
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json)
Hash identifier: 1KI3jOJEsU7aKrEy/oF0+FLep3BvF64+08LZlSfEaYA=
Subject key identifier: 1A:02:89:C2:7A:2A:EA:16:6B:7C:66:AE:B5:88:27:A1:4E:72:24:A4
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 031D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
Manifest number: 02F6
Signing time: Wed 23 Sep 2026 00:51:49 +0000
Manifest this update: Wed 23 Sep 2026 00:51:48 +0000
Manifest next update: Wed 30 Sep 2026 00:51:48 +0000
Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: q3FfGIUaAUiv0vynLrMngSEEPOUaCXgH5v6jEU8qanE=)
2: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: hkTmLhoHVbaMZHz6R6CzIS8rA7idBoFtN1kqeUeSHm8=)
3: 3A6D7EA697EE11F187018DAB6C11F970.roa (hash: i+2F5SE8QWLsCFLahpcFi70dethbqd7K67ZjDZ7JpYI=)
4: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: CRPg/Q2mXPBEqylj0Jz/coMyIwo1wpypsOjOwHedpMM=)
5: C1ECF984D07411F0B0B35C27C4F9AE02.roa (hash: /yZQPTsxHkvk4ctloKc7UIVchuakTDwnSbZlJ8wAP38=)
6: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 0XIzwd7D2/6iAcpSl1J963JfV4yO/w+9LYIuULpKH7s=)
7: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: ebgtTFO3AasXytfvPXSreDrm4OT7z/0UktQfKH8cIZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 797 (0x31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: Sep 23 00:51:48 2026 GMT
Not After : Sep 30 00:51:48 2026 GMT
Subject: CN=6ab322a4-3ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:05:99:ba:f7:4f:6c:43:6a:06:b8:00:03:c7:
c9:9b:aa:cd:2e:06:c1:85:7f:f5:73:f0:1a:c4:ee:
ac:a6:fd:e8:3b:1f:c1:85:1e:8e:88:31:33:fa:58:
bc:60:f1:9f:1b:02:8e:16:2a:4c:e9:ce:10:15:50:
2c:fd:3f:b2:17:22:07:fd:70:17:19:f5:ce:52:19:
f4:2c:a6:40:70:e2:21:68:a2:81:de:b7:d5:32:bd:
9a:2e:6e:6a:e8:10:2c:85:b3:a4:a6:40:e3:15:8e:
c1:15:f8:01:59:e3:38:1c:06:ff:65:3c:93:6f:b7:
ff:22:ad:32:e0:7d:5b:7e:07:ea:25:e0:14:a6:43:
8f:65:4c:ed:6e:ef:e1:b1:ff:e7:06:eb:42:4f:cb:
98:af:a7:41:06:59:8a:8e:99:8b:38:2d:49:62:9d:
00:7d:87:5d:e5:c7:79:37:d5:14:33:f7:1c:fd:cb:
2c:ec:8c:36:b6:47:17:0a:b1:10:0f:d1:d1:c6:4f:
3a:cb:d9:4c:cf:63:30:45:7f:4d:f3:5d:9e:97:4b:
d7:5a:2c:13:8c:0c:69:c3:31:dc:81:be:e5:78:84:
26:3a:9e:4d:95:8e:67:c6:38:4e:f7:b7:e7:a3:dc:
82:2d:49:2e:2c:58:57:de:2c:11:8a:a9:04:c4:67:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:02:89:C2:7A:2A:EA:16:6B:7C:66:AE:B5:88:27:A1:4E:72:24:A4
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:4b:f7:d8:e4:2b:6f:c4:90:ac:f9:93:bd:5d:46:49:76:bf:
a8:a3:80:33:42:97:0c:1a:4a:ad:7e:37:fb:f3:46:a5:a6:84:
66:87:bb:a7:2c:11:c1:b9:bb:90:8b:47:c3:5e:50:60:7a:ca:
bc:a2:51:32:ad:5a:da:cc:42:54:e0:25:64:f7:db:67:eb:6d:
d0:7a:08:b0:b5:c9:2f:03:f6:29:be:fb:75:d0:c9:83:28:0c:
b7:23:8d:5a:5c:01:b2:f2:f5:ad:cf:ba:23:48:e8:6d:d7:ea:
fe:9e:ea:dc:f4:b6:6c:dd:25:a7:88:06:5a:3a:28:eb:13:02:
b8:9c:fa:cf:0f:b4:f3:a5:85:77:f6:7d:49:64:36:42:0d:1e:
44:57:92:40:06:9e:27:3b:a2:c8:37:5c:6c:4e:c4:d2:a5:43:
3e:a0:8e:ce:e5:9f:47:fe:7c:9a:54:97:ec:d5:20:8f:34:01:
ff:4b:93:f8:c9:47:61:03:f0:3b:1c:24:c7:11:36:0f:4e:53:
fb:5b:ae:7f:96:7a:a5:68:01:64:60:1c:f5:a3:bd:76:0d:40:
c2:23:ce:c6:30:8a:8a:a4:db:6a:4c:57:40:da:99:0f:8c:a7:
76:88:3c:2e:41:9e:44:86:19:d1:b5:03:89:75:9c:0b:07:18:
0e:93:98:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:21:18 2026 by rpki-client