
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
File: sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft (raw, json)
Hash identifier: 7ySlpEI2U9GpkATExWxp0UKCvhduj/kqmSz4IayJ0GY=
Subject key identifier: 98:ED:3B:BB:C0:6E:7D:88:17:20:DC:C2:F0:3D:52:DD:42:EF:2F:C4
Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
Certificate issuer: /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Certificate serial: 1023
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
Manifest number: 1005
Signing time: Thu 16 Apr 2026 17:23:55 +0000
Manifest this update: Thu 16 Apr 2026 17:23:54 +0000
Manifest next update: Thu 23 Apr 2026 17:23:54 +0000
Files and hashes: 1: sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl (hash: HwN7+U6HPsp8lBCBsb4AeAE/EKzj8If8zfcx5l+5bcg=)
2: 8EF29168D1ED11F08D3A6B3CC4F9AE02.roa (hash: 4Xje0XiJFLxR2quCCNpe0kCvsRqAV/JFhxiHtPkeXUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4131 (0x1023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BF1E, serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Validity
Not Before: Apr 16 17:23:54 2026 GMT
Not After : Apr 23 17:23:54 2026 GMT
Subject: CN=69e11b2a-3055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:b8:a6:92:ac:15:96:b3:36:be:9b:cb:63:
35:a9:81:b2:d2:cc:33:94:55:ff:99:96:46:df:99:
02:c3:ad:58:bf:80:e8:34:a7:c9:3d:1e:9f:48:4c:
30:80:19:2e:78:f6:4d:c4:eb:52:12:6d:50:4a:6d:
53:33:08:d2:c5:82:e8:c2:96:5e:48:c7:ae:62:a6:
3b:35:8a:e6:d6:5d:17:cd:c6:b1:71:16:99:14:c9:
b0:8e:83:9a:43:fa:2f:ac:b9:71:d0:50:1a:98:36:
b5:7f:f6:e1:5f:0b:b9:4d:85:37:a0:d0:8d:dd:77:
a3:ae:ec:02:c3:dd:c1:aa:4e:11:c1:75:03:3b:85:
5e:9f:7c:6f:73:5c:81:64:86:28:94:3f:11:c0:dc:
02:2a:62:67:2b:15:b0:b1:ec:ac:85:19:71:5b:36:
f0:95:ad:98:42:3a:3f:71:cd:14:c9:82:02:63:01:
23:fe:8a:09:8c:b7:64:7c:63:61:37:11:e3:57:68:
8a:51:15:76:22:cc:eb:8e:d5:76:26:dc:f3:96:c1:
c0:2e:2e:7a:8c:69:86:72:c2:43:7b:fc:b4:cd:49:
2b:9b:e1:0b:53:c2:0f:8c:1f:37:f5:1a:32:8a:b2:
05:fa:18:23:ed:68:c5:29:82:e8:64:b1:71:28:21:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:3B:BB:C0:6E:7D:88:17:20:DC:C2:F0:3D:52:DD:42:EF:2F:C4
X509v3 Authority Key Identifier:
keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:1a:fc:f4:f0:fa:ad:f7:c4:a9:6e:78:eb:6a:4a:f9:30:a3:
25:7d:d5:08:c4:70:7c:0c:d4:35:70:af:e3:42:6c:70:2a:68:
c7:73:c9:f2:b5:85:ea:66:8d:46:32:f0:6c:e8:6a:59:0a:a2:
b5:66:5b:73:0c:d6:6d:0f:8c:51:f5:3a:ea:7b:4a:06:19:01:
ce:a9:02:2e:e0:60:9e:25:04:fd:a5:f1:ad:73:8a:48:8f:b2:
0a:52:a6:ad:20:e5:a2:d7:dc:86:5c:7b:15:5c:17:b2:5e:af:
da:ff:f6:70:46:40:33:da:7b:74:02:c3:83:74:a9:57:ab:e4:
a9:b4:4c:de:bc:59:b6:fb:c7:2c:45:24:5a:d4:67:0b:58:65:
07:c7:47:9e:6f:73:06:6f:e0:dd:fb:7b:f7:7b:38:da:99:a5:
f6:8e:ab:52:c4:a4:3c:0a:db:1d:b4:27:36:21:65:46:2b:4e:
be:91:3b:1c:f1:1d:69:f7:5f:8b:02:07:66:9d:ae:28:69:d7:
15:35:38:6f:87:96:12:99:3b:11:66:7b:05:20:6d:e7:8d:b1:
5c:f5:4f:79:04:81:36:1a:f1:ab:1d:46:72:a8:7e:74:36:41:
19:39:9c:32:f2:cd:a8:33:81:f3:bb:4f:e1:f7:d2:15:1b:49:
c1:b4:40:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICECMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JGMUUxMTAvBgNVBAUTKEIxNEIyRUU1QzVFRDczNkFCNzM2QjI1NTM1ODY3NTlB
RkNERUMzRTIwHhcNMjYwNDE2MTcyMzU0WhcNMjYwNDIzMTcyMzU0WjAYMRYwFAYD
VQQDEw02OWUxMWIyYS0zMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAznq4ppKsFZazNr6by2M1qYGy0swzlFX/mZZG35kCw61Yv4DoNKfJPR6fSEww
gBkuePZNxOtSEm1QSm1TMwjSxYLowpZeSMeuYqY7NYrm1l0XzcaxcRaZFMmwjoOa
Q/ovrLlx0FAamDa1f/bhXwu5TYU3oNCN3XejruwCw93Bqk4RwXUDO4Ven3xvc1yB
ZIYolD8RwNwCKmJnKxWwseyshRlxWzbwla2YQjo/cc0UyYICYwEj/ooJjLdkfGNh
NxHjV2iKURV2IszrjtV2JtzzlsHALi56jGmGcsJDe/y0zUkrm+ELU8IPjB839Roy
irIF+hgj7WjFKYLoZLFxKCGwqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjtO7vA
bn2IFyDcwvA9Ut1C7y/EMB8GA1UdIwQYMBaAFLFLLuXF7XNqtzayVTWGdZr83sPi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkYxRS9EQkIyQkY2NjZF
NkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMycTNOckpWTllaMW12emV3
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NVc3U1Y1h0YzJxM05ySlZOWVoxbXZ6ZXctSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkYxRS9EQkIyQkY2NjZFNkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMy
cTNOckpWTllaMW12emV3LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAghr89PD6rffEqW5462pK+TCjJX3VCMRwfAzUNXCv40JscCpox3PJ8rWF6maN
RjLwbOhqWQqitWZbcwzWbQ+MUfU66ntKBhkBzqkCLuBgniUE/aXxrXOKSI+yClKm
rSDlotfchlx7FVwXsl6v2v/2cEZAM9p7dALDg3SpV6vkqbRM3rxZtvvHLEUkWtRn
C1hlB8dHnm9zBm/g3ft793s42pml9o6rUsSkPArbHbQnNiFlRitOvpE7HPEdafdf
iwIHZp2uKGnXFTU4b4eWEpk7EWZ7BSBt542xXPVPeQSBNhrxqx1Gcqh+dDZBGTmc
MvLNqDOB87tP4ffSFRtJwbRATg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:11 2026 by rpki-client