
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
File: snbxWm1Kl8SBkekr0WYfNovvIeQ.mft (raw, json)
Hash identifier: c8oXdtd//LU2JBZAlb45BapgFjGqogimeUf2ELtmrwg=
Subject key identifier: F6:0A:9E:5A:3C:28:56:45:FC:5D:94:47:CB:63:FC:4A:85:2F:B2:98
Authority key identifier: B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4
Certificate issuer: /CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
Manifest number: 0113
Signing time: Fri 27 Mar 2026 05:26:41 +0000
Manifest this update: Fri 27 Mar 2026 05:26:40 +0000
Manifest next update: Fri 03 Apr 2026 05:26:40 +0000
Files and hashes: 1: snbxWm1Kl8SBkekr0WYfNovvIeQ.crl (hash: B7wzLvXgudgFzEmRM8LXOAU+yEWHONbeBCuh/2jNAQw=)
2: 3E4B01008BDA11EFA4A11684C4F9AE02.roa (hash: oGULmUol4C7ZfRM6hdyGMsQqikoRQpI0DSnIuLlXu10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl
rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B37C4, serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4
Validity
Not Before: Mar 27 05:26:40 2026 GMT
Not After : Apr 3 05:26:40 2026 GMT
Subject: CN=69c61511-f4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:81:da:19:cc:7f:5e:28:51:9b:18:17:9b:
58:cb:69:a5:03:33:7a:24:eb:3e:7d:0e:bd:d4:e4:
2a:0a:fc:76:d1:0f:0a:ce:83:67:cc:e3:df:02:85:
df:76:01:a8:1d:48:10:1d:80:df:2d:af:5a:65:88:
c1:cd:8e:fe:f3:d8:a4:06:0f:f0:68:8e:0f:3a:3d:
08:6a:59:19:4f:3d:0f:c1:02:ba:e2:23:8a:95:0a:
ca:2a:26:11:f2:24:dc:1b:8b:fe:e2:4a:c0:64:10:
f0:31:d9:e0:28:5c:82:0d:c2:55:21:5e:a3:b2:23:
e5:b2:c9:01:90:a8:63:48:13:53:a5:5f:99:33:ea:
2e:b5:cf:20:df:78:cc:3e:7c:fc:8e:6b:5a:6c:96:
1f:ba:4b:f6:0a:e9:fa:9b:ec:17:99:73:8d:c4:a1:
e8:50:59:bc:4d:eb:9a:76:b8:f6:8b:35:8f:af:b8:
ca:1f:a4:af:91:77:49:fc:83:05:cb:97:a5:54:4d:
18:d4:70:98:6d:4d:af:bf:b4:4d:82:b4:a5:53:3d:
5d:3f:e3:db:89:0f:29:5f:b4:3a:ee:b1:55:e2:62:
64:25:09:af:38:50:2f:e5:a3:2a:f2:49:de:67:e3:
e1:da:da:87:ec:87:a0:0b:8b:8f:c7:d0:0d:b6:67:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0A:9E:5A:3C:28:56:45:FC:5D:94:47:CB:63:FC:4A:85:2F:B2:98
X509v3 Authority Key Identifier:
keyid:B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:b1:c4:9d:6c:3b:e9:40:a3:13:27:8d:56:4b:99:73:2a:e6:
d9:ad:5f:7e:fc:79:5f:ea:12:cf:35:6b:52:16:83:91:c0:2b:
7d:49:ac:f6:27:07:d5:56:7f:92:c0:59:11:1e:94:f9:bd:8c:
ca:65:70:d0:fc:81:07:3a:43:12:c7:9d:dc:7f:90:1a:ce:05:
74:77:13:de:40:29:92:9c:0d:d3:0a:e7:f6:dd:bd:34:43:e2:
49:95:b7:e3:1c:b0:94:4a:12:c0:4b:5f:42:1f:22:0b:11:dc:
a2:d4:69:f5:14:17:61:77:6d:8d:8c:b7:b8:49:9f:0d:6b:57:
34:77:da:ef:a3:9c:17:78:41:be:3b:b7:73:04:bd:53:5f:41:
ab:61:d3:dd:27:07:6e:5e:c2:8f:c2:0e:55:a8:12:71:f0:d3:
dd:32:dc:62:f5:c0:53:b6:38:c2:e9:63:54:7e:49:a9:33:02:
48:10:d3:e3:88:1f:f9:08:d2:0d:24:52:40:ac:d2:d4:60:f9:
d5:bd:32:ab:7b:d1:78:01:90:4d:11:62:c0:5b:0f:a4:83:9d:
e5:9d:16:28:e3:4e:9a:98:0b:7e:47:7b:39:87:00:90:40:61:
94:82:8a:aa:d1:cb:b6:1c:bc:0b:bf:6a:c6:aa:c8:a0:84:cd:
68:f4:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:45:16 2026 by rpki-client