
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json)
Hash identifier: tf5nDybMiRO0kxPTmyT9zFHLhnzVGmb100PTt8qNCrU=
Subject key identifier: C9:A8:63:B7:35:95:B1:D9:9B:B0:53:4C:54:05:26:D3:11:16:13:15
Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Certificate serial: 1403
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
Manifest number: 13F6
Signing time: Wed 22 Jul 2026 17:02:06 +0000
Manifest this update: Wed 22 Jul 2026 17:02:05 +0000
Manifest next update: Wed 29 Jul 2026 17:02:05 +0000
Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: n0Zq8hZYvgT6vrBBASk7lCAYct8vbArp2T5nwUr9UMw=)
2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: DL6GA/K6cpxzI2cqMbQjFszw1dEV15dZjZ9FhFB5IeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5123 (0x1403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Validity
Not Before: Jul 22 17:02:05 2026 GMT
Not After : Jul 29 17:02:05 2026 GMT
Subject: CN=6a60f78e-4539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:85:f4:ad:03:a6:56:9c:63:99:55:f9:f5:
57:20:d6:21:33:3a:4a:92:39:57:de:38:97:36:16:
2d:79:47:26:09:0d:d1:f6:23:96:b2:7f:4f:8e:11:
ae:ba:0f:e2:94:a8:08:f2:bd:4f:ed:bb:94:6f:8e:
5d:aa:85:d2:06:7b:ab:9e:5e:97:f3:07:b1:3e:8b:
88:60:2f:13:e0:4d:25:21:f7:2a:e6:10:30:0b:cb:
64:c7:ef:8f:35:f2:f0:12:d5:85:88:1a:c7:db:f0:
06:df:c4:29:7f:51:ac:5f:2e:5e:63:e5:b6:b1:d7:
e9:52:c2:06:4d:3c:3e:bc:d9:41:a3:b5:1b:2f:73:
84:46:c9:1b:49:91:ec:3d:ca:89:b3:6b:62:22:61:
d9:f0:15:03:92:0b:29:e8:ee:2e:c2:b7:10:83:76:
ae:19:f3:2e:65:ce:a5:c1:f5:69:4f:c2:ab:42:09:
43:2f:56:fd:dc:7a:e3:52:da:48:8c:c4:e8:46:bf:
fe:10:1e:e5:9f:0f:92:a1:6c:48:7b:97:15:76:fc:
50:46:35:b0:9c:da:88:36:d8:55:d2:70:a0:f7:02:
7b:91:c1:af:99:e0:94:38:0f:98:0d:52:b5:98:0c:
05:b2:41:d8:6c:2a:2e:e5:28:2f:93:cf:cd:24:86:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A8:63:B7:35:95:B1:D9:9B:B0:53:4C:54:05:26:D3:11:16:13:15
X509v3 Authority Key Identifier:
keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:a0:d8:8a:22:ee:33:2b:bb:d8:99:7e:d8:ef:58:49:14:9a:
1e:22:b4:79:cc:ca:4a:8d:20:4a:55:5b:e2:c9:fc:61:9b:ac:
be:f3:74:6c:a0:c0:e2:16:a3:0e:35:a1:5d:ac:65:48:ca:33:
95:5e:b6:95:4b:81:fb:92:09:f5:ab:b0:d9:d2:3a:c6:96:0e:
c8:12:a7:60:39:44:3e:60:90:ad:f5:8d:6d:3e:18:be:da:08:
41:7c:0a:53:95:f3:63:7e:16:95:75:af:09:e6:2c:69:8a:c9:
b6:4a:ce:c7:36:8d:66:5e:7f:77:1c:fb:9d:38:1a:8b:15:b1:
de:77:b7:2d:db:1c:50:99:82:c2:68:03:0c:3b:9b:f6:14:83:
de:69:d2:3a:10:91:c2:f5:f7:62:7a:c6:65:21:4a:b8:3a:fe:
4e:7f:06:bf:c1:08:13:bc:7f:d2:f7:28:3c:d9:72:1d:67:dc:
e3:7d:8b:a2:89:9e:4a:a7:f4:15:16:6f:8b:e5:88:31:a9:67:
57:58:85:0a:d6:97:f4:a3:3a:fb:b7:86:23:d3:f9:fa:d5:ee:
bd:9d:c3:e4:9e:f5:2d:51:8d:6e:65:a8:ad:d9:16:76:ce:1f:
df:3f:13:f8:43:34:9e:67:e0:fd:0c:47:6c:b6:86:55:e5:dd:
15:ed:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:24 2026 by rpki-client