
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
File: sUCvBJGbRROCWm6lfhq55UN548g.mft (raw, json)
Hash identifier: 3cUHLnWv0vwclR12qsCubkLUsPpX0K9Tb0VZUxfguF4=
Subject key identifier: C0:11:AF:E3:AB:4E:84:9C:AA:10:F1:42:B6:7A:41:80:E6:F8:1F:59
Authority key identifier: B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8
Certificate issuer: /CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8
Certificate serial: 0BFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
Manifest number: 0BEE
Signing time: Wed 20 May 2026 18:53:47 +0000
Manifest this update: Wed 20 May 2026 18:53:47 +0000
Manifest next update: Wed 27 May 2026 18:53:47 +0000
Files and hashes: 1: sUCvBJGbRROCWm6lfhq55UN548g.crl (hash: pY0qc9d/Xojdn2nvFVTm39sBKYkWfw09NEwUsGnOo+g=)
2: A2139F38EF8111F091D2B45E5F6F56BC.roa (hash: htJ4VDMIgUmAqLLv+vJUBNK9ByybYpEa/tAe+qkz96c=)
3: DC7A929EEF8111F0B8F8645F5F6F56BC.roa (hash: oXnvHlMxtaLYGYz5MghtoZAARZeUZKQdkFkuL9+XvMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl
rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EBFD, serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8
Validity
Not Before: May 20 18:53:47 2026 GMT
Not After : May 27 18:53:47 2026 GMT
Subject: CN=6a0e033b-f889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:da:66:f2:38:cb:e2:4d:2f:8d:d2:38:6a:
a2:28:16:f9:03:8d:6f:12:28:d6:fa:2f:f5:8b:68:
2a:19:88:38:11:d3:b8:fc:b8:b1:22:17:ac:81:bd:
78:02:15:fb:8e:c0:30:f7:0e:0c:33:d8:e4:12:1b:
fb:0e:0e:b8:0a:6a:2a:7b:81:5f:62:2c:75:9d:03:
64:8a:cc:55:c8:4b:e8:ba:79:cd:e4:e4:23:8c:42:
ac:fe:49:02:ee:69:60:8a:e5:73:bb:fd:84:fb:69:
62:6e:6c:2a:9d:de:c1:75:ff:d7:78:2a:af:34:83:
bc:05:8c:15:db:1d:fc:cc:a0:be:1c:36:d9:46:29:
7f:45:18:3c:fa:dd:79:ad:8e:40:94:8e:ef:f4:e6:
5b:6e:15:8e:82:11:02:ba:51:91:e8:b3:c9:60:ee:
8a:bc:8f:6a:5f:4d:e3:d1:17:06:69:95:a1:2b:6e:
ac:53:5a:43:3d:08:92:6e:7c:10:20:40:4b:27:ad:
23:8c:a0:1a:e5:13:9f:05:b2:cf:28:42:50:5b:00:
31:82:38:77:88:cc:06:9a:3c:42:dd:4b:eb:1b:49:
72:cf:0b:0b:5d:46:ea:53:0a:4d:38:0e:30:e1:0c:
7e:c6:b8:24:14:8d:79:4e:fd:ea:07:a0:12:9a:18:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:11:AF:E3:AB:4E:84:9C:AA:10:F1:42:B6:7A:41:80:E6:F8:1F:59
X509v3 Authority Key Identifier:
keyid:B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:00:ae:43:0c:b9:ec:7f:61:01:81:9f:67:65:38:62:33:b5:
eb:d7:96:2e:cf:44:c8:e1:8f:1c:56:10:c3:a9:58:00:f5:28:
e9:eb:8e:b2:70:b7:88:5b:5a:a1:1b:a0:84:9f:c3:bd:31:f1:
b4:bc:53:59:9a:1b:87:12:cd:be:bc:24:df:5c:ac:c3:64:21:
08:aa:35:8f:f8:24:6d:f6:f7:96:eb:25:99:f6:76:21:26:59:
3f:66:b9:1d:d9:25:df:91:ef:84:de:04:e1:f4:6e:cc:49:3b:
50:65:58:8e:16:1f:a3:67:b8:2c:7b:96:63:5c:56:df:46:53:
58:a6:49:04:ef:7e:79:28:48:1c:93:af:ec:e8:26:1e:7c:7a:
d5:29:d9:8f:98:d1:25:31:b7:fc:62:cc:50:5e:55:cc:08:7f:
86:a7:b5:f9:7e:ee:10:4d:b2:92:9f:56:ee:e4:1b:8f:80:18:
7e:4b:ab:01:be:61:06:91:fa:19:f4:fe:10:d8:c0:c7:2c:ae:
ed:19:ae:f2:06:ff:1a:31:0e:fb:52:19:f8:05:ed:82:42:74:
3e:52:28:a7:47:07:89:35:d0:65:ec:af:7d:44:72:ef:40:4a:
27:65:ba:94:7e:ce:8b:c2:45:ac:fe:81:48:75:c3:12:38:78:
a7:32:ca:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:45 2026 by rpki-client