
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json)
Hash identifier: xN6WNKf1gRLIx9l6DLf/vl0m8wNmO60L0AIZQRyjMRQ=
Subject key identifier: 7E:EA:56:2C:FA:5F:0D:23:31:2F:D6:91:6D:11:3F:84:2B:D8:EE:30
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 02D0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
Manifest number: 02AF
Signing time: Mon 11 May 2026 01:37:52 +0000
Manifest this update: Mon 11 May 2026 01:37:52 +0000
Manifest next update: Mon 18 May 2026 01:37:52 +0000
Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: phmTPIqBT3LkX9lgMNIL8sy5L59I9A6/sI21RZGiTp4=)
2: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: G3atXAKqq6oFKBpr32HyeNbKvnZw8JFgcP/o+eZXrQQ=)
3: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: 2dB8losCkzflgKLeyufFpykKeZbPyeG/91dZ2ar3/fk=)
4: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: WbC9Zi3FkuUimM2LDo18sEOCgwjkb/IqEbL/LDR9mkg=)
5: C163E3D6170C11F1997E579B043D8C67.roa (hash: +bMsiCqkQRPGuAsovwzV+Jwx1b0r6sOT2iZqA0KUI2o=)
6: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 0XIzwd7D2/6iAcpSl1J963JfV4yO/w+9LYIuULpKH7s=)
7: C1ECF984D07411F0B0B35C27C4F9AE02.roa (hash: 4b1qRgjlNRcZ+iubckIse8edU98Q81NltkHwnBtFg58=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: May 11 01:37:52 2026 GMT
Not After : May 18 01:37:52 2026 GMT
Subject: CN=6a0132f0-3ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:c5:31:a5:40:06:99:9a:0a:87:ad:4a:79:
4a:3c:a2:fc:02:bf:ea:79:42:5c:ea:f2:f0:d1:7b:
13:b4:5e:97:b5:65:c7:e3:dc:3e:49:ec:69:1f:d7:
85:f7:74:09:74:55:d2:15:f1:9d:ae:dd:6e:ec:c9:
62:ed:09:b3:b6:d0:e0:aa:78:1b:4f:3c:ba:5f:f8:
ae:cf:d7:e3:9c:54:05:87:7f:ed:93:0b:a1:f0:76:
8f:3e:0d:23:80:78:75:bf:17:d0:b5:8e:a3:a3:56:
c2:6c:d4:6d:63:ea:9b:09:df:a6:71:c4:e5:d7:91:
ca:c7:0c:da:a8:bf:59:03:55:e5:17:ba:a9:03:cc:
ce:d4:f7:0f:e6:86:c6:a8:ae:b6:c9:79:7b:55:33:
42:28:b6:5f:1a:cf:c8:19:ad:c6:81:19:cd:00:4e:
f0:23:c0:4b:3b:b1:45:9b:c2:ff:03:4b:5c:f6:1b:
8d:e4:15:36:81:fa:0c:07:d0:5e:88:c3:e9:01:7a:
06:29:56:c7:c2:1e:b2:a8:64:31:dc:71:3c:67:d1:
7e:f3:35:db:b4:7a:ac:36:4e:ee:c0:b9:b4:d9:ec:
7a:87:1b:64:f4:4a:6c:6e:c4:2e:95:f1:a3:0c:3e:
9b:5f:00:5a:4f:53:31:b5:58:d3:fc:73:72:9f:20:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EA:56:2C:FA:5F:0D:23:31:2F:D6:91:6D:11:3F:84:2B:D8:EE:30
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:66:7b:8b:35:bd:a3:b4:23:c1:b4:13:1e:ad:d4:cf:22:bb:
b4:f8:95:94:89:82:6b:3e:27:e3:02:3f:46:d5:52:6c:a9:47:
0b:b3:5e:28:48:76:30:d8:db:99:70:17:74:d9:4a:45:2e:fd:
a1:54:a9:19:08:af:bc:c6:93:54:5a:c3:12:45:f1:3c:0a:f1:
d2:e2:78:35:43:43:d5:81:dd:18:31:78:39:3d:76:5a:ed:d7:
66:1e:ef:b1:9b:c4:17:a3:71:fd:ae:86:ed:cb:49:81:fb:b2:
7f:2f:e3:28:f8:72:27:08:d0:21:0f:8a:29:00:21:c1:00:0f:
db:92:cc:2f:24:18:2c:e9:e2:ce:51:d5:cd:ea:28:23:6e:a2:
76:57:da:cf:fe:fd:1e:10:6b:f7:25:b2:ee:9d:b2:9c:d9:9d:
55:62:b3:ce:4f:d5:3c:5b:98:cb:23:9c:4b:43:b7:9a:4d:d9:
07:44:7d:a4:db:84:b8:65:dc:fd:60:f2:e1:fa:66:5c:d5:93:
f2:39:61:9c:13:a0:ae:27:6a:15:2f:78:46:e0:09:ba:e8:ea:
ca:bf:a6:4a:9c:4e:59:cb:fa:28:fb:7f:fe:9f:35:bc:2f:b5:
7b:c4:a6:f1:df:34:5c:df:d8:0f:19:96:69:5f:60:ca:e1:52:
34:f8:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:57 2026 by rpki-client