
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json)
Hash identifier: T24Fw9z09fJDplHu18xJQSWM5P9rrzmg8s3FgWypr+I=
Subject key identifier: CF:3A:7A:25:3B:0C:FA:35:1A:97:3C:A8:3E:3B:F1:E3:8D:04:B4:41
Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60
Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
Manifest number: 0194
Signing time: Thu 23 Jul 2026 05:47:11 +0000
Manifest this update: Thu 23 Jul 2026 05:47:10 +0000
Manifest next update: Thu 30 Jul 2026 05:47:10 +0000
Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: DZMeSnZDTDtQ1EeOq9Z/R6AYegML5FHyXPrtmLH68QI=)
2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: 58RBvPli9ah74/loscUZOCI8P+BRuK4NwEuZslUtewI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl
rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3D89, serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360
Validity
Not Before: Jul 23 05:47:10 2026 GMT
Not After : Jul 30 05:47:10 2026 GMT
Subject: CN=6a61aadf-d779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:b8:c0:b3:1d:2a:28:cf:4d:06:b8:e8:dc:
f2:0f:f7:b9:1d:a8:28:13:64:33:67:ae:ed:e6:cc:
c5:1d:1c:3b:f2:94:32:ea:1f:63:4d:5b:9b:17:8f:
92:2d:ff:b3:1d:98:60:64:74:8b:bb:f0:de:1b:7b:
39:2d:09:ae:2b:91:69:00:cf:1a:8b:d1:e4:d7:b8:
98:b6:65:36:e4:d8:17:b6:0f:2a:8b:98:48:fd:21:
4d:8a:f5:bd:ff:e2:42:bd:e0:53:3e:aa:9c:58:05:
91:8e:b6:ac:c6:b7:17:b2:90:92:94:65:95:65:c1:
f8:74:e2:99:3d:23:f0:80:80:8d:72:7d:a5:69:66:
d8:58:80:00:7c:3e:c2:65:05:35:a6:1d:e3:e6:a3:
34:1e:8b:dd:c9:aa:c3:c7:11:03:89:13:d8:0a:3c:
8f:8d:cd:1a:8b:36:7f:ff:b8:8c:77:4b:fd:21:25:
46:01:09:88:bb:15:80:07:12:d6:bd:3a:e9:ef:c8:
c6:eb:62:5b:06:b1:66:9a:40:ad:4f:02:f8:3d:7f:
2a:65:24:61:9c:c9:7e:ae:d4:75:30:6f:50:74:b3:
71:f5:7d:52:42:83:33:9b:a0:53:17:f8:70:46:6e:
15:2f:13:49:4d:a9:7e:ae:fd:06:58:4a:aa:18:d9:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3A:7A:25:3B:0C:FA:35:1A:97:3C:A8:3E:3B:F1:E3:8D:04:B4:41
X509v3 Authority Key Identifier:
keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f2:dd:fa:8c:d5:8c:ec:79:9f:c0:ed:60:41:0c:7d:bc:80:
5b:06:02:1d:18:96:94:0b:84:64:8b:10:97:d8:ae:7d:53:f1:
39:f2:18:7d:8b:fd:cb:c5:86:46:60:03:1b:76:89:a4:16:3c:
fc:05:f3:b0:1d:58:68:50:45:0b:da:f1:33:94:c2:6f:94:c1:
75:37:08:88:4b:4c:10:2b:82:9a:2c:f0:4e:86:b8:55:c9:77:
60:69:d3:ac:b1:a5:c1:92:6c:18:87:b4:c3:3a:a5:71:fc:78:
b2:ef:62:d9:f0:e5:92:f9:e3:55:51:29:c2:a9:9d:e2:71:79:
40:56:94:e1:b4:df:89:fa:40:28:82:01:a8:48:33:b1:5e:9a:
0e:d9:dc:51:75:37:c5:72:f4:d4:25:ee:c1:3b:28:34:97:48:
20:c9:e0:5d:d8:4c:64:03:ef:08:16:46:17:b5:7e:74:28:16:
63:78:b7:e0:3a:09:65:7e:9b:fb:46:51:00:80:ab:5d:78:08:
65:12:16:a0:a2:b4:4c:2e:31:e1:36:b6:72:f8:68:22:3c:41:
68:5a:aa:5b:d1:50:ed:b2:3b:c1:8c:db:52:b9:db:b2:3b:1b:
fd:47:76:d4:c2:31:22:e8:55:6c:a3:d5:f3:aa:a1:68:90:8e:
06:b4:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:43 2026 by rpki-client