
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier: FZ8/QnGxO/664pSEzbSKdYOgQYrKUqcnfQ0VQM64wsQ=
Subject key identifier: 8A:55:41:1A:8E:7D:86:E2:21:4D:08:6A:52:D4:74:54:88:7B:4D:3A
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial: 0231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number: 01F5
Signing time: Mon 27 Jul 2026 05:23:32 +0000
Manifest this update: Mon 27 Jul 2026 05:23:31 +0000
Manifest next update: Mon 03 Aug 2026 05:23:31 +0000
Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: 1AggxgyhgsZ4pCuTyL2p+M6SGmOTR6yi+aFNQ+AMP7A=)
2: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: w5rmWZZVBxC2/bAO599UhQgXvs8hWsiDzRokDXUEGU4=)
3: ABCE17E0E15511F0A05B89F1756F56BC.roa (hash: u8tryEt8wfaKIyYRGhYJY4HgZ/+NDx5NswoCB2TbM44=)
4: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VvZ1QMS2eLQmDgXa34u3h0OjHEC9RVEvgUYgcW//Cxk=)
5: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: 5lDSpzmwVyIgUi4h17dQR5e2pFC4svpJ9hXm3aYNHDw=)
6: BB17221E211611F08D31C34DC4F9AE02.roa (hash: zi4/aUqGR718bniuf1jQK9sOH3knTVcJf3T+VbBiSok=)
7: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: sVGpNa8k/xVKsIanvda8jGJL2nHzx0rMDFKMvF7hssA=)
8: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: SBh7/ucfyQHiZDQqOYlLERzU0mOVNQDSYZbvPKFmV+k=)
9: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: 9WvOYEKrWLRFlgDH3zQFRXn/DZmOYwHZaJMDQfO7n/g=)
10: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: JW1ClKNrVsnlpg/5abZXtZdRfLQRkQCfIYnNrzyJDlk=)
11: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: vve+SNs5Y00q7s7j0iECqDMKhK39FhN+snt799G9ovQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Validity
Not Before: Jul 27 05:23:31 2026 GMT
Not After : Aug 3 05:23:31 2026 GMT
Subject: CN=6a66eb54-ffbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:19:1a:87:50:9e:4c:d6:58:fa:5b:8d:5c:
2e:1b:a3:99:8c:f4:d9:ac:9b:f5:75:56:b2:b8:17:
65:40:e2:2d:e7:9a:b9:4c:cf:e3:93:72:f0:af:ef:
35:c5:fd:10:6a:06:58:f9:98:8e:37:79:88:f6:06:
e4:01:33:3c:04:24:7c:9c:e5:b3:b8:ac:83:3d:68:
3f:f1:8b:4c:70:47:49:fd:6b:89:08:0a:9e:69:28:
2f:d7:2b:26:30:db:75:65:df:3e:4c:71:9a:3f:f9:
ea:14:72:07:99:d1:40:90:29:63:53:dd:f7:e2:ce:
98:8d:c9:26:88:cd:5b:97:31:40:dc:d2:f8:5b:db:
5f:e4:90:2e:df:8e:24:d0:0e:b7:01:19:8a:3f:90:
46:91:c1:69:cc:6e:81:e2:44:92:5c:53:af:90:5f:
70:79:59:26:fe:7b:21:1e:61:1d:3a:66:a0:fd:42:
94:ed:9d:9a:60:5d:ad:bd:45:d1:37:cb:0a:78:db:
ee:6b:ba:f1:5a:60:dd:57:d5:b6:25:5d:e9:92:27:
53:77:cd:bf:ec:5c:95:19:ef:e8:aa:fd:04:a4:c8:
8b:6d:b0:0a:0c:e3:4c:4d:45:71:fc:52:17:13:d8:
b1:f7:6f:96:28:56:85:3f:3e:bd:80:7e:37:fb:03:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:55:41:1A:8E:7D:86:E2:21:4D:08:6A:52:D4:74:54:88:7B:4D:3A
X509v3 Authority Key Identifier:
keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:bb:77:42:bf:8d:89:3f:11:e6:b6:ce:25:a0:41:67:30:52:
0c:52:3b:fe:ef:35:c5:ca:2b:11:8f:6d:ce:32:88:69:c7:41:
23:21:0f:d5:48:bc:4d:81:2a:c3:dd:2f:b7:ab:d6:bf:ed:23:
c1:2a:55:1c:14:59:de:04:47:f8:0d:97:b3:95:ed:05:1d:ed:
44:f2:c4:8a:b8:e7:52:b7:e3:d4:42:42:fa:f1:c7:74:28:a4:
96:9a:97:4d:12:90:5a:0e:e3:d5:58:78:d1:47:89:9d:a6:9f:
df:62:5c:79:b7:fd:68:f2:8f:42:ac:d5:d0:3c:60:b9:0f:ed:
c2:a2:e2:78:49:30:1e:c8:3e:0a:1b:0b:b1:c5:0f:5a:8c:4c:
90:49:ae:4f:6f:f8:df:35:64:ea:b5:a4:69:e8:c6:6c:59:d5:
72:97:7b:3d:47:ef:c0:bb:18:36:e8:53:44:30:bd:49:e1:1f:
e0:63:27:43:e7:dd:06:ed:a0:af:ae:6e:bb:3d:eb:d6:13:c8:
3b:ce:96:e9:6c:0f:69:26:23:eb:88:4d:8b:42:de:21:bf:50:
7d:1d:69:19:88:df:ab:d1:c5:29:01:b7:74:fb:1d:3e:13:49:
0d:eb:bf:e2:8e:10:60:37:33:9f:1b:73:20:1a:7e:36:3b:69:
b5:0f:13:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz
OTIyQkY2QTUwHhcNMjYwNzI3MDUyMzMxWhcNMjYwODAzMDUyMzMxWjAYMRYwFAYD
VQQDEw02YTY2ZWI1NC1mZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn9kZGodQnkzWWPpbjVwuG6OZjPTZrJv1dVayuBdlQOIt55q5TM/jk3Lwr+81
xf0QagZY+ZiON3mI9gbkATM8BCR8nOWzuKyDPWg/8YtMcEdJ/WuJCAqeaSgv1ysm
MNt1Zd8+THGaP/nqFHIHmdFAkCljU9334s6YjckmiM1blzFA3NL4W9tf5JAu344k
0A63ARmKP5BGkcFpzG6B4kSSXFOvkF9weVkm/nshHmEdOmag/UKU7Z2aYF2tvUXR
N8sKeNvua7rxWmDdV9W2JV3pkidTd82/7FyVGe/oqv0EpMiLbbAKDONMTUVx/FIX
E9ix92+WKFaFPz69gH43+wOlLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIpVQRqO
fYbiIU0IalLUdFSIe006MB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2
RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5
cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta
U0dvLVllalhpSkk1SXI5cVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACbt3Qr+NiT8R5rbOJaBBZzBSDFI7/u81xcorEY9tzjKIacdBIyEP1Ui8TYEq
w90vt6vWv+0jwSpVHBRZ3gRH+A2Xs5XtBR3tRPLEirjnUrfj1EJC+vHHdCiklpqX
TRKQWg7j1Vh40UeJnaaf32Jcebf9aPKPQqzV0DxguQ/twqLieEkwHsg+ChsLscUP
WoxMkEmuT2/43zVk6rWkaejGbFnVcpd7PUfvwLsYNuhTRDC9SeEf4GMnQ+fdBu2g
r65uuz3r1hPIO86W6WwPaSYj64hNi0LeIb9QfR1pGYjfq9HFKQG3dPsdPhNJDeu/
4o4QYDcznxtzIBp+NjtptQ8TUg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:41 2026 by rpki-client