
$ rpki-client -vvf rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
File: Si40gGAMyq6JEirTWopQhmCKce0.mft (raw, json)
Hash identifier: oBnav99g6JuL8vRKcatyquy4xwKZHK81Tel6OypGvig=
Subject key identifier: 81:EA:03:85:39:6C:6D:FE:9F:5C:99:D6:9C:28:A2:59:5C:55:6F:B6
Authority key identifier: 4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
Certificate issuer: /CN=A919603C/serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
Manifest number: 1E
Signing time: Sun 01 Mar 2026 10:22:20 +0000
Manifest this update: Sun 01 Mar 2026 10:22:20 +0000
Manifest next update: Sun 08 Mar 2026 10:22:20 +0000
Files and hashes: 1: Si40gGAMyq6JEirTWopQhmCKce0.crl (hash: FYjqdQNvh/Z58LJsLvldwv99gIiIea7+Crm+WYQ0maE=)
2: 6D31F08EED3411F08AC2355C496F56BC.roa (hash: twXZ1+cMtQnbloMYaJZUKgoR86O6NyBBWpia0F1MIzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919603C, serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Validity
Not Before: Mar 1 10:22:20 2026 GMT
Not After : Mar 8 10:22:20 2026 GMT
Subject: CN=69a4135c-09cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:2a:e0:f9:1d:d1:57:86:a2:35:0b:50:9e:
c9:92:96:ae:94:88:f3:4c:23:35:fe:20:47:2a:95:
ef:93:47:4b:84:21:5c:bf:f4:0a:59:13:ff:e3:08:
19:15:f8:91:b9:db:77:49:b5:57:52:46:d0:82:05:
15:a7:7d:d8:ef:cd:9c:56:f9:82:b6:45:21:e4:6b:
0c:fb:00:09:53:e5:b0:4b:83:2d:18:64:51:78:0c:
b8:57:27:16:43:1d:bc:7f:39:fa:7d:d3:26:bd:fd:
1c:b4:9c:76:e2:94:3c:d5:eb:73:28:e0:cb:cd:ff:
dd:e4:84:98:80:23:04:e1:00:07:94:f9:76:e3:41:
f4:99:7c:1e:bc:2d:88:f6:f8:25:0c:73:d8:df:8e:
e4:20:26:85:fa:bf:aa:1b:ef:ea:b3:7b:8f:ed:c2:
08:7f:b9:1d:f2:00:06:e1:bd:b5:dd:70:4f:e2:e2:
0d:7d:a9:af:1d:30:80:b9:15:81:e4:a6:fa:bd:63:
97:9a:5a:31:11:d1:08:b5:1a:90:e8:b9:bc:1c:8b:
eb:3f:0a:be:89:50:b9:e1:1b:f1:1f:9a:ef:78:55:
e5:42:39:e7:d9:23:40:98:78:c1:88:d8:4d:68:e9:
aa:14:3c:09:b3:d1:f3:04:a7:bf:d0:90:1b:3f:ca:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EA:03:85:39:6C:6D:FE:9F:5C:99:D6:9C:28:A2:59:5C:55:6F:B6
X509v3 Authority Key Identifier:
keyid:4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:6e:6a:b2:25:a8:94:49:19:bf:dd:31:e2:78:76:98:f7:d3:
45:e1:4d:de:2a:8d:e0:c0:62:fd:eb:0d:9b:d1:8c:70:6c:86:
a3:74:91:34:72:9d:8b:ab:c3:f1:29:ed:a9:af:0f:75:f8:81:
12:fd:0a:d5:d9:1f:2c:e7:4a:7b:0d:d1:7e:2c:a6:31:23:56:
8a:58:39:5d:01:bb:9b:b7:78:06:60:6b:c7:18:fa:76:bd:ad:
01:f0:4f:04:98:25:ef:8e:cf:86:5f:c0:83:3c:55:f0:fb:71:
22:66:0e:1c:9f:09:55:df:85:fe:5b:3b:c1:8c:67:43:5e:fd:
3e:37:0b:d8:0b:a0:25:a8:26:45:47:61:89:ba:b6:3d:91:91:
6e:07:4f:96:74:54:8a:0b:1c:d5:66:18:e3:28:ec:73:1e:fc:
2b:43:57:82:3b:bd:d6:2c:fc:f4:71:e8:65:34:4a:b6:ab:c0:
6b:3e:ee:6d:55:b8:12:b5:fc:a9:c9:3a:2f:a5:7f:41:2d:ae:
ed:8d:bf:42:29:3c:6d:ac:7b:4d:dd:69:9b:82:24:8a:22:34:
7a:eb:e5:f8:b9:4e:85:66:7b:20:67:9f:17:04:cd:bc:cb:04:
49:e5:1e:85:7b:73:2d:81:b5:77:49:eb:70:16:86:e1:9c:96:
b5:3b:8e:fb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NjAzQzExMC8GA1UEBRMoNEEyRTM0ODA2MDBDQ0FBRTg5MTIyQUQzNUE4QTUwODY2
MDhBNzFFRDAeFw0yNjAzMDExMDIyMjBaFw0yNjAzMDgxMDIyMjBaMBgxFjAUBgNV
BAMTDTY5YTQxMzVjLTA5Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0Iyrg+R3RV4aiNQtQnsmSlq6UiPNMIzX+IEcqle+TR0uEIVy/9ApZE//jCBkV
+JG523dJtVdSRtCCBRWnfdjvzZxW+YK2RSHkawz7AAlT5bBLgy0YZFF4DLhXJxZD
Hbx/Ofp90ya9/Ry0nHbilDzV63Mo4MvN/93khJiAIwThAAeU+XbjQfSZfB68LYj2
+CUMc9jfjuQgJoX6v6ob7+qze4/twgh/uR3yAAbhvbXdcE/i4g19qa8dMIC5FYHk
pvq9Y5eaWjER0Qi1GpDoubwci+s/Cr6JULnhG/Efmu94VeVCOefZI0CYeMGI2E1o
6aoUPAmz0fMEp7/QkBs/ytrbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgeoDhTls
bf6fXJnWnCiiWVxVb7YwHwYDVR0jBBgwFoAUSi40gGAMyq6JEirTWopQhmCKce0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2MDNDL0Q5QkRGMjNBRUQz
MzExRjA5NkJBNUUwQjQ5NkY1NkJDL1NpNDBnR0FNeXE2SkVpclRXb3BRaG1DS2Nl
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvU2k0MGdHQU15cTZKRWlyVFdvcFFobUNLY2UwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2
MDNDL0Q5QkRGMjNBRUQzMzExRjA5NkJBNUUwQjQ5NkY1NkJDL1NpNDBnR0FNeXE2
SkVpclRXb3BRaG1DS2NlMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCWbmqyJaiUSRm/3THieHaY99NF4U3eKo3gwGL96w2b0YxwbIajdJE0cp2Lq8Px
Ke2prw91+IES/QrV2R8s50p7DdF+LKYxI1aKWDldAbubt3gGYGvHGPp2va0B8E8E
mCXvjs+GX8CDPFXw+3EiZg4cnwlV34X+WzvBjGdDXv0+NwvYC6AlqCZFR2GJurY9
kZFuB0+WdFSKCxzVZhjjKOxzHvwrQ1eCO73WLPz0cehlNEq2q8BrPu5tVbgStfyp
yTovpX9BLa7tjb9CKTxtrHtN3WmbgiSKIjR66+X4uU6FZnsgZ58XBM28ywRJ5R6F
e3MtgbV3SetwFobhnJa1O477
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:00 2026 by rpki-client