
$ rpki-client -vvf rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
File: Si40gGAMyq6JEirTWopQhmCKce0.mft (raw, json)
Hash identifier: 1cxqSODP7Y49hzGDyTdyvcN8Fk9z2BcUZVo4OvuqmnI=
Subject key identifier: 2C:6B:51:50:D7:56:02:7A:52:BB:15:E5:72:A0:52:42:75:B0:83:90
Authority key identifier: 4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
Certificate issuer: /CN=A919603C/serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
Manifest number: 52
Signing time: Sat 13 Jun 2026 08:19:01 +0000
Manifest this update: Sat 13 Jun 2026 08:19:00 +0000
Manifest next update: Sat 20 Jun 2026 08:19:00 +0000
Files and hashes: 1: Si40gGAMyq6JEirTWopQhmCKce0.crl (hash: 20db8zSoNKFMYLOcPPkOMumCCShS0lTCOTArQCB2eD0=)
2: 6D31F08EED3411F08AC2355C496F56BC.roa (hash: twXZ1+cMtQnbloMYaJZUKgoR86O6NyBBWpia0F1MIzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919603C, serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Validity
Not Before: Jun 13 08:19:00 2026 GMT
Not After : Jun 20 08:19:00 2026 GMT
Subject: CN=6a2d1275-f559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:6f:2b:af:1a:fc:17:bb:5f:44:ca:8a:37:
f2:50:e6:46:ad:82:4c:a0:91:64:8e:ed:6a:56:f4:
4a:a7:fe:b6:fa:2a:50:78:bb:38:74:8e:5b:e6:81:
35:43:77:88:de:f6:8d:9b:a6:ad:b7:82:bf:d0:80:
6d:1a:20:48:33:f7:6e:10:0f:93:38:50:7c:73:6c:
d4:fe:3c:eb:91:92:02:05:4a:0f:e1:d8:3a:77:9c:
67:72:25:ff:e3:e7:1d:4e:56:88:bc:82:07:7c:21:
e2:2d:86:e2:d5:b4:14:d0:cd:99:90:67:be:30:4d:
44:fc:80:07:54:09:f8:9c:33:51:27:d9:99:fd:b9:
2b:1c:02:f3:cc:74:80:95:ad:a1:88:ce:cd:b9:42:
0a:b2:41:e2:e8:da:6a:73:fc:a1:fc:de:b1:8c:6e:
5e:7b:a6:71:97:9f:7c:25:db:ad:45:42:f4:85:f9:
fe:da:0c:bc:06:78:7b:d7:55:ed:df:19:e3:eb:cc:
e5:96:49:89:f2:5b:89:8c:97:f3:aa:34:23:eb:9f:
86:58:56:fc:42:0e:4f:fa:ee:f6:fb:0a:29:3a:59:
1c:b6:56:27:d7:50:a8:35:14:4a:5e:5f:73:28:dd:
f8:de:74:cb:d0:e5:64:82:bc:19:5c:d2:75:0f:8c:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6B:51:50:D7:56:02:7A:52:BB:15:E5:72:A0:52:42:75:B0:83:90
X509v3 Authority Key Identifier:
keyid:4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:78:9e:8e:19:6f:5f:a7:88:08:8d:45:ea:2e:5c:1d:3f:5c:
d3:f9:1f:d2:e8:9e:33:68:8a:0d:30:d4:78:e6:48:df:79:fe:
a5:8d:7e:e1:0c:00:74:93:f4:a0:2a:44:3d:27:9d:31:1a:b3:
62:ab:b8:77:cc:bf:c4:23:a0:b7:53:fe:ae:a8:fb:57:94:e6:
d4:73:ee:a2:6a:1c:17:a1:74:ee:5e:74:df:9d:dc:c2:32:88:
e4:5f:fc:53:4b:e8:21:d0:64:bd:4f:d7:80:c5:99:cb:9c:d7:
8b:72:04:6f:44:72:2a:fd:ad:9c:99:5c:46:b4:55:62:20:c2:
23:99:07:60:29:f6:7a:05:f2:3d:54:a5:d6:56:cd:2d:b7:fc:
21:f0:37:81:74:ae:2a:46:dc:63:3f:dd:b2:e9:e7:25:8f:d5:
45:06:8d:ed:75:84:3f:28:be:15:7f:2e:58:88:99:45:5b:aa:
c9:ba:00:3f:09:55:cd:d3:a2:25:ca:76:ef:c3:e9:55:5d:fa:
31:81:18:f5:f0:01:74:fd:d2:d9:cf:26:bb:49:09:01:6e:a1:
06:02:39:d0:b1:14:27:5e:bb:a8:e5:14:76:6f:e9:3d:63:20:
e3:ab:8b:64:5b:05:0a:4e:a4:19:31:de:38:28:a4:97:11:8e:
06:31:69:6c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NjAzQzExMC8GA1UEBRMoNEEyRTM0ODA2MDBDQ0FBRTg5MTIyQUQzNUE4QTUwODY2
MDhBNzFFRDAeFw0yNjA2MTMwODE5MDBaFw0yNjA2MjAwODE5MDBaMBgxFjAUBgNV
BAMTDTZhMmQxMjc1LWY1NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiCG8rrxr8F7tfRMqKN/JQ5katgkygkWSO7WpW9Eqn/rb6KlB4uzh0jlvmgTVD
d4je9o2bpq23gr/QgG0aIEgz924QD5M4UHxzbNT+POuRkgIFSg/h2Dp3nGdyJf/j
5x1OVoi8ggd8IeIthuLVtBTQzZmQZ74wTUT8gAdUCficM1En2Zn9uSscAvPMdICV
raGIzs25QgqyQeLo2mpz/KH83rGMbl57pnGXn3wl261FQvSF+f7aDLwGeHvXVe3f
GePrzOWWSYnyW4mMl/OqNCPrn4ZYVvxCDk/67vb7Cik6WRy2VifXUKg1FEpeX3Mo
3fjedMvQ5WSCvBlc0nUPjDOtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULGtRUNdW
AnpSuxXlcqBSQnWwg5AwHwYDVR0jBBgwFoAUSi40gGAMyq6JEirTWopQhmCKce0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2MDNDL0Q5QkRGMjNBRUQz
MzExRjA5NkJBNUUwQjQ5NkY1NkJDL1NpNDBnR0FNeXE2SkVpclRXb3BRaG1DS2Nl
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvU2k0MGdHQU15cTZKRWlyVFdvcFFobUNLY2UwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2
MDNDL0Q5QkRGMjNBRUQzMzExRjA5NkJBNUUwQjQ5NkY1NkJDL1NpNDBnR0FNeXE2
SkVpclRXb3BRaG1DS2NlMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAXeJ6OGW9fp4gIjUXqLlwdP1zT+R/S6J4zaIoNMNR45kjfef6ljX7hDAB0k/Sg
KkQ9J50xGrNiq7h3zL/EI6C3U/6uqPtXlObUc+6iahwXoXTuXnTfndzCMojkX/xT
S+gh0GS9T9eAxZnLnNeLcgRvRHIq/a2cmVxGtFViIMIjmQdgKfZ6BfI9VKXWVs0t
t/wh8DeBdK4qRtxjP92y6eclj9VFBo3tdYQ/KL4Vfy5YiJlFW6rJugA/CVXN06Il
ynbvw+lVXfoxgRj18AF0/dLZzya7SQkBbqEGAjnQsRQnXruo5RR2b+k9YyDjq4tk
WwUKTqQZMd44KKSXEY4GMWls
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:54:29 2026 by rpki-client