
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json)
Hash identifier: QI/cRtOmiu1YkDpPPpbfS+DILYyIsGFRwSH6VL9CqSA=
Subject key identifier: C2:85:25:18:5F:07:89:80:F3:13:CB:D4:AA:29:0B:50:9E:F1:D9:CB
Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Certificate serial: 032D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
Manifest number: 0326
Signing time: Sat 13 Jun 2026 01:08:55 +0000
Manifest this update: Sat 13 Jun 2026 01:08:54 +0000
Manifest next update: Sat 20 Jun 2026 01:08:54 +0000
Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: VnZy9UB1ZvNLA0+I5RNOZJYQDARAI2486D4JS3MeKtA=)
2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: LqX1NYcUBpIFn4nEYWAdBnB30XYthrymeUC3YsifzY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Validity
Not Before: Jun 13 01:08:54 2026 GMT
Not After : Jun 20 01:08:54 2026 GMT
Subject: CN=6a2cada7-9a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:1a:af:53:c2:f9:7b:24:23:c1:67:d2:5f:
ce:d9:b1:58:07:01:25:ee:00:1f:74:d2:d3:22:e6:
09:3c:9e:85:63:62:9d:8b:95:4e:bc:99:76:51:7e:
64:5c:ca:89:59:00:9e:4b:5e:a5:5b:5b:34:a6:15:
95:68:40:1c:a0:2f:3c:c9:e7:46:5d:4c:41:62:04:
01:71:eb:d5:1a:e1:fa:56:75:0d:59:3a:b4:89:2b:
f3:4b:cd:2e:09:1b:25:7d:2b:2c:ab:89:75:17:5f:
03:f1:c6:4d:9c:fe:60:67:f0:71:05:58:57:ce:05:
23:b9:98:75:cf:92:e5:2a:f8:a9:cf:4e:96:76:95:
14:20:58:b5:85:c8:cf:f0:24:51:ae:12:78:d0:c1:
8b:e9:a2:7c:69:20:13:fa:37:ab:fb:10:64:f0:9b:
f3:94:1e:8b:bc:a6:53:f2:dc:c9:08:a3:60:21:1d:
2b:90:74:5a:ef:94:fc:b5:f2:8d:1d:27:29:c6:30:
28:a9:da:73:0e:6e:27:f7:2e:0e:9d:65:6d:52:15:
ee:db:c6:f8:6e:c5:47:6b:74:70:d6:34:eb:0c:b8:
ca:ec:af:45:a0:9a:06:39:da:c6:4e:38:10:a6:45:
10:08:41:10:8d:3f:e5:36:fb:98:da:7d:f1:33:3c:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:85:25:18:5F:07:89:80:F3:13:CB:D4:AA:29:0B:50:9E:F1:D9:CB
X509v3 Authority Key Identifier:
keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:99:0d:31:34:9f:07:ec:5f:3c:cc:b8:fc:68:69:01:ff:1b:
f9:3b:04:da:b9:71:f1:5e:f6:a7:3f:a8:0a:bc:f4:a5:a7:e7:
7a:5e:2a:14:2c:69:bc:32:99:83:99:ee:3b:ce:c6:3b:49:8d:
d7:b7:e1:e9:d5:b1:be:d8:4e:59:29:ae:6a:65:9a:51:e9:73:
52:00:fa:b4:ab:71:48:27:33:54:bf:80:b3:d3:bc:a8:92:48:
f5:9c:49:3d:35:07:04:3c:01:d2:94:36:ff:34:2c:b9:87:35:
4e:e9:5f:c1:7e:65:b5:0c:64:5f:db:95:a8:75:a4:49:64:81:
6a:a3:d5:95:1d:4c:23:36:8b:5c:58:d6:39:5f:65:0a:61:b3:
52:28:a0:89:3e:fc:67:a6:4c:fe:2c:dd:4b:06:f9:59:48:bc:
49:d5:d3:5e:17:0f:8c:2e:ad:0f:dd:2d:24:af:99:80:de:e0:
8a:ec:3c:93:e3:7f:5f:40:b0:de:15:4b:10:87:e9:26:3e:34:
72:4e:0f:3a:02:fa:6b:1b:14:a7:e7:c3:47:7d:1f:3e:4c:14:
a6:7f:52:66:c9:0f:aa:59:56:15:4a:f8:63:0c:dd:95:ff:e9:
2d:91:f1:c0:4b:99:98:d5:8e:ac:78:e7:da:f3:d3:97:be:92:
13:ae:7d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:38:10 2026 by rpki-client