
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json)
Hash identifier: 2cdA27FvSQJjphMovm2RbiyIfeoUxd3qchGr2sPg9qI=
Subject key identifier: 16:E7:65:B1:C0:5F:62:15:64:D6:E9:1D:0E:12:24:2D:F0:65:05:A6
Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60
Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
Manifest number: 0156
Signing time: Wed 25 Mar 2026 04:17:51 +0000
Manifest this update: Wed 25 Mar 2026 04:17:51 +0000
Manifest next update: Wed 01 Apr 2026 04:17:51 +0000
Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: Kid118mGoZDr+BJWfnwGOLQg9c05tgmO4GtetZqdi3I=)
2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: Tj5gTHhoX9WWHocvM2xmwzU702FbIz9gPO8dWq1koOk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl
rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3D89, serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360
Validity
Not Before: Mar 25 04:17:51 2026 GMT
Not After : Apr 1 04:17:51 2026 GMT
Subject: CN=69c361ef-78dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9a:d2:e6:6e:88:c3:94:53:61:76:5f:2d:fc:
7b:e6:47:21:e5:8a:4f:86:ec:27:e5:d5:eb:c7:46:
a6:67:1b:6a:5f:28:3d:2a:3a:14:34:f8:3a:8a:9f:
f7:2d:d1:da:f5:ee:33:90:8e:b7:e3:7c:65:38:3d:
ff:d5:43:ad:71:44:64:bf:4e:57:94:d6:cb:ff:bd:
04:44:bf:78:01:3e:4f:aa:1f:b9:3e:51:ce:03:70:
8c:40:99:9e:fa:bd:07:1b:30:a8:c1:31:48:cb:66:
7d:92:6d:e8:34:35:ce:f4:95:29:ef:2a:0b:9b:87:
9d:12:a1:d9:5f:16:d7:0f:e6:08:9e:6a:bf:8b:f8:
3a:73:c0:ea:f9:cb:d2:7e:8d:6f:7e:d4:1c:91:73:
a3:cb:d4:3c:3c:8d:7a:f2:c3:2e:7d:fc:e1:8c:e2:
1f:b3:80:71:23:4d:33:03:42:00:92:e1:61:fb:1f:
72:c3:af:41:2d:de:34:bb:e0:4f:90:89:95:2a:00:
18:4f:33:78:6b:5b:aa:70:1b:01:8f:22:cc:09:7e:
20:a3:93:b2:d0:78:98:7a:ac:ca:b7:58:2e:27:e8:
10:5d:f4:d3:fd:82:df:43:81:93:73:88:43:3a:40:
36:58:2f:24:6a:d7:94:50:eb:6d:d7:7d:ea:f6:66:
44:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E7:65:B1:C0:5F:62:15:64:D6:E9:1D:0E:12:24:2D:F0:65:05:A6
X509v3 Authority Key Identifier:
keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:70:29:57:7c:3b:cb:2f:d6:62:f3:d9:93:54:95:5f:fa:83:
63:fe:16:a2:66:de:74:f9:96:24:b0:1c:80:bb:c4:c4:36:23:
37:dc:fc:38:1f:22:b3:2f:0b:c8:20:ab:c6:0d:0b:78:8e:73:
48:76:2e:11:82:2b:92:4d:58:e3:9d:a6:f9:31:a1:04:4a:a6:
0c:1b:69:dd:b7:cd:7e:99:4b:20:17:71:e5:0a:40:6b:8d:53:
76:31:3c:25:64:d8:f6:a1:53:a4:1f:af:1b:13:c1:db:c1:e9:
5f:52:61:2a:44:35:14:11:94:d9:60:c3:25:e3:43:ce:10:0b:
f5:6f:6a:8c:3e:6d:e6:e2:4d:7d:92:26:7d:21:4b:ed:14:41:
b6:90:72:98:c9:bd:f2:e6:cc:51:8a:48:b3:f4:ff:ac:c7:20:
90:6f:31:ba:e9:50:3b:c8:1b:32:20:16:55:fe:99:0e:a5:65:
ba:41:ad:ae:c4:a3:3f:a8:a7:a4:60:43:15:8b:53:81:68:9d:
53:45:8e:50:59:7a:a0:c6:9a:91:49:30:7d:a0:82:94:1d:79:
67:b3:19:a0:57:ef:0d:a1:e0:88:0d:8f:b6:80:da:3a:2f:65:
30:a6:fa:cf:88:65:f3:5d:89:45:0f:18:93:fb:ea:1a:aa:d7:
8c:df:ef:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:33 2026 by rpki-client