
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
File: snbxWm1Kl8SBkekr0WYfNovvIeQ.mft (raw, json)
Hash identifier: R6ESyo+vV/3/1Kna1vIpDCBT4L4ESigfipimijEYK+Y=
Subject key identifier: 05:BB:54:03:26:E4:F6:F3:E7:21:2F:62:FA:6D:68:F6:CE:26:E7:B2
Authority key identifier: B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4
Certificate issuer: /CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
Manifest number: 012A
Signing time: Mon 11 May 2026 05:44:30 +0000
Manifest this update: Mon 11 May 2026 05:44:29 +0000
Manifest next update: Mon 18 May 2026 05:44:29 +0000
Files and hashes: 1: snbxWm1Kl8SBkekr0WYfNovvIeQ.crl (hash: 5vkBkA2SO2oCzn4xevFLgVWCFA/WJKFz2BlKC1qxB6M=)
2: 3E4B01008BDA11EFA4A11684C4F9AE02.roa (hash: oGULmUol4C7ZfRM6hdyGMsQqikoRQpI0DSnIuLlXu10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl
rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B37C4, serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4
Validity
Not Before: May 11 05:44:29 2026 GMT
Not After : May 18 05:44:29 2026 GMT
Subject: CN=6a016cbd-604a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:4d:e6:8c:71:4b:df:31:4f:9f:42:5f:ff:
40:47:b2:a8:65:11:3c:7a:2c:58:0f:b0:55:4a:81:
c8:44:b1:fe:ee:0e:f8:4e:83:9c:d8:5c:6d:98:91:
7c:91:f3:de:e7:45:62:97:28:fd:da:a9:85:46:55:
c0:b1:3d:ed:cc:de:a8:d5:f0:ec:ce:2c:aa:37:77:
51:2d:c4:6e:ba:40:15:c5:bc:f1:e4:ce:cf:31:f2:
83:24:b5:60:0e:00:ff:6a:d1:96:ee:38:b9:6c:07:
88:e0:0b:7c:3c:16:20:9a:7d:be:f0:26:72:7d:3e:
2a:71:58:e0:d9:74:5c:ce:fd:c6:02:de:1a:ea:5a:
d1:dd:ad:f8:b0:84:62:75:35:b3:c1:44:3a:7c:60:
d0:16:31:ec:a2:77:d7:ec:a4:04:0a:39:a0:bc:67:
2b:02:92:67:21:f5:8f:2b:18:01:6a:90:0b:4b:f8:
53:54:fa:01:d8:a1:0a:e1:4b:ea:d0:12:bb:4d:94:
a6:d7:47:f3:14:5a:9f:d0:18:ae:7d:fd:19:12:b6:
36:fe:78:2e:49:42:74:0d:c7:71:a5:0c:fc:1b:16:
ea:c4:43:db:d8:db:68:60:4c:d5:0c:6f:4e:db:52:
8a:87:01:2d:ad:c2:57:09:ca:ee:1b:62:e5:80:c1:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BB:54:03:26:E4:F6:F3:E7:21:2F:62:FA:6D:68:F6:CE:26:E7:B2
X509v3 Authority Key Identifier:
keyid:B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:79:60:bd:9b:85:be:92:8c:56:aa:4e:2d:0b:1c:a2:cb:e3:
44:12:c9:fa:38:9a:69:13:a9:60:fb:ab:f9:11:58:20:14:50:
88:3a:9a:ea:20:0e:d7:b4:65:c2:72:40:ad:54:50:02:3f:12:
52:97:f8:b5:85:0b:d2:14:27:43:ff:0d:73:d9:44:bf:e3:e8:
9b:49:bb:e8:fa:81:d5:80:c9:27:e2:9a:68:d4:1f:89:9a:0d:
33:7a:f5:32:6f:2f:dc:9c:d6:35:42:3d:04:ae:42:1d:79:bc:
b2:7d:03:9c:ce:0a:c1:09:65:7b:1c:e8:d7:86:c6:25:bb:6b:
f3:1f:89:71:13:bc:55:2d:4e:a9:db:2f:6e:77:73:71:6a:cc:
d6:6e:22:b7:a5:7a:95:be:ce:24:94:7b:df:62:3e:d7:ca:03:
14:2a:c5:5b:60:dd:f9:22:df:5e:80:82:8b:2b:73:f0:3e:27:
a9:4b:d2:4e:e6:be:52:de:67:4e:df:34:75:a0:5f:9f:1b:0e:
5c:5e:8c:fb:b2:66:97:f7:7c:84:ec:a0:30:c5:80:42:bc:af:
ba:bd:e8:d8:55:53:2e:3c:2b:10:e8:a7:ab:52:b9:69:fd:e9:
31:1d:30:38:f9:a4:a2:df:92:43:17:b1:81:76:00:91:7d:8a:
cc:e2:60:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:47 2026 by rpki-client