
$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json)
Hash identifier: sth1dQiqL6dcdAalOyYI5tTpYWnc7L+gEqjUPTqGxP4=
Subject key identifier: 4A:06:79:EF:EB:CA:F4:DD:2D:1F:7B:7C:34:A5:EB:C4:06:D2:71:D1
Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF
Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
Manifest number: 0210
Signing time: Thu 23 Jul 2026 04:16:47 +0000
Manifest this update: Thu 23 Jul 2026 04:16:47 +0000
Manifest next update: Thu 30 Jul 2026 04:16:47 +0000
Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: 2qQwro22GHAiyUoHawO+v2bSke6sG55sIffStZ5Dw/E=)
2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: XpOJLqrrUhEc7ebQkkMofYS8+Tg7b9rkq4W6zmxVycM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl
rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
Validity
Not Before: Jul 23 04:16:47 2026 GMT
Not After : Jul 30 04:16:47 2026 GMT
Subject: CN=6a6195af-3546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:16:46:7a:d2:ee:a7:d6:20:35:a7:cc:74:
ea:f8:84:03:11:cb:9c:99:01:79:d3:ac:31:b5:f7:
4a:0d:e1:d9:12:45:1c:9a:05:d4:86:39:65:b7:53:
6a:56:52:df:09:a3:76:47:89:38:62:07:30:70:a2:
69:9b:ad:35:14:3d:1c:20:22:fb:36:3e:b4:d0:50:
6c:5e:71:f4:1b:76:3c:32:d8:b8:54:a6:de:6d:e4:
e0:33:a7:0f:00:43:65:29:12:a5:46:69:cc:5e:c0:
f1:6d:ad:36:ca:27:b0:42:76:a3:ea:35:27:fd:79:
bd:e0:23:38:a0:5c:2b:2c:43:4e:2a:b3:46:5b:70:
ee:72:fa:e1:62:99:b4:fb:8b:62:6a:1c:20:f1:d8:
ed:3a:88:77:97:4d:db:65:64:09:58:82:52:fe:80:
aa:b9:cc:af:ab:cb:99:8c:40:a7:0a:16:82:ef:6d:
b9:86:06:cc:ae:93:27:7f:33:68:d3:c5:79:f9:09:
fd:69:e2:f9:30:d5:cf:df:15:36:3e:af:46:94:ac:
6e:d2:bc:c1:f7:42:ff:d6:0d:95:36:67:d1:d5:b9:
c7:5e:4f:c8:3a:0f:24:d4:be:f6:d0:fd:c5:7f:43:
a5:1d:f8:e5:0c:70:d9:12:5e:52:f6:2d:68:72:7b:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:06:79:EF:EB:CA:F4:DD:2D:1F:7B:7C:34:A5:EB:C4:06:D2:71:D1
X509v3 Authority Key Identifier:
keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:8d:33:89:b6:ba:76:c0:ba:b8:ea:00:bd:fb:1e:0a:2c:dc:
b4:2b:cb:bf:ee:e3:01:00:e5:28:b8:1c:af:ba:b1:74:00:8c:
51:83:77:db:49:48:ae:63:ad:9c:f2:b4:d5:94:fa:09:a8:0d:
a7:43:33:a7:2d:69:d9:61:f2:a8:72:59:52:8e:ca:43:6f:9e:
cb:2f:8f:1d:3a:d6:e1:a4:bd:b0:45:db:91:75:3e:c9:37:b6:
22:fe:2e:c2:79:4b:61:61:d3:42:c6:fd:03:41:f1:3d:6f:f5:
2a:15:a8:11:44:b2:7a:a0:92:2e:18:5b:c0:31:22:c0:e6:43:
84:b7:5f:cb:47:c9:27:4a:38:eb:9a:30:41:c5:ba:57:85:ec:
42:5a:bc:10:d4:f3:48:65:2a:32:97:28:67:2d:33:8d:9c:4f:
c0:2e:fa:c6:85:86:10:40:47:1d:45:6f:8e:66:fb:e6:bb:34:
2b:16:9f:43:86:ef:a9:b4:b1:ed:da:50:de:3a:77:03:f3:77:
97:1d:eb:77:a6:8e:b0:cd:5f:79:1c:42:6c:32:a7:fd:60:2d:
c9:3b:c4:3e:15:b5:a4:e4:1a:8d:5a:dc:f5:d1:5a:a9:f5:dd:
5d:fa:6e:68:84:f9:8d:e1:0c:28:35:96:33:bc:8e:e1:a1:65:
df:c8:84:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:33 2026 by rpki-client