:FD:A3:7F:62:CB:24:E3:A8:38:77:6E:7A
X509v3 Authority Key Identifier:
keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8a:3d:9d:5c:8e:bc:71:6a:1a:3c:ac:91:50:a1:e5:0e:0a:
75:ed:f6:83:e7:f5:98:f3:e8:3b:51:75:a0:ac:1e:c5:9c:a1:
4e:87:b6:c6:85:03:d1:e6:cb:88:86:e9:19:46:51:9d:85:50:
91:f2:5d:cd:9b:2c:79:f0:12:a5:5a:e3:6e:1d:95:23:7b:55:
b4:7f:e2:40:7f:39:53:f6:a5:ce:04:5e:ea:74:35:5a:08:d2:
07:6d:42:e7:28:2c:94:72:2d:dc:81:06:30:28:c9:38:00:42:
38:41:95:2b:16:b3:e3:d0:a7:2c:2c:06:14:57:1c:fb:19:40:
ac:28:4b:0f:fe:e9:5c:ef:6e:ea:8c:aa:e6:78:92:d4:bb:4c:
68:5b:a9:7d:07:29:71:6f:0d:e3:91:4c:47:85:8b:92:d4:43:
4a:cc:c0:eb:3e:b5:da:d3:81:03:87:1d:5e:f1:19:03:5e:2b:
13:3b:48:04:86:5d:63:22:0a:fa:a5:a8:3a:f4:11:3a:9c:9a:
05:91:48:a5:ec:5c:09:28:fa:e1:50:ba:43:6c:a3:88:58:30:
dd:77:bf:c1:5c:9e:4a:db:4b:42:3e:0f:a7:3c:92:46:c2:1e:
d0:d7:b9:01:8c:b5:2e:b6:60:ac:5f:af:18:38:ab:ce:95:62:
0c:9b:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:58:23 2026 by rpki-client