
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
File: SiRb8P512qERSrxQ5rme1DbDLGk.mft (raw, json)
Hash identifier: qeL00qO/y4ORn9WqTDdI885XebjRFNp9HclIhoamNvs=
Subject key identifier: DC:E1:70:1F:03:F4:30:56:CD:1F:35:FD:1E:1A:E1:EC:8E:8E:96:D5
Authority key identifier: 4A:24:5B:F0:FE:75:DA:A1:11:4A:BC:50:E6:B9:9E:D4:36:C3:2C:69
Certificate issuer: /CN=A914D3D0/serialNumber=4A245BF0FE75DAA1114ABC50E6B99ED436C32C69
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
Manifest number: 12
Signing time: Fri 17 Apr 2026 08:46:10 +0000
Manifest this update: Fri 17 Apr 2026 08:46:09 +0000
Manifest next update: Fri 24 Apr 2026 08:46:09 +0000
Files and hashes: 1: SiRb8P512qERSrxQ5rme1DbDLGk.crl (hash: If1UaEG0KDx7gzvFHaHNaJ/hIGGCcetWGavVF+/1w7U=)
2: D11E6E8224CB11F1A3AB4FF6A7833773.roa (hash: x6uhNShvVOgmcKuVqlrOttACB4glBVZA83SSQpSH+7A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.crl
rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D3D0, serialNumber=4A245BF0FE75DAA1114ABC50E6B99ED436C32C69
Validity
Not Before: Apr 17 08:46:09 2026 GMT
Not After : Apr 24 08:46:09 2026 GMT
Subject: CN=69e1f352-5207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:64:2a:2c:2e:2a:1f:93:0f:44:b7:fe:e2:0c:
36:36:9e:2f:c6:68:58:89:83:d5:14:4a:71:22:f3:
e7:8e:3b:3e:f1:f4:20:fa:33:ab:1f:20:62:b4:84:
e5:98:cc:f5:3a:94:a1:fd:3f:3c:5b:68:d1:ad:0a:
3c:2e:9f:d4:87:3e:b4:fc:3d:ee:9c:d2:7f:eb:77:
2a:57:2d:ce:01:f7:2f:a4:56:e0:8e:c4:6c:f2:9d:
88:55:86:11:a3:33:52:b2:eb:40:fe:e3:b0:31:43:
51:02:ad:53:44:05:13:a1:0b:47:38:80:87:3e:33:
f3:c0:f5:0e:59:6e:20:dc:16:09:69:49:1f:b6:86:
71:9c:9b:a1:4f:19:e3:08:6e:1d:fe:e2:e7:f5:50:
6e:98:6b:14:21:9f:86:9b:b6:88:f3:60:b0:b9:4a:
01:2f:a9:1e:bf:62:88:da:95:40:5f:79:46:1d:a8:
5c:70:3f:a4:23:ea:58:f7:e2:32:f2:a6:d4:75:01:
13:2d:e3:5c:7f:7b:8a:dc:a4:52:97:d3:f6:24:71:
47:a7:38:c4:f8:b4:54:11:51:d0:e2:e0:d6:8e:ce:
f8:41:33:5c:9a:02:8a:c4:ee:54:fa:d0:72:1d:b4:
de:43:ce:cf:c8:f4:0d:2b:d4:9d:26:c4:56:f6:03:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E1:70:1F:03:F4:30:56:CD:1F:35:FD:1E:1A:E1:EC:8E:8E:96:D5
X509v3 Authority Key Identifier:
keyid:4A:24:5B:F0:FE:75:DA:A1:11:4A:BC:50:E6:B9:9E:D4:36:C3:2C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:5c:0d:e5:13:28:2a:57:84:0e:af:da:68:ab:b8:18:18:d7:
fc:57:4d:3d:e9:32:aa:81:fb:19:ae:a3:79:99:ef:a1:1e:c6:
3e:27:16:50:1b:04:bd:a0:11:bf:1c:20:ef:46:7d:91:1f:f0:
a8:42:35:17:f0:ac:66:c4:f7:e2:e5:b5:b1:42:a2:3a:ea:f6:
61:bf:7b:2a:24:87:cb:97:f8:97:14:4d:e2:c6:be:85:bd:d1:
e7:40:b4:e7:e1:39:bc:a7:ce:a5:b5:a9:af:29:f1:6d:76:0f:
92:6e:8c:a2:2f:7a:fc:fa:bd:31:48:7e:ae:6c:e3:2f:db:80:
60:2b:09:c2:1e:7f:f9:00:45:59:45:fe:c5:1b:be:be:f8:0d:
65:ef:2c:e0:6a:74:f0:e6:5e:83:e9:70:7b:da:0a:cc:85:56:
70:e2:0c:27:1c:b5:d1:f6:14:1b:2c:e7:9c:ae:68:63:1d:08:
4a:9c:90:41:6b:03:31:dd:22:4d:4e:c2:72:7a:1b:a2:4e:39:
fc:24:f8:6f:75:98:cb:b0:90:62:34:cc:5b:e8:16:dd:11:d9:
c7:25:56:38:40:14:09:3e:75:cc:e3:5f:0f:da:5a:6e:fd:b6:
36:25:cb:ea:9b:f7:38:f6:53:1d:8b:00:04:13:17:4b:0f:05:
6a:d7:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:39 2026 by rpki-client