
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json)
Hash identifier: Am//X/JT4zCkbDbtNR9cwVOTGnUcOJeLKhWihaljqJg=
Subject key identifier: AF:96:E9:58:8B:87:F6:1F:34:A9:C5:40:B7:C1:52:C8:4F:D8:07:3B
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 02E0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
Manifest number: 02BF
Signing time: Sat 13 Jun 2026 01:29:31 +0000
Manifest this update: Sat 13 Jun 2026 01:29:31 +0000
Manifest next update: Sat 20 Jun 2026 01:29:31 +0000
Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: j1AAPb6Ku35QxYtC+YM1hytX4mT2Oe8oZ7St7aqVPXE=)
2: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 0XIzwd7D2/6iAcpSl1J963JfV4yO/w+9LYIuULpKH7s=)
3: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: 2dB8losCkzflgKLeyufFpykKeZbPyeG/91dZ2ar3/fk=)
4: C1ECF984D07411F0B0B35C27C4F9AE02.roa (hash: 4b1qRgjlNRcZ+iubckIse8edU98Q81NltkHwnBtFg58=)
5: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: WbC9Zi3FkuUimM2LDo18sEOCgwjkb/IqEbL/LDR9mkg=)
6: C163E3D6170C11F1997E579B043D8C67.roa (hash: +bMsiCqkQRPGuAsovwzV+Jwx1b0r6sOT2iZqA0KUI2o=)
7: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: G3atXAKqq6oFKBpr32HyeNbKvnZw8JFgcP/o+eZXrQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: Jun 13 01:29:31 2026 GMT
Not After : Jun 20 01:29:31 2026 GMT
Subject: CN=6a2cb27b-a668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:6a:79:48:81:71:29:fd:2b:56:42:99:16:
6c:35:d4:ca:32:df:d2:0e:dc:28:53:89:0d:27:c5:
69:e6:6f:8c:39:ee:ab:d0:0f:de:e9:a3:e9:16:8f:
e0:25:d3:c6:c8:19:2b:f5:49:c8:aa:44:35:62:df:
83:d0:13:06:52:6b:ac:1e:db:6c:ab:e9:ac:f3:06:
78:18:c6:54:87:72:9b:f2:45:aa:11:30:85:9b:96:
a8:b4:53:a1:71:dd:a0:8c:a6:9f:94:0f:1f:e0:d7:
f6:a4:27:70:df:95:0e:86:9f:ec:5e:41:92:68:5e:
24:21:23:45:49:ec:80:50:92:51:20:6d:98:cb:5f:
b0:3d:52:96:a6:c2:ed:86:d7:41:63:f4:16:1e:7f:
10:54:e4:fe:ed:85:57:ce:ca:ef:ee:61:38:b2:67:
c4:86:db:db:df:16:68:56:48:a5:77:bf:bf:80:12:
96:71:95:5b:b5:95:98:0d:f3:bb:71:d9:a0:33:39:
19:db:07:36:2a:97:1c:ca:f4:a4:35:0d:6d:07:ba:
9a:aa:31:b1:24:3f:f5:d1:96:a6:2b:5a:06:43:ee:
2a:a9:68:27:ce:30:41:16:8e:c1:4e:ee:7a:64:ea:
dc:0c:20:97:43:d2:8d:37:f5:58:84:6d:b3:b3:96:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:96:E9:58:8B:87:F6:1F:34:A9:C5:40:B7:C1:52:C8:4F:D8:07:3B
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:19:a7:27:e1:c9:c1:8f:79:46:d8:2a:85:ee:cd:f9:f4:b7:
46:42:1d:6b:ae:f5:cb:f0:fb:34:a5:97:87:1e:c0:50:e2:3d:
68:65:61:4f:ca:e7:c3:e3:f2:dd:b9:34:a4:3a:9d:00:7e:39:
a0:bc:11:13:d4:ce:75:13:39:b8:67:ca:83:8b:f6:5a:2c:09:
d6:04:0b:62:64:d5:a0:8b:4c:ee:26:31:04:34:6f:a1:cf:89:
06:79:79:e3:6b:29:84:61:27:41:6b:73:f6:56:12:69:29:9f:
4e:12:6c:88:32:c1:66:38:3a:81:bc:fc:59:83:5d:4a:20:da:
02:91:ac:ce:82:d2:df:ab:20:86:e4:37:00:91:64:7e:47:c6:
c3:46:a8:69:ec:3e:ea:51:ac:5e:be:1f:6a:ac:81:ee:ad:77:
9f:73:49:03:c8:1f:26:ea:6e:cc:24:a6:16:b3:ae:95:91:cc:
1f:0f:43:06:5d:e7:8d:61:b5:34:a7:d2:02:15:89:03:16:2f:
5a:9c:2e:6e:ba:75:32:8e:53:ee:1c:04:9b:ca:40:d1:82:af:
ae:78:98:76:b2:69:58:93:71:7e:f8:a5:d2:b6:c9:ea:4e:3e:
42:da:c1:dd:61:c5:3a:70:aa:8e:54:f4:23:8c:d0:a2:4a:05:
06:48:d6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:41 2026 by rpki-client