
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json)
Hash identifier: +bz38KFEJKwg3o86XByKUN5eIWeombpsYcjETMeddpo=
Subject key identifier: C6:70:8E:1B:11:5F:5F:5F:29:8F:8E:95:C2:AE:DB:1A:FB:E8:88:49
Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Certificate serial: 0305
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
Manifest number: 02FE
Signing time: Fri 27 Mar 2026 01:00:57 +0000
Manifest this update: Fri 27 Mar 2026 01:00:57 +0000
Manifest next update: Fri 03 Apr 2026 01:00:57 +0000
Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: 60tuug3uVduf27TrFOIMo8SQOs8i/NT6l8j/THgUPZY=)
2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: LqX1NYcUBpIFn4nEYWAdBnB30XYthrymeUC3YsifzY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 773 (0x305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Validity
Not Before: Mar 27 01:00:57 2026 GMT
Not After : Apr 3 01:00:57 2026 GMT
Subject: CN=69c5d6c9-788f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:a9:a0:7f:34:e4:d6:6c:04:cb:1e:3b:60:
e2:5c:b4:64:c9:83:9f:14:cb:43:50:a3:f8:00:d9:
70:48:85:4e:15:42:b7:7d:35:b7:08:91:7e:81:4a:
b3:db:ef:6d:69:53:01:1b:b8:41:2c:2b:19:a5:b0:
dd:7f:8b:b6:23:2d:a9:04:32:44:af:82:e8:dd:e1:
2c:b3:93:66:5f:11:dd:2c:43:26:83:93:ad:3c:da:
b6:52:76:39:fc:7c:12:af:f9:4d:9a:c8:a1:3e:6e:
fd:63:c8:60:53:69:27:a6:eb:16:0f:6d:e0:28:80:
14:c7:eb:e1:85:6a:2c:1b:25:9e:ea:0e:c4:a3:71:
1d:b0:22:72:ae:d8:21:d3:9d:63:5d:a0:52:b4:45:
ca:91:10:bb:bd:cc:ef:66:45:da:0f:19:e8:06:f2:
71:93:6d:3a:44:06:83:94:b9:94:57:23:d4:e0:ed:
49:34:3b:e7:1e:78:35:87:57:64:3f:3a:ef:db:8f:
e3:c6:3c:3f:aa:bb:3c:3a:5d:f5:49:c0:86:f0:7d:
c0:9b:3f:2d:bb:3c:1e:7c:cd:16:0b:89:21:66:a9:
d4:38:fb:57:46:bb:bb:0a:98:10:9d:bc:88:17:f5:
07:eb:42:7e:bd:e1:99:cd:a3:5a:32:4c:b2:89:1f:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:70:8E:1B:11:5F:5F:5F:29:8F:8E:95:C2:AE:DB:1A:FB:E8:88:49
X509v3 Authority Key Identifier:
keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:78:c6:67:c6:eb:03:86:80:ee:a9:8b:ee:44:b8:b6:d4:8a:
36:14:56:62:0e:14:e3:ec:8b:14:30:a6:b9:b7:df:e6:15:51:
12:65:3f:bc:28:7f:c5:bb:f8:be:74:fa:c6:a2:44:12:f1:6d:
ba:0d:cc:1b:63:d3:7f:29:fd:05:ec:86:fb:dc:36:58:b2:22:
51:8f:bf:52:5c:8f:32:20:97:21:72:ad:08:f5:17:7b:b6:49:
ad:06:b5:79:b1:47:10:32:6b:b4:e2:cc:e6:38:13:0f:e3:ee:
a8:49:53:7f:aa:aa:78:86:d6:f2:b8:4b:91:37:12:75:ff:5e:
70:3a:54:03:fb:4b:7b:f5:99:b0:e2:c4:d4:5a:73:b9:a5:5d:
8d:23:af:7a:b1:16:2d:2a:38:1f:ac:f3:b7:11:03:83:35:e2:
85:45:fa:65:76:b7:ac:87:81:d1:05:45:24:dd:b8:3d:ea:4f:
36:c4:fc:9e:f3:76:4e:1f:1a:57:7b:bd:c8:bd:82:54:8d:fa:
d5:2e:bb:b5:4e:1a:35:77:4a:37:42:0e:3f:31:80:53:97:49:
63:fa:78:c6:a5:2a:f5:5c:ab:75:0a:4b:56:3f:aa:fa:4a:ab:
4d:98:43:c4:0a:64:ea:cd:1e:f1:45:9f:85:06:fa:04:b8:fb:
68:d6:d3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:47:40 2026 by rpki-client