
$ rpki-client -vvf rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
File: Si40gGAMyq6JEirTWopQhmCKce0.mft (raw, json)
Hash identifier: 1rIl3HYPhuQfu6yUC9DR9Rx+2uR+G4+pzzOnUmkZ2Ec=
Subject key identifier: 3C:3C:51:47:D8:77:B8:51:59:F8:BB:8F:D5:C8:4B:A9:38:A1:9D:37
Authority key identifier: 4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
Certificate issuer: /CN=A919603C/serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
Manifest number: 69
Signing time: Wed 29 Jul 2026 09:29:24 +0000
Manifest this update: Wed 29 Jul 2026 09:29:23 +0000
Manifest next update: Wed 05 Aug 2026 09:29:23 +0000
Files and hashes: 1: Si40gGAMyq6JEirTWopQhmCKce0.crl (hash: Cra19QERXO9Bqd05Kky09S1+/ju4oWpFQXFRXwf3rLA=)
2: 6D31F08EED3411F08AC2355C496F56BC.roa (hash: twXZ1+cMtQnbloMYaJZUKgoR86O6NyBBWpia0F1MIzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 08:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919603C, serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Validity
Not Before: Jul 29 09:29:23 2026 GMT
Not After : Aug 5 09:29:23 2026 GMT
Subject: CN=6a69c7f3-c02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:e8:89:3c:23:14:df:fc:8f:51:4a:2b:b2:
77:aa:2f:19:37:32:38:04:6c:7f:42:19:91:db:d4:
26:39:bb:46:40:61:f1:ca:71:f2:22:bc:c0:ea:4e:
76:a3:90:ad:08:65:d9:03:d0:42:b4:62:be:08:45:
dc:85:8b:0d:fb:42:37:ea:1a:36:6d:ca:3f:4d:0d:
ce:fa:cc:c2:cc:43:9e:3d:1d:d2:83:21:01:3f:28:
78:65:1b:5b:a5:be:b9:8d:31:65:04:72:dd:ff:a5:
ce:56:a5:35:84:52:6b:04:4d:30:8b:90:d6:68:7f:
d4:ab:ed:19:5f:ab:20:95:d0:55:bb:3b:d9:9f:7c:
06:a4:29:f8:69:1f:96:e1:9d:1a:13:5c:80:3a:72:
0e:75:ba:56:42:fc:93:1e:4d:6b:60:dc:16:e1:2d:
87:2a:fd:d2:e0:d7:7c:10:c2:b7:8d:6a:2d:9b:2c:
12:ff:51:dd:97:97:f1:b3:c9:24:f0:fd:41:f0:0b:
74:eb:c7:ea:09:43:9d:91:b0:35:50:25:93:ef:5b:
48:b3:95:23:1f:01:0f:26:df:ed:56:9c:4b:b5:84:
b8:d3:4e:9f:f2:71:ac:ce:6c:e7:bb:6e:7a:0e:40:
fd:8f:8d:1d:91:4e:dc:f3:7d:5b:09:68:f4:d7:d1:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3C:51:47:D8:77:B8:51:59:F8:BB:8F:D5:C8:4B:A9:38:A1:9D:37
X509v3 Authority Key Identifier:
keyid:4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:2a:89:2e:fe:0e:5b:95:13:28:21:14:5a:14:98:c8:2c:c3:
61:58:6e:d7:53:e5:4b:75:a0:85:15:74:14:1a:80:65:83:19:
b5:cb:74:5c:89:49:b2:50:69:af:6c:18:22:38:ca:75:4e:8b:
30:2d:1f:a7:d0:97:b0:a4:71:96:b0:0e:d1:cf:dd:80:73:28:
40:61:af:9a:26:e1:69:9d:95:d1:8f:f3:09:16:55:1e:67:d9:
4d:cc:9b:2e:fb:d2:0c:d7:27:1f:c7:13:a0:3d:30:9d:b7:c3:
a4:fd:17:92:56:38:e6:12:f7:c6:98:61:58:fa:38:5f:6f:aa:
9c:3b:50:88:1e:91:7d:15:d5:38:53:9d:78:7f:e6:be:33:8e:
85:07:42:4e:29:52:77:55:4f:2b:8b:8a:9d:a3:de:5a:1e:10:
2f:a9:aa:74:50:be:4b:ac:b0:42:47:68:34:e4:f3:eb:f7:05:
b4:7e:e0:14:0b:56:20:a9:d3:03:3e:dc:4b:c5:9b:d6:b8:82:
f5:34:d5:a2:89:9f:4e:38:06:26:12:a5:da:a8:f1:79:64:58:
e5:82:1a:de:9d:e2:2b:87:b1:04:1e:9a:89:5d:50:fb:2d:ae:
3d:a6:1a:b0:37:73:f5:f4:2a:f6:72:0b:79:46:f4:da:72:1b:
88:0c:1a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:52 2026 by rpki-client