
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json)
Hash identifier: FgMYoUu3eyZoFlOwhs8uCpQPH92jfBFZZTVF2YJJrYw=
Subject key identifier: 07:65:43:98:09:6A:11:E3:0A:A8:07:15:24:37:0B:14:62:82:93:73
Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
Manifest number: 011A
Signing time: Tue 29 Sep 2026 06:26:08 +0000
Manifest this update: Tue 29 Sep 2026 06:26:07 +0000
Manifest next update: Tue 06 Oct 2026 06:26:07 +0000
Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: kthul+8wMgAotkjqbxGS8SZT1zwIifFESAwS5utAHsE=)
2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: WQx0gB4vaejrR/+XkuLctOwdLPN5sGooZHjE/arViIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 06:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Validity
Not Before: Sep 29 06:26:07 2026 GMT
Not After : Oct 6 06:26:07 2026 GMT
Subject: CN=6abb5a00-fb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:4e:31:03:0b:9d:2e:55:ee:50:2f:ea:e3:
66:ca:b8:9d:de:0b:85:64:4c:32:cb:00:fd:11:36:
4d:db:e7:9d:2b:24:59:9a:66:84:4a:20:c4:8f:f2:
bf:ce:74:ca:ab:09:b2:60:e7:c3:78:e2:7e:07:33:
6e:73:66:08:00:cf:7c:0b:a7:34:f7:ac:d4:3e:48:
f3:66:1a:ef:3c:74:73:98:26:e7:54:19:be:49:16:
74:28:eb:52:40:0f:d4:ec:0e:37:79:b9:ff:8e:b5:
79:8e:ee:14:73:5f:79:5a:07:f0:31:90:f1:1b:d8:
ba:49:45:c9:aa:f3:29:3f:d5:a0:07:bf:50:c3:2a:
0f:91:8a:92:fd:53:fa:70:ae:32:ef:c2:d0:74:90:
ae:65:b0:32:aa:65:b9:bd:f2:96:53:59:ed:3a:86:
43:2a:d3:e7:a1:ec:ba:c8:8a:23:36:a6:e6:b7:b5:
cd:d8:3a:5d:01:49:17:d8:bb:37:8c:20:44:ef:c4:
90:02:05:49:61:d7:d4:a4:12:86:20:21:49:7b:9e:
f8:8a:14:f5:a4:c5:ad:ab:74:bd:b6:1d:7b:21:4f:
07:f3:4f:eb:fb:06:08:b8:6d:fe:4c:cd:1a:c6:33:
46:66:12:11:1d:18:dc:6a:13:d7:f7:6c:d1:54:2b:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:43:98:09:6A:11:E3:0A:A8:07:15:24:37:0B:14:62:82:93:73
X509v3 Authority Key Identifier:
keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:e8:b4:6e:9c:43:31:3a:fc:e2:a8:30:73:8f:f0:16:2f:5b:
71:62:26:71:fd:80:ad:8f:79:4e:85:89:22:14:c3:cf:74:3d:
3d:95:8d:58:76:00:65:f6:6b:5d:95:14:53:ab:03:19:68:a9:
ac:38:dc:a0:05:87:d1:b8:91:cf:03:4a:86:b1:8a:ba:cc:0c:
66:43:4e:59:7d:16:c5:90:24:39:fb:44:a5:70:63:5e:b1:ac:
d7:90:3f:38:5a:30:58:d8:2d:ba:f7:db:dd:63:91:f5:70:ea:
13:d3:38:0e:ed:20:72:f6:d1:1f:4c:13:aa:57:67:25:57:a0:
71:65:08:93:89:ec:3d:0c:28:34:cf:9c:7f:80:de:e0:d2:95:
f0:1e:ea:6d:94:b9:f6:2d:a6:b6:5e:9e:e3:48:ce:da:c7:70:
a8:03:0f:fd:8a:59:6c:19:a0:00:bd:cb:b2:b7:38:2f:66:4a:
ac:b9:15:6d:0f:44:d8:48:67:02:0f:e1:f5:15:5e:fa:0c:c2:
e8:c2:83:3f:54:84:00:b7:ae:79:bb:1c:b9:be:5c:66:6b:e4:
eb:9e:92:12:5d:b7:5f:f1:a4:84:63:a5:b4:18:fb:a9:a8:d4:
a6:31:2c:b4:cd:8f:0a:aa:50:a6:fc:b9:6c:27:0f:27:52:6f:
5c:8d:a0:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQxMEUxMTAvBgNVBAUTKDQ4OUE2RkNFRDdEQzYzQjdBQjM2NjZFMzVCRDUwOUQ5
RUExNTc1RTAwHhcNMjYwOTI5MDYyNjA3WhcNMjYxMDA2MDYyNjA3WjAYMRYwFAYD
VQQDEw02YWJiNWEwMC1mYjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv05OMQMLnS5V7lAv6uNmyrid3guFZEwyywD9ETZN2+edKyRZmmaESiDEj/K/
znTKqwmyYOfDeOJ+BzNuc2YIAM98C6c096zUPkjzZhrvPHRzmCbnVBm+SRZ0KOtS
QA/U7A43ebn/jrV5ju4Uc195WgfwMZDxG9i6SUXJqvMpP9WgB79QwyoPkYqS/VP6
cK4y78LQdJCuZbAyqmW5vfKWU1ntOoZDKtPnoey6yIojNqbmt7XN2DpdAUkX2Ls3
jCBE78SQAgVJYdfUpBKGICFJe574ihT1pMWtq3S9th17IU8H80/r+wYIuG3+TM0a
xjNGZhIRHRjcahPX92zRVCs15QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdlQ5gJ
ahHjCqgHFSQ3CxRigpNzMB8GA1UdIwQYMBaAFEiab87X3GO3qzZm41vVCdnqFXXg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDEwRS8yRjAzMjk4QTEw
ODYxMUYwOEFFQTQ4MENDNEY5QUUwMi9TSnB2enRmY1k3ZXJObWJqVzlVSjJlb1Zk
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NKcHZ6dGZjWTdlck5tYmpXOVVKMmVvVmRlQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDEwRS8yRjAzMjk4QTEwODYxMUYwOEFFQTQ4MENDNEY5QUUwMi9TSnB2enRmY1k3
ZXJObWJqVzlVSjJlb1ZkZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVei0bpxDMTr84qgwc4/wFi9bcWImcf2ArY95ToWJIhTDz3Q9PZWNWHYAZfZr
XZUUU6sDGWiprDjcoAWH0biRzwNKhrGKuswMZkNOWX0WxZAkOftEpXBjXrGs15A/
OFowWNgtuvfb3WOR9XDqE9M4Du0gcvbRH0wTqldnJVegcWUIk4nsPQwoNM+cf4De
4NKV8B7qbZS59i2mtl6e40jO2sdwqAMP/YpZbBmgAL3Lsrc4L2ZKrLkVbQ9E2Ehn
Ag/h9RVe+gzC6MKDP1SEALeuebscub5cZmvk656SEl23X/GkhGOltBj7qajUpjEs
tM2PCqpQpvy5bCcPJ1JvXI2gGA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 10:59:08 2026 by rpki-client