
$ rpki-client -vvf rpki.apnic.net/member_repository/A915440E/EA05A2CE5B4611F1B032521094833773/S6zcKCrVbgzaMdepBozXW5SnIsE.mft
File: S6zcKCrVbgzaMdepBozXW5SnIsE.mft (raw, json)
Hash identifier: 5bdNVxBk+u26pjKVCB77Q3HDockAyV/9qx+tPZjN/70=
Subject key identifier: 7A:22:E3:A0:A8:C4:A8:52:4A:A7:40:53:87:D3:D9:F5:7C:B8:C4:80
Authority key identifier: 4B:AC:DC:28:2A:D5:6E:0C:DA:31:D7:A9:06:8C:D7:5B:94:A7:22:C1
Certificate issuer: /CN=A915440E/serialNumber=4BACDC282AD56E0CDA31D7A9068CD75B94A722C1
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6zcKCrVbgzaMdepBozXW5SnIsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915440E/EA05A2CE5B4611F1B032521094833773/S6zcKCrVbgzaMdepBozXW5SnIsE.mft
Manifest number: 1F
Signing time: Mon 27 Jul 2026 11:17:13 +0000
Manifest this update: Mon 27 Jul 2026 11:17:13 +0000
Manifest next update: Mon 03 Aug 2026 11:17:13 +0000
Files and hashes: 1: S6zcKCrVbgzaMdepBozXW5SnIsE.crl (hash: BnwMlx8UuwORtQOubK9Y9Wf/p3uRF2A3PIKaidBymBE=)
2: 9C23DD445B4811F187CD073F95833773.roa (hash: ljPRUB3g7RiWyYH/UgctlTqbP9nIAv9HVVId34sT6J4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915440E/EA05A2CE5B4611F1B032521094833773/S6zcKCrVbgzaMdepBozXW5SnIsE.crl
rsync://rpki.apnic.net/member_repository/A915440E/EA05A2CE5B4611F1B032521094833773/S6zcKCrVbgzaMdepBozXW5SnIsE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6zcKCrVbgzaMdepBozXW5SnIsE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915440E, serialNumber=4BACDC282AD56E0CDA31D7A9068CD75B94A722C1
Validity
Not Before: Jul 27 11:17:13 2026 GMT
Not After : Aug 3 11:17:13 2026 GMT
Subject: CN=6a673e39-6861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:6a:93:a5:14:e1:b8:42:d4:93:fa:bd:2f:
c7:8a:3a:0a:20:67:bc:ed:34:9b:58:f5:92:f3:72:
bf:7c:a2:4f:38:12:69:1e:19:e8:e0:d5:d7:2a:18:
0c:3a:39:db:0d:f5:49:35:76:a2:6c:a3:72:d4:e3:
eb:c6:16:da:f3:4f:01:1d:23:8f:47:37:31:92:8d:
52:7c:31:2c:ea:ec:9f:b2:7f:b8:9e:28:35:55:e2:
75:63:a7:55:eb:c2:fb:db:5d:c1:18:24:3f:fb:22:
7c:eb:99:84:31:91:31:15:94:1f:12:90:4d:df:45:
af:4e:2e:28:84:56:6b:f6:e8:f4:e5:44:46:f2:4e:
06:19:cb:bb:ec:c7:b3:8f:63:c0:2d:82:99:ce:d8:
ef:36:3e:da:de:a9:c1:41:7d:56:9d:fa:1a:17:44:
2f:f4:81:d6:6c:26:64:12:83:55:46:5a:73:d5:66:
9d:7a:40:ad:75:0d:2d:a3:c6:b7:8d:5c:04:2e:05:
a1:55:1e:c3:4f:f9:a7:41:b3:91:f6:41:85:7a:c2:
62:75:35:03:a4:6a:72:f4:b7:a1:2d:cf:42:0b:f5:
e3:c2:46:8c:c9:d6:7b:ad:f1:8c:5c:4a:f4:2a:d4:
47:c5:26:c1:14:07:38:20:84:79:bc:76:86:75:26:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:E3:A0:A8:C4:A8:52:4A:A7:40:53:87:D3:D9:F5:7C:B8:C4:80
X509v3 Authority Key Identifier:
keyid:4B:AC:DC:28:2A:D5:6E:0C:DA:31:D7:A9:06:8C:D7:5B:94:A7:22:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915440E/EA05A2CE5B4611F1B032521094833773/S6zcKCrVbgzaMdepBozXW5SnIsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6zcKCrVbgzaMdepBozXW5SnIsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915440E/EA05A2CE5B4611F1B032521094833773/S6zcKCrVbgzaMdepBozXW5SnIsE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a1:71:d2:ca:b2:e0:b2:7d:2b:1e:ce:2c:a1:c4:2d:c9:7f:
41:b9:1c:47:8d:94:95:65:f9:32:e6:1f:8e:b4:e0:de:24:b4:
87:ba:7c:44:b2:c4:0d:fa:74:50:11:35:3d:44:70:0e:13:cc:
1e:8e:4f:83:37:b6:84:c2:e6:06:d5:36:4b:2c:7b:91:e0:0d:
f6:75:2f:fd:a1:73:4e:f1:f5:5e:09:e3:f4:9c:77:8f:1d:d8:
d8:b2:7a:08:9b:0b:1a:8d:8c:9f:d4:67:cf:23:88:14:98:33:
d2:c5:92:8d:82:48:44:c2:b2:82:e1:b6:3b:8f:2a:0a:62:32:
dd:1d:51:1a:25:1a:89:3d:04:3a:d3:16:62:39:24:4a:64:dc:
8d:92:b6:ff:47:f4:43:9a:76:2d:bc:21:b9:52:10:73:5f:3a:
da:b3:18:4d:c3:55:07:90:d3:c4:20:02:23:8d:e1:a0:57:e7:
be:6b:da:68:d1:03:80:ad:7c:6c:bf:51:f9:db:d8:e3:5d:7b:
a1:ca:75:a2:e4:fe:46:ef:ef:24:39:a9:68:54:d1:78:7f:7c:
2b:f7:86:f0:42:32:43:64:fc:0f:bb:cf:d5:e0:01:84:14:72:
f7:89:38:79:cd:d8:95:10:bf:a7:98:89:fb:8c:3a:64:50:e5:
63:43:7a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:41 2026 by rpki-client