
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
File: sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft (raw, json)
Hash identifier: Eth8mKixzobQXoiT4iWRiZjEH9uXMWV2aokcnzRdISs=
Subject key identifier: 54:75:5B:3C:32:FB:DA:A4:4E:CF:A4:64:E7:6B:6C:69:C1:B3:45:AB
Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
Certificate issuer: /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Certificate serial: 1076
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
Manifest number: 1057
Signing time: Sun 20 Sep 2026 17:23:05 +0000
Manifest this update: Sun 20 Sep 2026 17:23:05 +0000
Manifest next update: Sun 27 Sep 2026 17:23:05 +0000
Files and hashes: 1: sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl (hash: VS87L4KMvizbkfoXcEkH7XHDsq3ty0RGS+TTptYgG/c=)
2: 8EF29168D1ED11F08D3A6B3CC4F9AE02.roa (hash: bkUKZUvS9EpDP9RLJvv2KmtwT7u1XsXfDuKXS1HnRaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4214 (0x1076)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BF1E, serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Validity
Not Before: Sep 20 17:23:05 2026 GMT
Not After : Sep 27 17:23:05 2026 GMT
Subject: CN=6ab01679-0782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:60:ef:f3:cf:c9:df:76:df:47:3e:d1:a3:
bd:40:38:77:d2:cf:47:dd:2d:e1:41:cc:ec:ab:70:
47:f1:28:96:9c:e5:e6:9a:d9:f4:63:b5:fe:27:94:
33:3c:4a:0d:ac:5b:8b:83:45:5b:f6:d5:92:30:d1:
4b:df:53:9f:dd:08:04:42:c8:a4:49:a2:13:37:ae:
e6:4e:3e:1b:68:9f:ae:6e:c4:31:29:9c:f6:c4:f5:
f5:26:e0:28:a2:6f:5b:c3:a7:a5:fd:2b:1e:00:65:
c7:58:8e:af:68:37:9b:3f:0e:8a:be:44:17:fd:74:
0f:d2:40:75:63:23:f1:1d:8c:39:c4:f1:8f:e0:78:
42:2f:9a:eb:48:58:7e:86:18:b1:9d:ed:ae:48:df:
7e:d9:20:d2:17:af:22:28:11:41:29:26:33:e9:58:
24:5f:9c:b9:40:00:16:93:59:1f:c1:97:67:55:38:
b6:bf:87:c0:cf:fc:18:df:03:05:3e:b1:a8:ea:ef:
f1:78:98:cb:83:b8:1a:7a:c9:6f:c5:d7:d5:19:e8:
1b:3f:2d:45:77:40:e1:c8:19:39:a2:e0:99:cf:22:
4b:90:d8:6b:53:2c:a8:78:b1:ca:88:8a:49:30:c2:
05:59:ef:cc:3e:79:b6:64:7a:5d:ef:c0:d4:96:e6:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:75:5B:3C:32:FB:DA:A4:4E:CF:A4:64:E7:6B:6C:69:C1:B3:45:AB
X509v3 Authority Key Identifier:
keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:ff:88:b8:07:4b:7a:c3:a5:5c:89:f6:db:49:3a:48:da:00:
e5:76:52:99:a9:4b:78:61:36:f7:f3:c7:5f:39:50:ea:33:96:
70:1e:4a:4d:86:89:8a:ca:7e:0c:02:c2:71:6c:db:b1:06:8f:
c7:4f:ac:9e:53:84:29:23:ca:86:cd:29:33:e4:24:01:87:11:
40:7d:e2:4f:d5:09:77:1a:8c:f4:15:15:9e:e6:fc:ec:e6:2a:
39:5d:1c:60:66:4f:d2:08:78:d7:55:55:3c:83:8f:1b:d5:fd:
75:05:b6:56:e9:0c:2b:8a:60:e5:b1:8f:b8:eb:f2:b9:21:92:
50:5e:67:64:31:4b:47:4a:34:32:23:12:be:c6:0c:e6:b0:e4:
68:ff:c5:a2:ab:be:a6:91:c4:10:c4:22:92:b1:e9:ae:40:02:
0c:11:77:31:ea:66:c6:e7:d6:de:af:6b:1a:ef:a5:d0:04:38:
e5:b7:78:22:11:5c:7b:6d:a7:6e:be:dd:fa:e1:f3:bd:f4:0d:
a2:8e:16:6b:f5:0d:34:e0:24:7c:50:82:79:33:4b:60:8e:33:
e5:5f:f4:7a:39:a2:de:86:c9:73:27:24:83:e4:24:3c:1d:ae:
d4:c4:b0:84:af:72:26:ea:2a:fb:27:15:b1:80:81:95:21:d5:
b0:7b:99:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:06:14 2026 by rpki-client