
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
File: sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft (raw, json)
Hash identifier: hRP8HFMqezFMLlPpx1x+rwSfzKCqKbyUqWtN0PEq2tM=
Subject key identifier: 85:4F:3C:CC:FE:D5:E2:A2:C1:FF:2B:B2:69:B5:A5:F1:2D:EA:26:B8
Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
Certificate issuer: /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Certificate serial: 1054
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
Manifest number: 1036
Signing time: Wed 22 Jul 2026 17:35:35 +0000
Manifest this update: Wed 22 Jul 2026 17:35:35 +0000
Manifest next update: Wed 29 Jul 2026 17:35:35 +0000
Files and hashes: 1: sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl (hash: 1yZ2HBUPeF+C86K7vkPmM275jkhaAXZBYqJIABd0cS4=)
2: 8EF29168D1ED11F08D3A6B3CC4F9AE02.roa (hash: 4Xje0XiJFLxR2quCCNpe0kCvsRqAV/JFhxiHtPkeXUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4180 (0x1054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BF1E, serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Validity
Not Before: Jul 22 17:35:35 2026 GMT
Not After : Jul 29 17:35:35 2026 GMT
Subject: CN=6a60ff67-a4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:e2:e8:1b:83:fe:97:a6:ca:bc:87:5b:23:
e8:03:54:e3:e3:7e:e6:67:e1:86:b2:2b:79:ca:63:
81:f2:cb:22:b8:36:38:1a:cb:27:5e:5b:3a:47:3c:
a5:5c:c2:b3:f3:59:ce:f7:e8:ff:f9:e4:49:1c:75:
73:8c:9f:ce:ad:1d:92:48:ee:bc:13:c0:97:4c:20:
76:eb:e2:8e:9d:68:bc:c3:68:16:d7:7b:17:cb:1e:
57:e9:a7:05:ba:a1:63:87:77:3c:29:88:fc:3c:aa:
92:54:21:ee:fa:03:b1:80:aa:de:7e:a4:99:6e:51:
15:9f:05:56:a7:14:86:82:c0:fa:d8:2a:03:d6:1c:
3b:38:d2:99:89:b0:21:14:95:81:09:86:db:1d:a0:
6b:cd:76:85:fa:fd:af:2a:b5:03:cf:8d:69:41:b4:
5f:58:eb:94:9f:a1:7f:61:07:63:15:cd:5c:cc:a5:
f4:eb:7e:92:d4:7f:c6:d1:e3:f8:2d:58:c7:a7:69:
57:e8:56:b8:91:e4:c6:d4:cb:5e:44:86:49:36:42:
c7:b9:1b:5f:a8:1d:e8:63:9b:cc:d6:64:d7:06:83:
6b:02:47:d1:d6:37:b5:48:cd:76:c5:7e:d9:ec:f5:
bb:df:a1:85:f5:01:96:51:ec:a2:1b:9b:d7:25:c4:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4F:3C:CC:FE:D5:E2:A2:C1:FF:2B:B2:69:B5:A5:F1:2D:EA:26:B8
X509v3 Authority Key Identifier:
keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:33:77:75:d2:77:e5:85:ad:8d:11:05:65:4b:0e:0f:4b:01:
4b:be:d2:4a:42:2d:80:b3:6f:2f:19:d3:ca:3f:81:c7:37:4b:
78:d2:e3:78:64:2f:8e:ca:fc:14:e0:d2:7b:ee:44:d6:03:d6:
fd:c8:61:7b:7c:16:b2:bd:20:04:02:ef:f7:b9:cb:7a:73:70:
f0:6d:e3:d6:80:37:13:55:84:82:7d:f7:37:72:9d:da:eb:a9:
43:18:81:ec:78:e7:00:54:84:a1:84:ef:22:b6:ea:d2:24:0a:
c0:74:ec:f5:f4:10:ef:55:e3:07:56:2f:a7:c4:c0:ab:59:f1:
7b:f7:03:35:49:b4:a4:26:7f:29:df:12:82:fd:6c:23:95:eb:
22:3c:b4:6e:ab:97:ca:fa:58:a9:2d:b6:7b:00:9d:76:44:ed:
bd:58:1e:37:f7:ed:3a:d0:9f:5a:fb:9f:db:87:af:1e:1a:88:
95:c9:68:11:53:49:44:6b:46:f1:05:9b:81:d0:6c:0e:0b:73:
af:73:ab:ba:8a:8b:69:e3:0c:c5:84:18:7a:00:31:15:91:28:
95:7f:3d:07:21:98:de:9d:98:e9:30:a0:4c:71:b7:65:53:03:
36:37:fe:bd:3a:9e:eb:7b:8a:d2:92:ed:b2:51:f6:b4:a4:b4:
bc:7f:6f:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JGMUUxMTAvBgNVBAUTKEIxNEIyRUU1QzVFRDczNkFCNzM2QjI1NTM1ODY3NTlB
RkNERUMzRTIwHhcNMjYwNzIyMTczNTM1WhcNMjYwNzI5MTczNTM1WjAYMRYwFAYD
VQQDEw02YTYwZmY2Ny1hNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjri6BuD/pemyryHWyPoA1Tj437mZ+GGsit5ymOB8ssiuDY4GssnXls6Rzyl
XMKz81nO9+j/+eRJHHVzjJ/OrR2SSO68E8CXTCB26+KOnWi8w2gW13sXyx5X6acF
uqFjh3c8KYj8PKqSVCHu+gOxgKrefqSZblEVnwVWpxSGgsD62CoD1hw7ONKZibAh
FJWBCYbbHaBrzXaF+v2vKrUDz41pQbRfWOuUn6F/YQdjFc1czKX0636S1H/G0eP4
LVjHp2lX6Fa4keTG1MteRIZJNkLHuRtfqB3oY5vM1mTXBoNrAkfR1je1SM12xX7Z
7PW736GF9QGWUeyiG5vXJcSiEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVPPMz+
1eKiwf8rsmm1pfEt6ia4MB8GA1UdIwQYMBaAFLFLLuXF7XNqtzayVTWGdZr83sPi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkYxRS9EQkIyQkY2NjZF
NkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMycTNOckpWTllaMW12emV3
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NVc3U1Y1h0YzJxM05ySlZOWVoxbXZ6ZXctSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkYxRS9EQkIyQkY2NjZFNkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMy
cTNOckpWTllaMW12emV3LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQTN3ddJ35YWtjREFZUsOD0sBS77SSkItgLNvLxnTyj+BxzdLeNLjeGQvjsr8
FODSe+5E1gPW/chhe3wWsr0gBALv97nLenNw8G3j1oA3E1WEgn33N3Kd2uupQxiB
7HjnAFSEoYTvIrbq0iQKwHTs9fQQ71XjB1Yvp8TAq1nxe/cDNUm0pCZ/Kd8Sgv1s
I5XrIjy0bquXyvpYqS22ewCddkTtvVgeN/ftOtCfWvuf24evHhqIlcloEVNJRGtG
8QWbgdBsDgtzr3OruoqLaeMMxYQYegAxFZEolX89ByGY3p2Y6TCgTHG3ZVMDNjf+
vTqe63uK0pLtslH2tKS0vH9v9Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:21 2026 by rpki-client