
$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
File: S-1YvEVE5-O16XicZ8Y77JHCfN0.mft (raw, json)
Hash identifier: 75neg+uGGxd1x84zabHXxU/5aDZNEjwBfzHR3k6fJNI=
Subject key identifier: 69:31:BE:EB:DA:49:1B:68:6B:F6:0F:3A:15:15:9F:C5:B0:F7:A2:10
Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Certificate serial: 358E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
Manifest number: 3557
Signing time: Thu 16 Apr 2026 15:15:35 +0000
Manifest this update: Thu 16 Apr 2026 15:15:35 +0000
Manifest next update: Thu 23 Apr 2026 15:15:35 +0000
Files and hashes: 1: S-1YvEVE5-O16XicZ8Y77JHCfN0.crl (hash: 0nyJfT5FnbQEYKJIH7cCv+/VrD2nEwnRqv9sFWVy3NE=)
2: 0188487C15AA11E685F66C3CC4F9AE02.roa (hash: iWSJFLIeKe7hugY4ZJti1OftvD87R1nmtGDBBmbzeUA=)
3: BAD49C82AA9611F098799D0CC4F9AE02.roa (hash: pM9Clvnn4qCGji2jYA6fF0liiqMDQEIYWKiiYCa6P/c=)
4: E3D2704667FC11F0AC42A91FC4F9AE02.roa (hash: ptlT7u2MhuBbu24nscPM+vqHy0ITbmTpmlMUOppZHGo=)
5: D257C8F88FAB11F0A7F64E1AC4F9AE02.roa (hash: G9rHcPIfPgJicicRoBaQDI5mj2H6x4dCQr+TJm0s7O8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13710 (0x358e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Validity
Not Before: Apr 16 15:15:35 2026 GMT
Not After : Apr 23 15:15:35 2026 GMT
Subject: CN=69e0fd17-eb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:fe:7a:f6:17:03:f2:51:58:14:d6:0d:35:
11:39:d9:00:fb:da:ef:0e:d7:35:24:da:c8:ef:52:
95:f2:a2:b9:1b:b3:5e:f4:9b:6b:85:d1:1b:87:b6:
80:10:f5:46:34:68:91:de:f1:cf:2b:6b:d4:0d:28:
c7:53:ce:b6:50:77:28:ba:19:20:6a:a8:a9:92:80:
20:a8:e2:f5:43:76:b6:88:4c:2b:c1:44:c0:ab:b4:
79:83:e9:99:64:cd:b7:bf:23:29:15:b6:f1:47:09:
46:73:7e:ea:32:9c:e9:a0:b3:10:3a:00:22:92:96:
9d:34:86:b1:75:bc:4b:f2:48:c7:78:26:8a:36:ef:
14:c0:88:5b:a5:2a:0c:34:4f:6a:99:3a:18:82:3b:
e9:8f:72:30:19:0e:c8:5b:8e:62:8c:77:90:04:b8:
45:ba:07:61:1c:d4:e0:fb:6d:ce:d6:39:e0:6f:12:
df:56:d8:02:56:15:b2:60:ff:c0:da:80:58:65:11:
c8:38:d3:d7:84:40:65:c4:49:f0:a5:d5:d3:73:b3:
2a:f1:da:d0:ab:57:d0:b5:12:de:dc:1b:84:54:1e:
08:cb:44:20:14:11:8c:4f:f7:1d:f9:7d:01:10:f4:
fe:67:9d:20:99:17:6b:56:73:ea:13:67:34:18:c6:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:31:BE:EB:DA:49:1B:68:6B:F6:0F:3A:15:15:9F:C5:B0:F7:A2:10
X509v3 Authority Key Identifier:
keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:24:17:75:c7:0c:77:dd:c2:93:b7:c4:80:5e:de:cb:17:39:
4b:95:62:bc:9f:13:71:91:a4:17:0a:13:47:14:be:9a:d5:bd:
28:13:f7:23:42:4d:70:b0:4c:97:08:95:84:88:6e:e9:67:39:
1e:db:35:c8:47:49:59:81:57:50:30:47:66:26:a9:68:c2:fc:
0d:fd:8c:22:0a:88:6e:58:7e:22:d9:ce:78:d7:2f:3c:28:e6:
b1:8f:76:f0:8b:41:19:0a:33:c1:59:39:53:38:3b:5e:1e:eb:
da:1d:c4:95:8c:85:0a:23:58:4c:12:64:ae:0e:bb:0e:9d:72:
35:ca:72:4b:b8:4c:15:7e:38:21:87:0e:5d:95:fe:c9:01:9c:
3d:79:d1:6f:ad:5f:5d:f0:25:3c:04:0c:ba:79:fb:c9:8f:6f:
52:0c:e4:33:50:7e:41:e1:15:a9:fe:65:7d:fc:6e:f0:e7:2e:
e5:a0:88:11:4e:c5:f4:fe:ef:01:6a:18:ec:e6:03:68:dc:99:
5f:df:60:5b:8c:2d:1d:d4:45:d6:60:c4:be:76:88:3c:53:94:
da:f9:a4:13:da:e1:d1:26:5f:55:66:0a:24:ea:36:bf:aa:17:
75:cb:c7:2a:fa:8a:5e:1d:78:8c:16:d6:69:70:0a:18:bd:d6:
e0:2d:01:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:26 2026 by rpki-client