
$ rpki-client -vvf rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
File: Si40gGAMyq6JEirTWopQhmCKce0.mft (raw, json)
Hash identifier: hO4QCCIzjtPO8R7c1/cj3kJAbw5SFP0420YmL056zdg=
Subject key identifier: 15:01:62:5E:86:B6:B1:0F:2F:83:C8:FE:57:45:7F:7F:54:6E:38:76
Authority key identifier: 4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
Certificate issuer: /CN=A919603C/serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
Manifest number: 42
Signing time: Mon 11 May 2026 08:36:27 +0000
Manifest this update: Mon 11 May 2026 08:36:27 +0000
Manifest next update: Mon 18 May 2026 08:36:27 +0000
Files and hashes: 1: Si40gGAMyq6JEirTWopQhmCKce0.crl (hash: VKo/i84lKfH68kW9OgWFODFQpVymgI9FKCRB4hVD0kc=)
2: 6D31F08EED3411F08AC2355C496F56BC.roa (hash: twXZ1+cMtQnbloMYaJZUKgoR86O6NyBBWpia0F1MIzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919603C, serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Validity
Not Before: May 11 08:36:27 2026 GMT
Not After : May 18 08:36:27 2026 GMT
Subject: CN=6a01950b-c03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:6c:12:37:d4:cc:a8:db:f1:74:f9:ea:d1:
71:68:44:a2:ac:b6:62:10:cc:28:53:d8:83:51:69:
8c:37:af:6a:6e:a4:65:ae:0c:a3:8e:ea:80:78:7e:
48:e9:5b:3f:d3:5b:36:cd:ae:50:73:d0:71:81:af:
57:f0:2e:b0:6d:11:2a:bc:14:45:b8:ce:f9:f0:6e:
fe:cb:29:ee:90:2b:20:68:5a:05:5a:3f:8c:04:89:
69:da:c5:c5:f7:cc:f7:56:3e:b8:00:1a:c2:8c:60:
3e:1f:03:13:3d:66:56:73:79:a0:49:d2:63:0b:12:
5d:9b:b1:5e:6e:10:78:88:2d:ca:5d:a4:2e:cf:4f:
3a:4c:6c:25:44:ae:a7:14:70:eb:10:d4:bf:fe:45:
b3:93:cd:40:39:56:4d:0c:63:9f:cc:69:c6:e2:43:
02:42:39:33:58:e7:e6:c8:2b:7c:a8:c2:fd:ed:a6:
95:2b:4a:3d:58:6f:1f:4f:1e:23:75:f0:25:72:fb:
cc:c6:a7:b5:33:4a:21:42:b7:16:7d:c3:af:7f:3c:
d4:b9:6c:7e:1e:f6:0a:98:4f:26:03:4e:e5:fd:5e:
eb:b7:95:6b:c5:d2:89:c4:74:0e:b7:6e:5a:5c:28:
2a:5b:85:2a:56:07:7d:21:c3:d6:75:da:ef:b7:1b:
c1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:01:62:5E:86:B6:B1:0F:2F:83:C8:FE:57:45:7F:7F:54:6E:38:76
X509v3 Authority Key Identifier:
keyid:4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9c:f8:6a:26:20:e5:04:e2:92:1a:ec:ea:56:9d:e6:9d:95:
56:a4:9d:ad:33:3b:7f:6f:93:af:58:65:d6:49:cb:00:f6:3f:
8c:98:60:85:da:e6:95:f6:7b:5e:ea:aa:5e:45:29:95:10:41:
8e:84:c7:44:8e:ca:5b:25:3c:2a:4d:b6:f8:2c:3b:3d:3b:69:
4e:90:da:36:76:2f:fc:b9:37:ae:06:60:7f:cc:eb:55:0e:4d:
ab:f5:f1:bf:83:73:ff:9d:db:6a:34:3a:a5:05:1a:7b:57:48:
68:7d:43:89:8d:5b:29:7b:9f:79:c6:54:58:27:ab:b8:20:0a:
fc:66:21:e1:ab:ba:41:30:85:90:a0:fa:69:b1:db:88:69:60:
39:48:36:9a:32:b3:ae:60:46:d2:40:91:22:ea:92:ca:c0:b8:
c5:fc:70:c0:d9:ea:5e:31:2d:44:fd:26:73:b1:0c:b3:00:54:
72:58:4e:a1:8c:8f:73:36:20:3f:00:d7:d8:b8:8e:54:24:04:
9d:a1:ef:30:3e:8b:12:ec:1f:ea:e0:c1:49:33:25:21:6a:6c:
16:af:c6:b4:3c:8f:06:5a:23:91:c6:60:0f:c3:88:42:0b:7b:
4d:27:b2:fb:90:69:fd:8f:c4:14:82:fd:11:4e:84:87:23:41:
03:d6:be:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:21 2026 by rpki-client