
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.mft
File: SbFjv0T6AQzCGyh9FK4jnPm5-50.mft (raw, json)
Hash identifier: S5c39h3c9h9NGDisw2ov78KvcI8buZYVRgdFmFBvt/A=
Subject key identifier: 1F:CC:77:8D:15:3F:9E:3D:B6:98:AC:99:E3:0A:4F:B5:32:3E:8A:8B
Authority key identifier: 49:B1:63:BF:44:FA:01:0C:C2:1B:28:7D:14:AE:23:9C:F9:B9:FB:9D
Certificate issuer: /CN=A91A06BB/serialNumber=49B163BF44FA010CC21B287D14AE239CF9B9FB9D
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbFjv0T6AQzCGyh9FK4jnPm5-50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.mft
Manifest number: 20
Signing time: Wed 25 Mar 2026 08:03:26 +0000
Manifest this update: Wed 25 Mar 2026 08:03:25 +0000
Manifest next update: Wed 01 Apr 2026 08:03:25 +0000
Files and hashes: 1: SbFjv0T6AQzCGyh9FK4jnPm5-50.crl (hash: /H4uhOhI6EJ0umtTWyZCH/o6jTJI6chgAUn9ds0k5oM=)
2: 448E51A6FCE111F0BAFBF562706F56BC.roa (hash: Q/k8f4KHU9rw70gcNcv9NR2wRmt43g2EOQ3jnBc1XaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.crl
rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbFjv0T6AQzCGyh9FK4jnPm5-50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A06BB, serialNumber=49B163BF44FA010CC21B287D14AE239CF9B9FB9D
Validity
Not Before: Mar 25 08:03:25 2026 GMT
Not After : Apr 1 08:03:25 2026 GMT
Subject: CN=69c396ce-24af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:cc:e7:9c:40:13:7b:ad:51:ab:83:5b:20:
62:05:2a:5b:ec:3f:c0:a7:af:35:e1:6c:63:18:c6:
5c:0c:83:0d:af:4d:c0:ba:de:0d:85:d0:6f:55:d5:
46:42:fb:ff:3b:f0:32:70:71:ff:c3:22:cb:65:30:
12:d2:6b:69:4c:b0:14:03:2f:29:df:a0:bb:a6:dd:
70:e7:f2:67:e7:ba:5d:dd:1c:67:42:bb:8f:59:88:
9f:7f:46:32:29:1d:d4:6e:c3:59:1d:39:3e:8a:30:
ad:71:cd:27:eb:f9:9c:7d:b2:8a:92:d8:d4:de:22:
07:70:d9:6b:d7:bb:07:75:a1:9d:d7:c9:ab:d6:7f:
01:85:ef:51:47:ab:97:b5:e1:dc:4d:2e:21:0b:77:
86:c8:84:d0:5a:62:85:b5:b3:82:2b:97:ab:fc:5d:
c1:19:97:4d:9f:4d:ef:9e:5b:df:10:4d:7e:b4:18:
6c:8b:09:f8:c3:61:a5:7f:62:06:d6:f7:a8:8d:6e:
37:d4:a7:23:7c:10:47:ac:aa:1d:e6:f7:d9:1d:25:
8a:8b:2e:04:6d:90:58:3a:66:fd:6d:e4:a5:3e:05:
d9:69:74:4a:e8:0a:aa:a1:36:ce:98:b4:21:a3:5e:
e4:9c:c5:c4:23:1b:dd:b2:41:ce:93:12:0e:71:b4:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CC:77:8D:15:3F:9E:3D:B6:98:AC:99:E3:0A:4F:B5:32:3E:8A:8B
X509v3 Authority Key Identifier:
keyid:49:B1:63:BF:44:FA:01:0C:C2:1B:28:7D:14:AE:23:9C:F9:B9:FB:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbFjv0T6AQzCGyh9FK4jnPm5-50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:0f:4e:01:20:e7:23:b0:bb:6b:58:66:a7:05:9c:b5:4e:78:
14:87:8a:83:d2:7c:b9:2d:19:5e:f9:ec:85:07:8a:84:fa:61:
4d:13:9c:1d:b0:c1:c2:99:1c:15:f3:c2:e5:35:7f:61:25:76:
f8:c5:f1:a8:fa:63:8d:3a:4a:65:89:f9:78:f6:57:5f:28:f8:
fb:b9:72:e1:6f:1d:87:d6:b1:c9:71:b4:ad:a9:8c:f9:6f:09:
29:e6:2b:ae:c9:3d:1b:4d:9a:a4:5a:99:d5:da:54:5d:60:d5:
13:08:d3:35:e5:55:61:70:86:e6:07:7c:0b:d5:c4:28:f4:b5:
12:a5:74:bb:c4:16:c4:a4:89:ec:ca:a6:ce:68:82:57:23:c5:
c1:98:29:66:60:1f:e1:f9:0f:c4:ac:c4:73:34:bd:4d:96:03:
07:cd:a6:39:0b:1a:67:7e:15:fa:99:fe:fe:94:54:fc:e3:21:
50:41:96:7c:19:09:0e:26:41:64:81:d5:39:9d:74:0a:b2:09:
77:b9:77:5c:2d:83:d1:d4:6f:76:55:c2:3d:68:b5:4b:a5:bf:
e1:3c:48:e3:f7:54:5a:69:3a:b0:19:b7:5e:89:e9:ce:8b:8c:
48:ad:1b:94:40:cb:ce:eb:7a:5e:c0:d1:42:c7:4d:f9:33:92:
48:41:28:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:41:29 2026 by rpki-client