
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
File: sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft (raw, json)
Hash identifier: l3zFZ5J6S1IGSqOSYKYV8SdYuwpIp2p71ArM0tCll3E=
Subject key identifier: 8B:C1:47:3F:5D:61:34:2B:54:63:0F:3F:52:61:75:DC:02:42:3C:70
Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
Certificate issuer: /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Certificate serial: 101D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
Manifest number: 0FFF
Signing time: Sat 04 Apr 2026 17:21:36 +0000
Manifest this update: Sat 04 Apr 2026 17:21:35 +0000
Manifest next update: Sat 11 Apr 2026 17:21:35 +0000
Files and hashes: 1: sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl (hash: V9RDl38QT4Jme7/ZJQNjtFgiomquh0te/w7HyU1C+mk=)
2: 8EF29168D1ED11F08D3A6B3CC4F9AE02.roa (hash: 4Xje0XiJFLxR2quCCNpe0kCvsRqAV/JFhxiHtPkeXUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4125 (0x101d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BF1E, serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Validity
Not Before: Apr 4 17:21:35 2026 GMT
Not After : Apr 11 17:21:35 2026 GMT
Subject: CN=69d148a0-d278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d2:b1:26:af:86:7d:b1:ae:4e:d2:a1:8a:9f:
7f:0e:7d:b0:56:7f:12:3c:1a:e0:b6:41:35:b3:a9:
88:24:e4:0f:52:18:38:fb:bb:57:ab:7f:64:b4:be:
10:25:1f:35:41:59:e3:31:ad:ea:10:a5:29:9d:9a:
6a:03:1d:08:83:7b:a8:14:cc:5f:28:47:8c:43:2c:
5c:05:48:67:1b:a9:2d:09:6f:1e:8a:86:5b:11:9f:
fd:bf:07:6c:22:85:f8:44:7b:e3:2e:2d:dd:0f:9c:
02:30:9e:54:c5:26:ac:c7:ad:29:34:ac:11:f8:d4:
9b:00:f4:36:29:ef:dd:8e:aa:13:8f:2f:f9:99:c4:
7f:53:93:28:72:f0:c9:6a:6f:3c:51:41:33:7d:a1:
1e:6c:d5:19:87:2f:b6:38:78:1d:94:3d:3a:35:d6:
0e:68:8a:62:ca:03:e9:7b:17:6b:eb:43:d8:49:ed:
f3:18:a9:aa:10:1f:87:8b:b5:45:5f:19:14:27:f3:
45:c5:e4:5c:31:76:0e:cb:b7:8d:65:08:3a:e8:e0:
b4:7f:b4:a9:4e:45:d5:81:8e:9a:c3:1b:2f:9a:a9:
0a:43:75:08:ca:03:1b:c1:db:94:6b:7a:93:92:00:
e8:93:05:fa:32:18:d7:51:92:dd:20:a8:5c:fa:9e:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C1:47:3F:5D:61:34:2B:54:63:0F:3F:52:61:75:DC:02:42:3C:70
X509v3 Authority Key Identifier:
keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:b1:22:fe:94:84:13:8b:45:0d:dc:b9:aa:38:7a:de:b3:bb:
e4:bd:1b:16:61:31:b3:ee:d1:80:f5:3a:cd:6f:8c:f6:7d:45:
e2:f0:c8:1a:f2:44:e3:8e:1e:2b:30:d2:1d:08:56:54:a5:67:
c0:4b:ff:0b:b1:fb:f7:19:10:9d:1c:a1:ba:4c:d8:76:9f:f5:
64:d6:a1:69:17:c6:2e:a4:96:21:19:a7:03:fd:ad:2e:62:90:
eb:68:2e:b5:9e:65:23:31:ac:f2:4b:a2:8e:2e:a9:04:86:ec:
ba:a5:4d:38:0a:56:bb:7e:aa:63:bd:0e:78:f2:0c:4e:d7:df:
dc:dc:65:fa:74:81:2c:dc:b2:a3:07:c2:13:13:db:8e:8b:1f:
7a:47:c2:81:df:0c:68:9a:78:e4:9d:d7:05:6f:37:93:3e:a6:
63:fc:46:5c:fe:d1:f9:57:99:08:35:58:e0:be:28:f1:dc:87:
80:7a:aa:89:de:97:22:d8:fe:d9:dd:46:d8:ee:6d:0e:de:ba:
d9:ce:db:bd:3d:61:71:de:cf:b7:61:9e:e8:55:5c:0e:f8:3d:
72:4a:a5:6a:6f:1b:35:6d:f5:74:4b:10:17:0d:e4:8c:9a:1a:
d3:cc:26:df:7b:19:d9:67:72:3d:45:7a:7c:73:a4:72:83:97:
be:af:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:47 2026 by rpki-client