
$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json)
Hash identifier: tt2ojIO4mU1LNxJRGNGx5FTqnu6d7W0OJ4Ku1mnozHo=
Subject key identifier: 5C:00:9A:84:CB:9C:EF:A9:C9:F0:05:75:D7:DD:86:85:00:A3:DE:58
Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
Manifest number: F9
Signing time: Mon 27 Jul 2026 08:22:53 +0000
Manifest this update: Mon 27 Jul 2026 08:22:53 +0000
Manifest next update: Mon 03 Aug 2026 08:22:53 +0000
Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: zUBq8aB9h8RLwugQ6hsk22SbpCTwUO41Lzj5gzg8eXc=)
2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: WQx0gB4vaejrR/+XkuLctOwdLPN5sGooZHjE/arViIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Validity
Not Before: Jul 27 08:22:53 2026 GMT
Not After : Aug 3 08:22:53 2026 GMT
Subject: CN=6a67155d-856a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:04:28:a9:19:1f:4b:53:e1:1d:16:67:ce:b3:
6b:1a:c4:e6:8c:96:69:0e:57:7b:58:2a:03:9e:6a:
35:98:50:cf:b9:50:82:f2:66:36:98:a1:c3:31:15:
93:5e:58:46:a4:7f:88:32:7e:8b:e5:f4:00:5e:66:
44:d1:c5:08:85:39:b0:fe:10:5d:5a:41:fc:8a:5c:
da:e7:20:1c:15:02:87:6e:6f:ac:6a:73:a6:62:e9:
5b:a8:10:57:ee:45:1c:e8:46:f2:22:99:d9:0b:66:
66:0a:32:f6:e1:77:6e:c3:67:47:73:41:e5:a2:5c:
db:4d:18:7b:fb:54:78:20:c0:9b:5d:67:8e:63:14:
6d:b0:8f:b1:10:98:75:c8:e8:5f:ac:43:20:5b:73:
74:bf:06:3e:fe:4e:cb:e4:98:3d:e1:e6:86:dc:76:
2f:5e:9c:57:e6:7a:8c:8e:ec:a9:c2:40:4a:33:3c:
42:93:f2:1f:f0:bb:ae:7f:f5:99:8d:2e:30:e2:39:
8b:eb:be:07:7a:7b:f9:90:44:d3:14:26:b0:7f:fe:
23:89:f6:39:6c:84:08:e1:b3:d3:d9:3d:33:ab:96:
53:20:30:ce:45:b1:62:fc:4f:14:27:fd:56:f4:5a:
4d:e7:69:c6:31:71:5a:77:91:67:59:9b:74:23:62:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:00:9A:84:CB:9C:EF:A9:C9:F0:05:75:D7:DD:86:85:00:A3:DE:58
X509v3 Authority Key Identifier:
keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6c:aa:4b:63:62:4e:ba:8e:8c:7f:f8:ee:5a:05:4f:d7:74:
f8:dc:48:73:b3:14:ac:05:25:b2:98:aa:1a:9a:91:73:d4:61:
45:78:34:9f:e3:4e:ac:77:f7:e8:fd:a1:79:9f:b4:da:32:9a:
34:9b:b3:78:3e:a7:bc:b0:1e:02:d3:c1:81:c6:43:ff:88:2c:
e8:a7:d1:04:72:20:55:6d:c6:f1:a7:fb:fe:00:01:74:31:64:
d9:f4:6a:e5:03:1e:fb:1e:a0:55:c8:84:1d:bd:ac:68:a2:87:
5d:52:1b:44:d4:62:43:14:c6:12:0a:c5:fe:64:4f:ee:e4:6a:
e7:8c:12:f1:92:f3:3f:dc:d5:49:e4:07:a1:6d:4c:bf:9a:2b:
15:f0:f8:33:32:df:23:b7:45:36:ea:e8:3b:c4:62:70:69:e1:
70:56:09:83:dc:fb:7b:17:d2:f5:f4:c0:4e:36:23:f4:fc:af:
29:16:49:c0:c9:23:89:ec:c9:4e:01:b6:e2:46:24:25:65:84:
63:e6:ce:94:b9:0b:1e:c7:24:36:d7:79:88:d9:80:f6:c6:0f:
d6:b9:d7:d3:2d:6e:fc:8f:69:dc:92:ce:96:39:15:ac:fa:87:
e0:c9:90:0d:56:24:cf:00:57:21:44:af:31:4b:b4:c1:4e:48:
95:c6:01:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:22 2026 by rpki-client