
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json)
Hash identifier: PNcYIIoU3u8XlaojDiIiMsSsEka/WsGKiRbnagncegA=
Subject key identifier: 0B:C6:80:E5:0B:A0:3A:00:D9:E4:CE:CF:17:C0:EB:77:81:93:71:E4
Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
Manifest number: 0132
Signing time: Thu 23 Jul 2026 07:19:42 +0000
Manifest this update: Thu 23 Jul 2026 07:19:42 +0000
Manifest next update: Thu 30 Jul 2026 07:19:42 +0000
Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: HHEuuHswQvzjg8odgx/954ZGurDDMiabT6qbf28DDrQ=)
2: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: AIZFydURKw6XqDJmBOYWV09bdGH4Y4iDWEmfI3xyTSM=)
3: CCD3E270633311F1B8FA0C5C8D47A888.roa (hash: WNyFu7dMv+Z7bLOkmH8GMK0F61nUEfi8GoAz10fbi3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Validity
Not Before: Jul 23 07:19:42 2026 GMT
Not After : Jul 30 07:19:42 2026 GMT
Subject: CN=6a61c08e-b65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:7c:6c:62:68:4f:f0:7e:c1:0e:30:42:76:
4b:30:ef:39:51:73:34:fe:cf:80:66:10:0e:e4:92:
62:0b:08:8e:8f:d9:ab:62:6a:ce:66:53:d6:e9:46:
f6:00:da:74:e0:cc:c4:ec:4b:59:61:a7:76:9d:35:
85:50:f4:2e:93:9a:bd:18:ee:82:79:6f:43:cd:85:
9e:f2:53:d7:de:a0:2c:dd:0f:a2:e9:b6:e7:d6:7a:
8a:71:f2:c0:5b:2f:b5:65:19:98:1a:f9:ac:bc:45:
98:10:fc:45:40:ab:96:80:32:db:75:f7:a8:b4:68:
05:4a:6b:88:3c:70:c0:a9:d5:32:53:75:0c:08:52:
26:8e:34:04:7a:cc:72:63:7c:ce:26:06:4a:1d:18:
36:0d:56:a2:2c:8b:ea:7d:02:b5:59:06:08:1d:cf:
4b:67:f8:75:6b:51:70:12:f5:8d:67:31:23:36:54:
40:1f:3b:02:a5:3a:71:bc:c3:3e:16:f9:3e:5b:04:
0e:8e:ce:13:98:78:31:82:6f:80:6c:c0:88:96:43:
be:c4:cc:20:90:55:dd:ad:87:2c:ae:1c:02:99:7f:
43:cd:c3:b7:68:2b:bc:1a:e6:69:57:43:31:f1:28:
de:8b:62:84:3d:5d:2c:14:4c:9c:a1:0f:85:f5:a2:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C6:80:E5:0B:A0:3A:00:D9:E4:CE:CF:17:C0:EB:77:81:93:71:E4
X509v3 Authority Key Identifier:
keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:c5:4e:78:56:22:94:89:50:fb:e3:22:40:81:e5:61:c2:f4:
2f:be:d4:15:90:ef:dc:57:19:de:9a:af:aa:72:2f:76:e7:73:
a1:97:87:0a:49:d9:4a:2c:24:c4:06:7a:c9:9f:d4:bc:d5:64:
bd:73:83:53:4d:d2:00:c1:57:ea:93:55:66:32:c7:e6:8e:79:
e2:4a:b7:48:9b:0f:2a:0a:be:c8:3b:24:97:95:83:0b:f4:2f:
86:34:43:63:f0:22:be:d2:4a:88:2f:d3:ec:4c:8f:96:94:1d:
40:2b:0d:7f:40:4a:df:e6:6f:bd:d3:c3:fd:d4:b5:d9:ac:40:
0d:3a:d3:a6:bd:af:c8:f3:c1:17:aa:99:7c:b2:2f:8a:13:33:
ef:ad:25:33:6a:4b:0f:27:c9:62:41:dd:63:9e:bd:f1:d2:4e:
49:7b:78:bd:03:fe:4f:76:22:ca:af:d0:72:96:4c:33:9a:7e:
ce:af:e6:e8:8f:c7:dd:66:51:37:0d:92:2c:b1:18:e1:a2:0f:
1f:f3:ee:b0:5d:1c:99:f0:b9:2d:90:9e:f4:cf:81:5b:1e:e0:
f0:43:b5:c9:2d:1b:ae:17:b8:fd:e7:df:77:6b:b1:cb:96:6b:
50:73:45:e9:81:cc:f8:80:15:c8:f0:e1:52:cf:3a:58:63:3f:
f5:df:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:52 2026 by rpki-client