
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json)
Hash identifier: +uZdopQXsoKL4bIvE3g5X9zK9vkuuQGePRyJR54Nkog=
Subject key identifier: 98:CC:00:64:8F:F7:25:D4:A5:CC:20:66:8D:09:48:EF:66:90:AB:7B
Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11
Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
Manifest number: 01A2
Signing time: Thu 23 Jul 2026 05:38:03 +0000
Manifest this update: Thu 23 Jul 2026 05:38:03 +0000
Manifest next update: Thu 30 Jul 2026 05:38:03 +0000
Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: VHRcrhv8yc0X94ssHACFXFfTLRCzByk+lv9beJylPnc=)
2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: 1WmqXCaGoy8d1Y/+sJTFSYYcOn86Qor6prAagLIyE6A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl
rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811
Validity
Not Before: Jul 23 05:38:03 2026 GMT
Not After : Jul 30 05:38:03 2026 GMT
Subject: CN=6a61a8bb-de43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:d5:2b:9b:77:31:96:42:38:ad:55:76:65:
33:0e:dd:9c:fb:ac:8c:7d:65:23:90:86:88:c6:22:
40:4f:03:a7:cc:4e:be:69:9d:fd:3c:a0:d8:7a:41:
99:2d:4e:80:a2:81:1b:14:f7:82:ad:12:83:a8:8d:
ee:2a:49:d0:26:00:dc:27:e3:9b:6c:de:a6:03:e2:
97:68:75:b1:67:3c:55:f5:ac:1a:53:35:de:7b:ca:
df:f5:7c:f8:58:70:5e:9c:a8:79:4b:c4:e8:5f:d0:
a3:31:0c:25:bb:ce:c6:be:fc:00:77:2e:d3:1f:16:
d9:23:08:4f:7a:0d:52:ef:b2:ef:af:66:9e:7f:df:
e6:27:81:c4:99:f4:9c:4c:3a:fd:d4:ae:61:93:d9:
f5:f7:9a:81:c1:58:a2:d3:41:15:3a:a9:8c:fe:86:
15:e2:89:b9:94:45:50:aa:a7:c7:6f:44:12:47:4b:
17:b3:b2:25:3b:d9:42:9b:48:8c:d1:51:18:af:35:
e5:3c:b9:c4:eb:6e:b0:05:cb:dd:c9:1a:21:3a:6e:
c8:28:ab:1f:0d:9c:97:e5:12:8b:92:e8:8f:ff:88:
81:58:30:84:71:df:ba:e8:a7:92:2c:b6:81:35:e5:
f8:72:d8:a7:4a:4c:72:30:8e:78:1f:a7:47:2d:09:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CC:00:64:8F:F7:25:D4:A5:CC:20:66:8D:09:48:EF:66:90:AB:7B
X509v3 Authority Key Identifier:
keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e3:64:85:14:db:34:e9:97:61:1b:e2:e9:7c:83:ad:82:dd:ae:
53:8f:8c:fd:4e:16:a1:29:f3:60:6a:a0:95:e5:b7:ad:e0:7a:
51:f3:12:bd:de:2c:1b:65:e8:61:79:29:7e:52:d4:ef:cf:3f:
76:e1:32:17:bf:6e:a9:db:63:21:aa:9f:10:d1:38:82:58:1b:
86:c9:28:e6:20:76:f5:81:47:75:aa:d4:ff:bb:9b:02:62:16:
31:10:47:1d:fe:5c:05:4c:a4:bd:f7:4a:ed:39:1b:61:3f:86:
9c:d0:9a:19:9d:a8:28:b8:ad:ad:40:3e:d7:35:19:21:c1:19:
75:c9:04:f7:dc:27:3f:27:14:7b:d3:7c:40:92:dd:b3:1d:e1:
13:4f:e6:c4:4e:74:c9:7f:8f:9a:0b:e5:86:92:63:dd:ef:b0:
01:ba:69:19:e9:62:e1:0a:4a:b5:73:4e:27:46:59:9a:7c:28:
06:f5:e2:23:cf:64:40:ab:04:36:e2:ba:0e:d2:f5:15:8f:fa:
26:c5:8e:0c:86:67:b8:31:16:16:ab:c9:22:9f:24:8d:f2:c6:
85:6b:a8:ef:33:74:5a:fe:6b:74:ae:16:e8:94:da:48:8d:c3:
d6:90:24:bb:0b:98:10:72:3f:39:63:fc:b3:9d:8c:c4:6c:cc:
a5:ac:c6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:47 2026 by rpki-client