
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json)
Hash identifier: 9hh8ZK+ncfmRd/mLcwSnykrik8oF/Wj0saXOUgh2occ=
Subject key identifier: A9:F4:00:4C:90:C0:88:1E:9B:42:87:A1:56:2F:AF:5F:CD:EC:4E:81
Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Certificate serial: 1406
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
Manifest number: 13F9
Signing time: Tue 28 Jul 2026 17:00:58 +0000
Manifest this update: Tue 28 Jul 2026 17:00:58 +0000
Manifest next update: Tue 04 Aug 2026 17:00:58 +0000
Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: PWOith0T4tBKQVVzTLdHlMXmWJGLDT0uMiuCeW2K5dI=)
2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: DL6GA/K6cpxzI2cqMbQjFszw1dEV15dZjZ9FhFB5IeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5126 (0x1406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Validity
Not Before: Jul 28 17:00:58 2026 GMT
Not After : Aug 4 17:00:58 2026 GMT
Subject: CN=6a68e04a-ddec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9a:9d:67:f3:8f:6d:62:8b:2f:28:21:08:23:
24:7b:93:c2:cf:70:93:87:35:31:90:d3:85:f9:10:
79:33:e8:2d:c8:67:6e:02:d8:02:a4:ae:b4:09:9e:
a3:5c:e4:6a:1d:01:a6:ca:dd:52:ec:63:7e:d5:3a:
73:dd:6a:61:64:03:fc:19:72:97:f8:66:2b:6b:33:
46:b4:64:7d:4b:1b:30:49:b2:5f:c4:4b:8d:84:b4:
cb:92:a6:9a:bc:0e:9f:91:c0:b6:08:cb:bf:e6:31:
bb:1e:82:dd:73:1e:10:88:72:b3:f0:8d:6c:ff:0c:
0f:30:14:65:d8:31:f8:2b:59:fb:70:96:ad:75:ca:
5b:29:a7:ce:a4:35:55:b4:28:ab:ea:dd:1f:52:03:
3a:43:3d:8c:fe:a7:98:64:b7:f0:7e:fc:e5:e3:75:
bc:4f:82:02:cd:ee:bc:b3:ae:56:77:2a:38:93:77:
7e:b9:e6:81:96:a7:fe:65:66:67:a5:76:44:fc:bb:
92:a8:b9:c5:4a:01:cf:67:94:3b:01:6a:0d:d9:17:
f8:da:5c:25:dc:df:7f:87:3e:6f:2f:43:42:70:39:
1e:97:12:41:f0:64:9f:df:f3:d4:26:b8:ca:80:ac:
25:5f:a8:8a:ce:bc:c9:27:4e:f9:a7:1d:57:16:1a:
0e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F4:00:4C:90:C0:88:1E:9B:42:87:A1:56:2F:AF:5F:CD:EC:4E:81
X509v3 Authority Key Identifier:
keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:22:00:62:2c:d7:2d:b0:09:f6:2a:f9:ae:02:b4:b0:1b:6e:
57:50:82:7b:0f:f8:f3:76:b6:d7:4a:3e:1a:fb:d7:70:58:de:
dc:cf:51:d8:df:4a:a2:3a:ce:25:db:f4:aa:bf:50:c2:e2:fc:
c0:61:3b:83:e8:a7:19:26:0b:2c:53:2a:e9:60:4c:f7:f5:0b:
40:27:49:b9:19:11:30:12:9c:da:04:d3:0d:c6:43:c2:12:b2:
a6:5d:26:df:94:83:cb:5a:dd:ee:a5:84:7c:3d:d2:a7:39:3e:
4b:c4:53:26:fa:fb:03:f1:ce:44:40:8b:30:a3:d9:1a:1a:3f:
e5:22:8d:dc:29:f5:a1:70:2e:71:3e:a6:2e:97:53:66:73:75:
1a:4a:a0:2f:45:3b:56:8e:10:cf:9c:a9:d2:75:41:e2:b2:0f:
7b:69:4a:be:37:20:af:14:36:ba:f6:24:8a:ea:e7:6a:ee:eb:
a2:50:56:b6:29:09:de:65:4c:b6:fa:e4:46:a2:d0:6b:b1:b5:
b3:00:9a:18:b6:e4:0f:f1:9f:4e:11:90:42:ab:ba:db:42:50:
8a:0c:72:e0:28:0c:00:9b:c8:51:f9:dc:1e:ac:5d:c5:2a:2b:
24:96:42:4a:f8:74:e8:ac:fb:83:57:e0:c3:d8:5f:08:ba:d4:
cd:8f:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:01 2026 by rpki-client