
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json)
Hash identifier: D+SJinSF8NGHsWplFjPcWYpTzppcGx3n5Mt7VhsF3fI=
Subject key identifier: C6:59:F3:34:B0:B6:C4:14:DF:3A:4D:1E:82:E3:4A:48:E7:9F:8C:39
Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
Manifest number: ED
Signing time: Thu 23 Jul 2026 08:15:15 +0000
Manifest this update: Thu 23 Jul 2026 08:15:15 +0000
Manifest next update: Thu 30 Jul 2026 08:15:15 +0000
Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: MrWSSpHq/aJVtUKvhFtdGIzo4FfUOc0vxl8SVnhwv0w=)
2: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: ZAcnv2B2glJNz/amDzlP0oQS8f8IykGzbvOZt8DAQOY=)
3: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: V0jiGWcisCYeYKJhJdPZNpTEwuLUAeBQE/p7M60AP1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Validity
Not Before: Jul 23 08:15:15 2026 GMT
Not After : Jul 30 08:15:15 2026 GMT
Subject: CN=6a61cd93-df32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:bd:ac:25:5b:35:82:20:97:ef:92:1c:cb:
46:3c:00:c8:79:3e:fc:36:3e:fa:ce:2d:25:8d:72:
84:1c:c4:f7:db:19:35:7b:1e:91:13:0c:da:9c:d3:
1e:74:b9:f3:61:df:4d:2f:17:79:db:59:a4:4b:57:
c2:47:e1:cb:87:53:3b:b7:76:fc:74:b4:7c:7e:9c:
4e:dd:0d:7c:95:70:48:69:b0:b3:e1:1b:a0:c6:7d:
b3:22:00:f1:7b:d7:ff:1a:ee:a9:39:33:4e:d8:26:
dd:b2:bb:9a:ad:6f:51:8d:36:0b:da:96:cb:7a:d1:
01:49:ae:c9:ac:40:98:43:dd:b2:31:e9:3a:20:a9:
98:4b:a3:70:71:80:18:00:4e:30:6b:8c:55:87:53:
84:34:62:ec:40:91:ce:69:05:91:39:d7:e5:18:85:
f9:a4:f8:83:bd:17:9a:37:39:f9:ea:e4:43:35:e3:
f3:1b:6f:05:3a:83:22:23:93:96:1f:35:e9:ed:3b:
69:65:c4:fb:de:6a:03:2d:cc:40:9e:de:dd:d8:62:
0e:14:ef:e3:2b:1d:4b:cb:41:37:f1:6f:0f:e1:f7:
a4:ad:a9:46:ec:2f:1f:37:7d:0c:7f:a7:f6:ed:5a:
68:8e:c0:bd:b0:4f:80:e0:2e:89:39:ea:1b:4f:d6:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:59:F3:34:B0:B6:C4:14:DF:3A:4D:1E:82:E3:4A:48:E7:9F:8C:39
X509v3 Authority Key Identifier:
keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6b:ab:b8:16:8f:99:e2:e6:6b:8c:ca:5d:87:6b:d3:ca:12:
8e:52:55:bc:5d:d5:31:fb:10:bc:c8:20:7a:4b:f1:80:9e:b8:
81:cf:94:6d:f3:a6:df:be:3c:50:81:e7:62:e4:82:85:4f:6e:
41:2e:55:94:b3:29:10:6d:d7:77:0d:af:b9:e6:37:aa:b7:d0:
9b:de:ab:43:1c:c4:80:c4:33:8e:36:02:27:c4:54:d6:0c:f7:
d9:59:d9:76:17:c1:29:57:c7:06:71:bf:d6:ab:f1:cf:3d:b9:
e1:83:78:dd:46:4c:50:87:dc:a9:f6:06:fa:61:c8:ca:a9:e6:
a8:07:a8:4a:9b:72:78:cb:9a:2e:47:bc:89:77:99:f3:99:e1:
3f:2c:21:ea:dd:6e:6a:7b:b0:df:95:3e:18:87:8f:38:f1:bb:
79:59:45:a7:ae:9f:a6:d0:1e:c5:17:01:83:f0:25:93:8b:df:
f5:e2:0d:5b:c9:4e:f7:7d:08:8d:73:27:10:26:81:e4:6f:3d:
c2:d0:f2:ed:00:d5:c1:a5:ad:f5:a6:7f:9b:a2:56:dc:f5:f6:
7f:34:b1:81:1d:81:1d:f2:b4:8e:af:3d:9e:5a:2b:46:8a:69:
20:ee:d2:e4:2b:a4:36:07:9b:56:ae:24:8a:f9:39:de:c0:ea:
2b:55:98:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:37 2026 by rpki-client