
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
File: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft (raw, json)
Hash identifier: b6Hjj93a+rJrVuysAF+IhR0vRAff0mWtccZ+OJcBkH8=
Subject key identifier: 8D:BF:8F:E1:34:15:57:DD:A7:4A:E8:DF:FE:B5:A1:D0:C1:5F:E8:78
Authority key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20
Certificate issuer: /CN=A91ECC52/serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620
Certificate serial: 0848
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
Manifest number: 0840
Signing time: Fri 12 Jun 2026 20:59:10 +0000
Manifest this update: Fri 12 Jun 2026 20:59:09 +0000
Manifest next update: Fri 19 Jun 2026 20:59:09 +0000
Files and hashes: 1: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl (hash: cnk73KrVSnuGrV1yfYRaffyxMXbwFvlJ7o1UN0FKbDY=)
2: 65D706B213FA11EB92A6FE61C4F9AE02.roa (hash: uOMbohBjqYkrJACqTf93OXW7s4M6jLEwG//Jh6twRk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl
rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECC52, serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620
Validity
Not Before: Jun 12 20:59:09 2026 GMT
Not After : Jun 19 20:59:09 2026 GMT
Subject: CN=6a2c731d-4af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:f3:52:62:76:e3:f8:9a:84:0c:79:40:f2:
10:45:94:d7:12:6b:ef:20:23:80:3c:50:1e:77:9c:
78:be:a0:6f:5d:c8:ef:4d:04:ae:8b:20:80:05:51:
63:32:41:2d:56:91:20:57:c5:9e:19:74:8b:1b:58:
2c:2a:31:4e:82:2f:da:0a:7b:db:f6:44:b7:25:93:
ab:eb:6f:48:6d:89:2d:8a:ba:4e:27:24:d6:5c:f0:
71:6b:0f:36:ec:e7:d7:7e:c7:62:4e:1f:4b:d0:85:
1d:02:06:50:96:ce:77:15:b8:6d:7a:fe:80:e6:8c:
7c:0d:dd:ca:9b:6c:67:6b:07:78:c1:58:7f:59:0e:
ed:56:b0:1d:74:bc:9f:74:25:19:c2:ee:44:27:58:
59:97:58:2f:56:bd:e1:a5:c4:98:0a:67:d3:bd:19:
98:03:ad:a0:f7:47:d1:13:82:ba:6e:77:ae:d4:4d:
a3:23:28:49:40:69:36:6b:e0:70:60:d7:df:dc:f6:
97:16:e4:14:c6:0d:77:f7:74:16:9f:3b:f8:12:3e:
00:6d:ef:85:2d:84:7b:5b:02:0c:1a:1e:88:ba:fb:
90:66:bc:20:b2:b6:ee:ec:18:82:76:f3:2d:c8:7f:
fe:21:7c:09:87:c4:3a:9b:5d:4d:d1:6f:a0:37:e6:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BF:8F:E1:34:15:57:DD:A7:4A:E8:DF:FE:B5:A1:D0:C1:5F:E8:78
X509v3 Authority Key Identifier:
keyid:4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1c:06:78:08:21:ff:24:09:74:55:3a:81:02:28:92:24:f9:
1d:c1:83:53:9d:e3:f1:7e:9b:f3:9d:31:99:97:72:03:10:3e:
b7:da:0f:e3:b2:2d:44:6c:68:d5:cf:c8:07:78:4f:fc:8d:f3:
61:4c:aa:fb:7a:42:48:37:b7:12:c9:12:1c:e0:9c:b2:3e:87:
20:b8:b4:7b:c9:96:83:71:ab:f8:87:23:7a:d9:fe:96:fd:2f:
45:12:f2:b4:03:7b:68:b9:53:b0:64:24:7a:62:da:e6:bc:f7:
20:83:97:b1:45:15:2a:7a:dd:a6:e1:1d:2d:a2:41:31:bf:8d:
14:a1:03:01:f0:53:e6:14:d4:17:41:a5:e4:cd:1f:8e:db:60:
f3:03:10:b1:d6:2a:a2:b1:42:d5:5f:9e:30:da:24:4e:6d:4e:
ee:09:3c:f3:06:b4:18:ad:32:a2:51:df:f8:67:e1:b6:74:21:
d5:e3:aa:9b:33:51:76:6c:f1:f4:d7:0c:5e:93:40:df:e7:7b:
75:d8:78:4d:61:89:6b:e1:be:6e:f5:a4:ab:3d:97:db:75:34:
5c:da:d4:3e:2f:8f:c3:c3:74:24:41:3a:f3:4b:75:16:d8:a1:
35:4d:0c:b0:8b:c6:f5:8c:9f:7c:48:4f:90:19:d1:d3:0d:44:
c0:62:b2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:15:01 2026 by rpki-client