
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json)
Hash identifier: LwvvhdD+WKoqZFBTFWBHfbH2x1ySGNo5icS6y9BGJjQ=
Subject key identifier: 99:14:72:9F:96:B4:E9:C2:42:75:B5:A9:F9:34:18:7A:DE:EC:81:95
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 02FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
Manifest number: 02D5
Signing time: Thu 23 Jul 2026 02:21:41 +0000
Manifest this update: Thu 23 Jul 2026 02:21:41 +0000
Manifest next update: Thu 30 Jul 2026 02:21:41 +0000
Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: dmXZjTWRrvhmV3MHZMPUjG5UdZeMaEzzNeE6cgnQAdA=)
2: C1ECF984D07411F0B0B35C27C4F9AE02.roa (hash: /yZQPTsxHkvk4ctloKc7UIVchuakTDwnSbZlJ8wAP38=)
3: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: ebgtTFO3AasXytfvPXSreDrm4OT7z/0UktQfKH8cIZU=)
4: C163E3D6170C11F1997E579B043D8C67.roa (hash: wJJu7Gkn5klz+WG+WYyewpK4AQELyjDQvQ1Qur8VYvc=)
5: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: hkTmLhoHVbaMZHz6R6CzIS8rA7idBoFtN1kqeUeSHm8=)
6: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 0XIzwd7D2/6iAcpSl1J963JfV4yO/w+9LYIuULpKH7s=)
7: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: CRPg/Q2mXPBEqylj0Jz/coMyIwo1wpypsOjOwHedpMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: Jul 23 02:21:41 2026 GMT
Not After : Jul 30 02:21:41 2026 GMT
Subject: CN=6a617ab5-adb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:9a:87:c5:43:fa:e5:6d:5f:67:1c:a1:8e:
48:d4:a6:7c:20:4c:4f:41:bf:84:35:50:9f:df:6f:
1a:0d:45:b2:a9:43:98:37:8c:7a:a3:61:03:b2:ae:
55:b2:2e:fc:c0:66:08:08:be:45:c8:de:ba:cf:51:
5c:69:b6:68:f3:fb:a8:45:b1:b6:fe:3c:7b:f7:26:
93:4e:5e:f8:b7:d8:f8:a8:45:5e:b9:cf:90:70:12:
88:e2:f5:7f:b0:16:fc:d3:ce:35:b7:30:cb:a2:cf:
e0:15:18:8e:c0:b0:fa:6a:9e:ca:6e:71:ad:9b:9d:
54:da:b7:8e:09:cb:8a:0c:f3:b4:b3:ae:ce:bd:c9:
a0:c6:42:bd:0a:cd:2d:5d:48:f8:a5:35:04:81:91:
ba:fd:ee:10:00:29:c3:95:9a:5b:81:cd:eb:e9:6d:
7b:19:8c:f7:a2:83:27:5f:69:1a:46:a8:b9:85:45:
80:11:26:cf:a9:c3:10:39:88:b3:4d:b0:be:d1:d4:
77:e3:ab:82:c4:48:26:ae:8c:ba:73:76:b6:9b:c9:
62:a8:2f:df:56:1a:9e:74:11:0e:ae:8e:11:32:ef:
78:bf:99:29:f5:45:3c:51:43:c9:84:b6:6b:15:7c:
5c:92:bf:ee:02:27:35:0e:1c:23:0a:e7:54:fe:4b:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:14:72:9F:96:B4:E9:C2:42:75:B5:A9:F9:34:18:7A:DE:EC:81:95
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:5c:8b:25:2b:27:98:c3:9b:08:9a:10:d6:13:7b:e4:9a:a7:
50:9d:47:2c:99:ce:e0:cf:45:d1:21:a7:ca:bd:00:99:a3:0e:
97:4d:7c:c0:57:3b:33:c4:78:a7:fe:0a:12:91:b8:17:a7:b3:
75:89:b7:d7:13:38:76:0e:05:11:bb:b5:a9:68:8d:c9:7f:94:
e6:66:6d:6c:38:3d:fe:4d:fa:16:8e:8a:1a:aa:5f:7b:15:b7:
f6:9b:d3:1e:b6:25:68:82:1c:3e:39:06:19:f7:ae:6d:55:3f:
e6:df:ba:fe:0d:02:01:a4:5a:f8:76:6a:08:56:a3:47:55:07:
36:9d:63:49:02:53:bc:59:26:a8:3a:84:21:01:cc:6b:46:c4:
3b:42:a6:fe:6b:26:07:79:63:d1:84:6a:0f:d3:e4:09:9f:3e:
7d:89:f3:35:cf:f1:72:27:2c:3b:cf:c8:3b:9b:de:4f:15:e6:
52:99:2a:a6:66:79:f7:a8:f2:94:21:93:2f:df:cc:3d:8b:6e:
3c:8f:2f:57:9e:f0:07:d7:1c:3c:b2:08:23:3f:76:f0:5b:8e:
42:52:f6:54:3b:20:58:26:41:cf:dc:07:ad:ad:33:26:99:91:
c3:e8:03:15:ea:7a:c7:b3:35:b5:94:b5:8e:e5:52:43:0a:07:
13:7d:d0:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB
RTdEQ0M3NjEwHhcNMjYwNzIzMDIyMTQxWhcNMjYwNzMwMDIyMTQxWjAYMRYwFAYD
VQQDEw02YTYxN2FiNS1hZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlA6ah8VD+uVtX2ccoY5I1KZ8IExPQb+ENVCf328aDUWyqUOYN4x6o2EDsq5V
si78wGYICL5FyN66z1FcabZo8/uoRbG2/jx79yaTTl74t9j4qEVeuc+QcBKI4vV/
sBb80841tzDLos/gFRiOwLD6ap7KbnGtm51U2reOCcuKDPO0s67OvcmgxkK9Cs0t
XUj4pTUEgZG6/e4QACnDlZpbgc3r6W17GYz3ooMnX2kaRqi5hUWAESbPqcMQOYiz
TbC+0dR346uCxEgmroy6c3a2m8liqC/fVhqedBEOro4RMu94v5kp9UU8UUPJhLZr
FXxckr/uAic1DhwjCudU/ktynQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkUcp+W
tOnCQnW1qfk0GHre7IGVMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG
QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzQ4RS80RDc4OTI2QTRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3
VmtMU1NFdF9BZ1d1ZmN4MkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcFyLJSsnmMObCJoQ1hN75JqnUJ1HLJnO4M9F0SGnyr0AmaMOl018wFc7M8R4
p/4KEpG4F6ezdYm31xM4dg4FEbu1qWiNyX+U5mZtbDg9/k36Fo6KGqpfexW39pvT
HrYlaIIcPjkGGfeubVU/5t+6/g0CAaRa+HZqCFajR1UHNp1jSQJTvFkmqDqEIQHM
a0bEO0Km/msmB3lj0YRqD9PkCZ8+fYnzNc/xcicsO8/IO5veTxXmUpkqpmZ596jy
lCGTL9/MPYtuPI8vV57wB9ccPLIIIz928FuOQlL2VDsgWCZBz9wHra0zJpmRw+gD
Fep6x7M1tZS1juVSQwoHE33QGg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:54 2026 by rpki-client