
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
File: SXhNVZU957jzy_LUUeMSM8xzPUE.mft (raw, json)
Hash identifier: onLiZqRiDyt6pvFAFDZrDqpL5KUZJVWCS1Cv+TWHukY=
Subject key identifier: 63:39:8E:F9:91:3F:F4:90:44:F6:73:25:D6:2A:D4:AE:A3:5F:F1:51
Authority key identifier: 49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41
Certificate issuer: /CN=A9197A55/serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
Manifest number: 61
Signing time: Thu 23 Jul 2026 10:04:02 +0000
Manifest this update: Thu 23 Jul 2026 10:04:01 +0000
Manifest next update: Thu 30 Jul 2026 10:04:01 +0000
Files and hashes: 1: SXhNVZU957jzy_LUUeMSM8xzPUE.crl (hash: 5kWCTD27nIFrcRKfOpbR5zvHitSIQ6+RdP4RoNE0K3w=)
2: 651FCE60FAAA11F098D3B5455A6F56BC.roa (hash: iAy8i/+IUXvALHt+lbXZ4grdkeaIoac6VrJzukFo08s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl
rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197A55, serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
Validity
Not Before: Jul 23 10:04:01 2026 GMT
Not After : Jul 30 10:04:01 2026 GMT
Subject: CN=6a61e711-ad01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:29:5e:68:09:ab:86:ba:bb:97:98:26:79:
03:3a:b3:5b:55:19:ad:d5:bd:7c:2c:bd:e9:68:e1:
0d:71:5e:21:7d:72:3b:35:83:84:fd:38:5f:d5:1a:
d1:78:55:5f:68:c0:3d:62:9c:83:c5:25:6f:fb:8a:
27:29:f2:9b:8b:04:02:af:f8:4b:f4:fc:9c:47:32:
b8:ab:fa:b2:1d:30:80:10:cb:d5:1b:3c:7c:e7:d9:
4f:82:e8:93:2c:88:13:3f:f0:dd:2b:9a:f8:a4:02:
9c:a7:4a:23:a8:3e:2c:26:58:8a:9e:22:d5:57:6d:
fc:6c:69:fb:16:06:e2:3f:bf:ea:2e:44:cb:57:31:
ea:dc:49:a5:98:9f:94:e1:85:71:6b:8a:50:c4:bf:
47:82:92:db:bc:14:f6:e9:06:3c:5c:20:65:2e:a2:
3b:d2:c0:b5:28:4e:37:83:e7:06:3a:e5:7e:e5:60:
51:76:29:d3:4a:79:c8:b1:80:bb:20:0e:84:0b:4f:
ef:b2:d1:df:c0:44:fa:ee:f5:8a:71:30:61:36:ec:
c8:0c:0c:51:f5:f9:aa:d4:ee:2b:fd:b1:e2:be:c8:
61:ee:7b:68:e9:62:41:12:1d:44:33:e6:18:d3:e0:
d8:35:3a:63:a8:8e:6d:a4:67:30:e5:04:11:d0:28:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:39:8E:F9:91:3F:F4:90:44:F6:73:25:D6:2A:D4:AE:A3:5F:F1:51
X509v3 Authority Key Identifier:
keyid:49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:fe:1e:96:e1:44:20:a6:1d:a8:ac:b9:a8:46:7d:24:bc:47:
dd:e7:47:90:4a:a2:90:de:37:de:b7:70:e4:96:7c:00:dc:d7:
e6:57:ac:1a:a1:af:66:53:06:ba:59:90:fc:fc:ed:f9:f0:84:
9d:63:57:11:fc:87:79:f7:31:10:94:9d:ad:09:d0:28:af:9d:
65:67:c9:0b:8f:20:d8:a4:18:fd:b6:01:c1:de:fe:d5:92:12:
85:6e:f2:c5:33:f6:2a:1f:19:74:6e:d4:3e:20:e5:be:11:6a:
08:98:16:98:36:d4:eb:f6:1a:02:a2:65:fe:c7:17:fc:16:74:
91:a8:4b:e6:ac:f9:af:a3:97:ff:e5:34:9c:20:62:25:0d:d2:
df:8f:ee:a8:ae:6e:5a:f3:fb:6b:36:14:c4:d5:b9:46:54:7e:
8d:98:73:8d:f9:6c:83:c2:37:c3:6a:3e:0a:c6:82:4f:e9:e7:
68:fa:af:fe:04:b9:2b:f9:8b:ba:8d:98:db:78:1d:25:b9:81:
08:40:54:72:ad:1e:8d:46:49:be:e1:ac:d4:cc:a6:33:cd:b0:
c3:f7:18:7b:61:55:b5:99:0c:c3:84:e8:26:f6:c5:ec:51:a9:
d6:fa:43:5c:d5:52:a1:79:f8:6b:05:29:f9:f5:bf:a8:54:57:
72:41:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:12 2026 by rpki-client