
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
File: sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft (raw, json)
Hash identifier: SnjCQOKYiT434jmLX+lcCDB4yVkFVqo2D7FSDEFy78Q=
Subject key identifier: 68:69:D7:30:FD:9D:86:D6:6B:E4:A8:23:EB:F9:C6:CD:21:83:9F:E0
Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
Certificate issuer: /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Certificate serial: 103B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
Manifest number: 101D
Signing time: Tue 02 Jun 2026 17:27:14 +0000
Manifest this update: Tue 02 Jun 2026 17:27:14 +0000
Manifest next update: Tue 09 Jun 2026 17:27:14 +0000
Files and hashes: 1: sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl (hash: m1i1SiE8nt/GiQpeCdD+Mmgsi0I8nifkFgwDftjRi7g=)
2: 8EF29168D1ED11F08D3A6B3CC4F9AE02.roa (hash: 4Xje0XiJFLxR2quCCNpe0kCvsRqAV/JFhxiHtPkeXUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4155 (0x103b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BF1E, serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Validity
Not Before: Jun 2 17:27:14 2026 GMT
Not After : Jun 9 17:27:14 2026 GMT
Subject: CN=6a1f1272-d460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:96:51:1d:7f:c7:dc:32:42:4c:18:59:39:
c9:43:97:5c:86:9e:5b:6d:b4:71:1f:87:7c:5b:8c:
2e:f6:92:4d:59:62:37:34:fd:56:25:8c:6a:5f:d9:
c3:5d:97:28:d7:51:34:af:a0:47:71:43:7d:0f:c2:
b0:8c:eb:74:e6:bd:dc:45:9f:2b:a3:66:e2:04:ae:
c4:00:b2:bb:ba:a4:60:34:8f:15:eb:55:fd:0a:21:
e7:3c:5f:64:56:cc:62:31:a9:02:d5:e6:d3:8f:5d:
72:73:a3:92:10:33:d7:4f:62:1e:76:9a:a8:33:32:
5f:c4:9c:ea:eb:5f:cf:5d:9b:54:9f:53:f4:1a:0d:
4f:8d:e4:92:90:e7:bb:64:25:5d:83:c4:f7:f0:7b:
e6:68:87:98:8e:b0:92:16:8a:ca:9e:bf:7e:70:88:
d3:d2:a5:1c:80:e0:14:68:9e:e2:66:13:27:ce:ae:
8f:00:5d:42:b0:7b:d9:00:37:a6:66:c9:5b:51:02:
dc:86:09:5d:1e:b7:a8:39:55:cf:37:ff:f2:ca:39:
a7:c0:46:f2:0d:4d:e9:23:a9:a0:bf:d7:7f:d0:06:
42:6f:8e:8d:a0:e8:72:28:23:d0:39:40:ab:e6:51:
46:71:8e:63:41:4c:e1:79:0c:5a:0e:56:d5:4f:d2:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:69:D7:30:FD:9D:86:D6:6B:E4:A8:23:EB:F9:C6:CD:21:83:9F:E0
X509v3 Authority Key Identifier:
keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:95:c2:f3:6c:19:f9:30:d6:ae:6e:07:07:0c:b2:05:1e:e5:
08:27:25:ef:6a:03:27:a0:d6:cf:bf:4d:bd:db:c2:22:46:dd:
6d:25:61:2b:c4:0c:b9:c9:b9:c9:09:45:83:e0:86:a4:27:71:
0b:1d:f3:98:f9:69:b3:d0:10:fd:c8:d8:92:b8:dd:07:47:d7:
79:48:57:e3:07:37:b5:a0:c7:dd:fa:37:6a:94:b4:18:43:5a:
cd:b3:0c:1c:12:29:71:c1:69:f6:bb:fa:e2:74:b6:36:31:36:
cb:1d:81:30:d1:c1:f6:a2:8f:bb:e2:54:65:9f:f2:0c:15:ac:
8b:7f:88:2f:d2:4f:10:95:d2:36:49:03:68:72:ba:83:d9:3b:
28:92:a6:b9:4c:ce:90:4e:51:a9:26:0f:d9:95:41:ea:13:e5:
c7:d7:55:43:51:19:95:12:3c:4b:01:fd:76:0e:e2:49:f2:89:
c1:ac:07:64:99:7a:68:94:db:45:85:07:45:7e:f8:50:f9:33:
3a:af:6c:41:1d:dd:67:c7:c3:d7:c3:b6:a8:87:df:a2:c3:ee:
25:d2:cf:8d:a3:0d:bf:c1:60:94:57:cd:13:fd:04:19:94:4a:
9e:a2:18:03:4e:86:1b:5e:42:7b:e4:a9:1a:fc:c6:aa:54:79:
c8:e4:97:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:20:28 2026 by rpki-client