
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
File: Si40gGAMyq6JEirTWopQhmCKce0.mft (raw, json)
Hash identifier: pbkPABV48rtJkmAQNVjTtOQdFPK3mp2Gq55q18P+MWE=
Subject key identifier: E0:25:E1:F5:AD:97:40:5D:4A:A1:E2:71:0A:B6:48:63:FB:A2:53:FF
Authority key identifier: 4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
Certificate issuer: /CN=A919603C/serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
Manifest number: 85
Signing time: Mon 21 Sep 2026 07:38:19 +0000
Manifest this update: Mon 21 Sep 2026 07:38:18 +0000
Manifest next update: Mon 28 Sep 2026 07:38:18 +0000
Files and hashes: 1: Si40gGAMyq6JEirTWopQhmCKce0.crl (hash: xbbeLfy9qqlnFBQxn8CfZMCNxGuKF7Cw7fMX9O74SsM=)
2: 6D31F08EED3411F08AC2355C496F56BC.roa (hash: twXZ1+cMtQnbloMYaJZUKgoR86O6NyBBWpia0F1MIzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919603C, serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Validity
Not Before: Sep 21 07:38:18 2026 GMT
Not After : Sep 28 07:38:18 2026 GMT
Subject: CN=6ab0deea-9602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:24:47:03:9b:ea:72:4f:63:c5:53:0a:13:
3f:d3:7f:b7:3f:78:0c:bb:ed:d0:3d:6b:f4:cb:b3:
4c:5a:78:07:54:12:66:a7:29:93:d0:8f:5f:67:53:
b1:20:d4:da:67:78:37:a5:80:f6:f8:a1:72:cc:0a:
a9:2f:33:06:76:0b:8b:c7:1e:ca:36:e3:3e:79:61:
2e:3a:c2:5b:3c:41:1f:7f:e0:68:ac:55:18:10:0b:
8d:43:1c:bc:52:bf:78:7d:34:6b:93:08:ba:96:19:
db:25:06:5a:7b:a5:69:69:07:bd:18:63:6c:d2:53:
44:28:ec:69:13:06:72:78:5d:85:d3:15:a0:6c:d6:
c2:a5:5a:fb:36:da:4d:2d:88:d9:75:c3:68:86:9e:
14:37:e0:ca:c2:18:f5:4a:8c:5c:db:f6:f0:a3:66:
93:36:06:f6:80:72:32:b6:08:10:43:e0:05:5e:59:
83:b7:12:68:c6:7e:5f:40:7e:ff:7d:bf:cf:ed:3e:
a2:6a:8f:27:9c:03:f7:81:48:3c:01:4a:ab:fc:e4:
81:a6:52:70:91:ea:fb:f6:b7:0f:85:f7:38:da:38:
37:8a:d5:cd:7a:4b:7e:ea:18:4a:91:0a:9a:59:4d:
74:64:90:0e:84:d4:c3:a5:74:0a:5d:40:c7:04:9f:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:E1:F5:AD:97:40:5D:4A:A1:E2:71:0A:B6:48:63:FB:A2:53:FF
X509v3 Authority Key Identifier:
keyid:4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:b7:5e:3c:c1:55:37:fa:d2:55:f4:5b:a4:dd:57:ca:9a:77:
70:3a:ce:63:b6:d3:94:32:73:6c:71:f9:d7:a1:39:ed:24:6b:
f6:e4:2d:e7:f9:66:66:78:93:7b:ce:1d:d1:c1:9b:83:d6:54:
7e:d1:28:46:7f:58:58:1b:cc:24:e3:35:a7:b0:ed:a1:85:40:
d6:6c:6a:98:a1:5b:99:e7:be:19:3f:a5:a4:de:3c:74:68:3f:
e7:a6:4b:00:45:c0:d9:cf:76:0e:cb:09:a1:86:da:fe:e0:c7:
ff:b6:98:cc:19:4d:34:09:ea:2d:b3:4b:ac:81:8c:99:42:be:
b2:d9:df:49:38:66:75:f2:a0:30:f1:a2:61:77:c4:66:2d:db:
97:e1:85:97:a3:78:96:70:82:33:d9:d2:8f:f2:0d:eb:42:49:
28:d5:21:b0:3d:4f:df:5e:ef:87:e7:58:51:b6:92:7a:0d:7e:
50:83:4f:c9:88:50:f4:18:ba:ae:ea:7e:6a:6c:83:98:eb:cc:
df:42:f8:ae:c1:6f:0d:9e:c7:4c:53:cb:0f:35:ae:f1:e7:7e:
a8:f3:b6:fb:2e:d4:36:f5:8a:6b:57:ff:a2:98:46:f3:5e:6c:
e0:50:84:2c:87:f5:bb:87:a4:74:69:ca:fc:e1:89:b6:a6:2b:
ba:ba:f4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:43:19 2026 by rpki-client