
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json)
Hash identifier: Yt2Gsz4nJrxHH04+QbSOdHkS6q1bmGuDhz9Th6svTWE=
Subject key identifier: 1B:1D:69:71:BE:8E:89:E5:A9:A0:3C:18:94:F6:CC:A4:B0:8E:18:8D
Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
Manifest number: 021F
Signing time: Fri 27 Mar 2026 02:18:52 +0000
Manifest this update: Fri 27 Mar 2026 02:18:52 +0000
Manifest next update: Fri 03 Apr 2026 02:18:52 +0000
Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: 39LAUJX+ynFnp/7iSarb+MPo3GnT7EA4z+LXRs7Dz2Y=)
2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: nbWrxCDFQoo/aNFlk67YAqdBIRuq49WlvoXbRE0llls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Validity
Not Before: Mar 27 02:18:52 2026 GMT
Not After : Apr 3 02:18:52 2026 GMT
Subject: CN=69c5e90c-9f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2b:80:3b:2a:7e:e1:d0:39:63:92:44:8e:ce:
c8:82:0c:41:2a:14:0a:9d:b0:0d:cc:3e:3b:62:6f:
ff:c1:58:ed:22:79:1a:25:56:4a:a6:cd:f2:ec:5e:
99:29:55:e3:36:fe:29:6f:ff:30:95:61:54:3a:72:
5f:0d:22:8f:d7:b8:a6:72:35:a1:57:56:cf:e3:f3:
92:43:0c:52:96:3f:e5:f5:47:26:b7:2b:b7:ed:a7:
a2:d1:6c:af:e8:b4:8c:8e:6c:82:11:39:f6:70:6e:
be:71:09:b9:61:15:41:e4:65:54:5d:a8:63:d8:ec:
bf:87:5b:c9:8e:62:b1:2d:26:38:3f:1a:53:93:ba:
46:e3:30:e3:c9:a2:e0:2e:ef:8b:a2:4e:b2:fb:bb:
e2:60:92:e1:54:36:7a:63:ff:e4:d5:b7:c1:a9:11:
e4:13:8c:c6:97:d6:da:92:5e:3d:ee:19:ef:af:c8:
73:b2:d9:be:9f:a9:97:18:61:b1:47:33:fd:4f:09:
50:16:42:49:5c:4b:7d:6b:a6:51:08:43:12:b8:d7:
04:14:a2:27:b5:40:ed:4b:ca:f8:de:49:73:a5:21:
a7:2b:e2:4a:d9:c0:91:d5:12:b6:ca:9c:c9:e7:45:
94:e6:82:77:65:4f:fe:81:1c:48:51:0d:2f:3e:d6:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1D:69:71:BE:8E:89:E5:A9:A0:3C:18:94:F6:CC:A4:B0:8E:18:8D
X509v3 Authority Key Identifier:
keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4f:82:ea:7b:63:a9:91:21:47:a1:87:cb:47:3a:73:34:bf:
c8:46:fd:86:13:36:a0:e1:e0:28:d5:94:03:5c:76:39:a5:b1:
e9:87:77:ba:af:35:a8:49:fd:76:97:3b:14:79:42:3b:78:f8:
00:ae:ad:ac:d1:a7:a4:2a:53:0f:16:c6:3d:f6:d7:01:f9:29:
55:21:f7:82:18:9c:4c:87:6f:aa:94:c5:de:ee:fb:fc:4c:08:
01:03:05:36:b3:b8:bc:1c:cc:68:b3:7c:0f:d2:81:cf:b6:19:
99:74:8c:b0:f3:0f:2c:03:77:76:54:dc:46:73:3f:f8:49:ba:
06:69:7d:2e:9d:b7:ed:22:c8:c1:44:04:82:17:4a:cc:fc:6b:
df:02:ac:96:bb:50:2f:3c:ee:ca:6c:ae:a6:f6:4e:85:25:28:
78:c9:ab:81:a3:c6:4b:47:4a:8b:20:01:b4:22:14:71:d2:3a:
da:a7:fa:4e:71:a7:e3:47:7d:04:70:ef:14:45:5b:6e:b0:ae:
ac:ba:a5:e1:96:a8:2d:bb:d8:66:85:af:2f:44:21:db:23:58:
99:60:9e:f1:af:02:28:8f:4a:10:a9:a1:2c:c8:f1:85:af:5f:
49:0e:71:c8:9a:c5:a8:6f:bb:a5:c4:1f:cc:b0:ac:93:3b:c3:
ba:de:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:32 2026 by rpki-client