
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json)
Hash identifier: eJRKglasVGw5i+9vwR4VZkQj4Zk4Tj0Cb4gU3/DtdVk=
Subject key identifier: 4C:0D:20:39:6F:BF:5F:80:ED:77:38:04:5A:E2:6F:BB:0C:8B:83:94
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 031C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
Manifest number: 02F5
Signing time: Mon 21 Sep 2026 01:03:50 +0000
Manifest this update: Mon 21 Sep 2026 01:03:50 +0000
Manifest next update: Mon 28 Sep 2026 01:03:50 +0000
Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: ln4iFw+8KpjOnkGACJz8o4DwFxZVEaMqiKGRGNm3uVA=)
2: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 0XIzwd7D2/6iAcpSl1J963JfV4yO/w+9LYIuULpKH7s=)
3: C1ECF984D07411F0B0B35C27C4F9AE02.roa (hash: /yZQPTsxHkvk4ctloKc7UIVchuakTDwnSbZlJ8wAP38=)
4: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: hkTmLhoHVbaMZHz6R6CzIS8rA7idBoFtN1kqeUeSHm8=)
5: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: CRPg/Q2mXPBEqylj0Jz/coMyIwo1wpypsOjOwHedpMM=)
6: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: ebgtTFO3AasXytfvPXSreDrm4OT7z/0UktQfKH8cIZU=)
7: 3A6D7EA697EE11F187018DAB6C11F970.roa (hash: i+2F5SE8QWLsCFLahpcFi70dethbqd7K67ZjDZ7JpYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 796 (0x31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: Sep 21 01:03:50 2026 GMT
Not After : Sep 28 01:03:50 2026 GMT
Subject: CN=6ab08276-7c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:7a:ee:28:78:a8:89:03:0d:bb:43:b7:94:
b8:ed:67:26:d2:06:a9:47:4b:31:69:fc:94:1e:9b:
b3:95:46:68:47:bd:3c:ba:18:65:18:82:e3:a1:88:
8e:cb:5d:a8:3f:3c:88:22:ce:bb:7c:9e:35:57:e3:
3d:9c:50:0a:c2:cd:87:81:4c:3f:59:f1:a5:17:36:
5c:3d:0a:01:f7:e3:56:29:18:e2:8a:27:e3:93:a3:
69:e9:a9:f9:0e:94:0b:9f:36:e0:15:55:75:7c:91:
1a:53:ed:a4:64:80:0d:ab:dc:bf:2e:d2:b6:8b:e4:
3b:b0:47:55:14:9d:24:97:ba:b1:85:3c:81:bc:7b:
3e:b8:cd:87:f8:59:3a:a7:be:c3:6e:13:97:fe:e0:
eb:96:08:5a:dc:fd:73:b2:6a:36:41:c0:00:23:54:
11:2e:c3:a8:8d:95:a2:d1:26:aa:ee:44:54:77:3d:
da:de:f9:4e:85:ee:14:db:43:ab:39:18:dd:f5:8a:
6c:80:a1:ee:6e:bb:f2:d0:38:38:10:16:b9:b8:fa:
0d:ae:31:31:64:a5:34:77:c9:1a:02:b4:d5:07:c4:
18:94:d1:15:e4:0d:1a:7e:03:e8:f7:0a:a6:ea:6d:
b3:03:97:8d:32:18:af:28:d9:98:9d:98:76:11:c7:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0D:20:39:6F:BF:5F:80:ED:77:38:04:5A:E2:6F:BB:0C:8B:83:94
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0b:ed:27:52:98:c6:c7:c3:b6:f8:bc:8d:09:41:99:8e:13:
ee:1c:f0:17:f2:95:b0:23:31:cd:f1:ab:a4:c2:47:ed:77:c5:
09:73:53:c7:b1:5a:c7:f9:f2:d7:8b:e1:4f:5b:31:17:87:c9:
b7:4e:e4:6d:e9:b9:2d:2d:f7:3a:2e:84:5f:0b:c2:4e:9c:6d:
f7:b4:cd:8b:75:87:e7:4c:9e:3b:08:5e:00:93:5d:46:67:1e:
2b:d8:af:2f:f9:c8:96:29:9a:c1:09:fd:d5:88:16:00:c3:87:
47:8e:da:f1:fa:ea:a5:31:12:00:1d:de:37:b0:43:50:4f:d8:
f1:cb:4e:93:00:96:a4:e8:65:2e:de:27:0d:12:a5:7a:fc:0e:
1e:e9:c4:2d:e7:b7:d8:1e:6a:b6:f7:9a:6c:c0:55:ce:5f:10:
bd:30:ae:27:0f:b2:32:1e:d3:a0:0a:f8:9e:8b:9f:19:f4:5b:
fc:ba:83:b6:7a:73:47:92:16:46:a6:37:f1:3d:31:5c:b7:ac:
4f:4c:41:dc:cc:1d:f2:ac:43:0e:34:ad:1c:5a:4e:7c:f5:ba:
d8:b8:8b:b6:f7:e7:64:08:47:08:9b:2e:36:6f:e7:61:bc:bd:
f7:e4:08:5e:ad:e4:9c:e2:fa:5d:6d:15:63:26:c9:67:c2:90:
59:97:e2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:32:46 2026 by rpki-client