
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
File: sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft (raw, json)
Hash identifier: Voxgpew1tMZEQmGdVFhpkgyi5Nu6uZ367AhE45F0Ht4=
Subject key identifier: C9:53:C0:A2:B6:E5:F1:B1:5B:8E:DB:F3:6D:13:A0:D3:34:47:96:5C
Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
Certificate issuer: /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Certificate serial: 1078
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
Manifest number: 1059
Signing time: Thu 24 Sep 2026 17:22:42 +0000
Manifest this update: Thu 24 Sep 2026 17:22:41 +0000
Manifest next update: Thu 01 Oct 2026 17:22:41 +0000
Files and hashes: 1: sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl (hash: h+fD0FFwDmGV/3Cdjf0Wn4n6WbOEoH7gr8aGXJn5qHQ=)
2: 8EF29168D1ED11F08D3A6B3CC4F9AE02.roa (hash: bkUKZUvS9EpDP9RLJvv2KmtwT7u1XsXfDuKXS1HnRaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4216 (0x1078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BF1E, serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Validity
Not Before: Sep 24 17:22:41 2026 GMT
Not After : Oct 1 17:22:41 2026 GMT
Subject: CN=6ab55c62-c8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9d:b1:d5:14:84:62:09:d9:19:90:73:ab:69:
1f:ed:fa:21:ae:d2:9d:56:89:04:b6:1d:ef:0f:02:
9e:bf:8c:e6:89:77:d4:73:a2:f1:8e:99:67:67:bc:
de:5a:39:fc:e1:f7:3c:a7:b0:63:fa:75:b6:f8:ab:
05:19:fe:92:13:e5:f4:1a:97:14:a7:99:d7:ce:0e:
cc:f2:36:01:83:a0:a7:95:35:4e:9d:87:c1:47:ee:
25:b5:c7:1f:bd:8b:7d:92:94:2b:bf:e8:f8:4f:75:
4b:b3:c8:e1:3a:84:1c:48:cb:b7:6e:24:30:dd:85:
a9:32:14:f9:17:75:00:cf:d0:a3:89:ed:81:d1:b0:
f8:6e:af:ae:f8:00:7f:73:db:9d:07:99:db:6c:23:
91:a6:ee:0e:3d:b6:28:80:92:68:8a:4f:64:69:be:
f1:25:de:71:b9:be:1b:3c:fb:b7:5e:b4:19:85:9e:
6e:a2:5a:84:91:f5:18:1b:84:9b:ac:f4:3b:66:30:
59:b0:f6:ae:f5:29:f9:5d:7b:ba:32:b5:5a:13:be:
2c:15:ff:b6:4b:97:0c:ef:1c:d3:0a:34:0e:ae:1c:
43:3c:e1:11:07:18:66:41:70:eb:26:76:f2:44:08:
18:81:74:d4:19:55:77:0c:f9:6e:f4:3a:3b:88:2a:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:53:C0:A2:B6:E5:F1:B1:5B:8E:DB:F3:6D:13:A0:D3:34:47:96:5C
X509v3 Authority Key Identifier:
keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:07:33:b1:22:bb:f8:f3:5d:e7:81:db:7c:c5:c4:d0:fa:dc:
f6:f9:62:41:a1:03:c7:09:19:a5:a7:66:2e:af:5a:ed:60:81:
69:60:84:58:bb:a6:32:f8:7f:8f:ab:19:ed:50:da:71:79:f1:
69:37:46:4c:b1:17:ef:a0:e2:7c:4e:f6:58:81:e9:af:c2:cb:
d4:c8:18:47:4c:60:b3:e1:8d:42:27:8a:4d:5c:f2:54:89:e4:
ba:64:03:99:5d:19:78:45:2a:d9:4a:50:68:1e:bd:f1:d8:e4:
40:9d:c8:e8:16:aa:e7:69:95:1f:ae:82:d3:38:65:85:34:60:
b5:19:b0:57:61:08:d0:65:67:19:be:c2:a4:c0:be:a5:c9:e4:
99:64:c6:56:fc:a3:7e:32:8a:32:1b:ed:3f:0f:96:31:2a:f6:
bd:57:c6:dc:08:39:00:ed:ce:8f:f1:2d:df:3c:e2:93:e3:3f:
93:0b:9b:59:ae:1c:13:c1:41:c6:39:d3:53:f9:d3:a7:31:44:
5e:f1:a7:b8:58:82:21:33:92:ca:3e:e7:5d:55:67:bd:5b:7a:
40:17:1e:16:44:47:53:f6:68:f6:28:a8:d9:7e:84:bd:d2:ae:
d4:d0:6b:c1:c0:93:55:c5:fd:b5:91:5f:8d:8a:d3:11:d6:db:
cf:9e:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:53:52 2026 by rpki-client