
$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json)
Hash identifier: gSRq9KO/tPF5lzSLKv4cYquIHMjC8xqPNbGz3VnuN9E=
Subject key identifier: A8:B0:BB:45:85:A3:F2:35:B3:1D:68:D3:BF:DD:4D:66:33:AE:43:9E
Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
Manifest number: DF
Signing time: Fri 05 Jun 2026 06:57:35 +0000
Manifest this update: Fri 05 Jun 2026 06:57:35 +0000
Manifest next update: Fri 12 Jun 2026 06:57:35 +0000
Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: jD+lofHfNGxn4GGKsS5NYIdZP4yK/WRJVFHq0pwNz70=)
2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: WQx0gB4vaejrR/+XkuLctOwdLPN5sGooZHjE/arViIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 06:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Validity
Not Before: Jun 5 06:57:35 2026 GMT
Not After : Jun 12 06:57:35 2026 GMT
Subject: CN=6a22735f-389a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:64:75:c9:6d:79:60:27:1c:8c:d9:1c:5d:
cb:f5:f6:8a:56:d7:96:b2:d9:e4:37:57:89:df:e7:
ee:19:b6:4a:e0:7b:8d:2b:e6:8d:6b:bd:1f:44:fd:
e4:a5:20:d7:98:22:c3:b2:fe:8a:8f:ab:69:4b:90:
0f:5b:8b:19:ac:a8:76:e1:6a:5a:7d:d2:86:c8:43:
0b:5e:49:ee:0d:50:f9:b3:c8:d6:5a:8e:67:95:10:
2f:ab:c8:44:3b:0f:92:80:26:b2:29:59:5e:19:e1:
75:08:9a:33:37:70:f5:e7:23:53:a9:de:d3:2f:00:
ec:93:c2:0e:45:9f:d0:62:17:a0:3c:7a:31:21:0f:
b8:e3:b6:81:0c:a1:4e:66:9b:94:ba:fe:96:09:8d:
80:5c:3c:76:60:38:dc:6f:c6:a2:17:2d:e9:c8:1f:
0c:28:e3:a3:b0:30:c3:e6:74:57:09:12:17:e0:e1:
86:63:8b:46:96:f7:bf:3e:bd:47:cd:15:d0:8d:aa:
89:f9:b7:82:48:bf:54:e3:77:06:4b:d1:33:38:4d:
37:c8:7e:4a:15:be:97:64:d9:a1:ee:69:89:0d:11:
29:12:e6:19:f9:36:c5:e0:a6:5f:ec:e5:b0:b7:41:
9e:79:83:00:42:0b:f1:02:67:50:db:94:89:12:74:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B0:BB:45:85:A3:F2:35:B3:1D:68:D3:BF:DD:4D:66:33:AE:43:9E
X509v3 Authority Key Identifier:
keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:17:58:7c:97:e6:c9:fd:27:61:3e:05:ae:f7:ef:9c:d5:cf:
be:0f:54:08:e4:9f:32:8f:a4:1a:4c:0e:69:5e:09:d6:db:42:
7a:a5:f2:6b:24:f5:15:98:60:dd:93:65:88:ca:77:f7:8f:bf:
c5:e8:6f:61:19:d9:78:48:94:17:1b:1f:f9:af:30:6c:3d:98:
5f:10:ae:5e:4d:ff:e1:8b:87:fe:3d:35:a6:36:42:61:67:7b:
43:3f:cc:8e:1f:51:5b:49:bf:ff:68:64:fc:59:ad:0c:b9:80:
f1:1f:55:6a:06:d2:a5:49:06:de:2c:20:c6:be:1a:66:96:9b:
99:7d:a4:68:5b:6f:54:ae:f9:07:fc:c4:a5:1a:4c:ee:87:37:
57:60:ac:c3:76:6f:20:11:71:8d:aa:70:96:7c:b6:0b:74:c1:
d2:ea:9e:ea:61:c4:33:13:0e:59:e3:9c:da:de:e2:04:50:bf:
a9:e3:40:fc:ca:95:cd:85:6f:51:39:f2:69:6b:e2:10:52:3f:
05:d0:49:1c:e6:d0:40:ae:4b:73:27:bc:a3:90:e2:e2:bd:a8:
23:b6:24:71:d4:5e:52:00:ec:90:e1:db:76:6e:7f:88:82:b3:
4f:8c:c7:ce:09:d4:53:3e:42:50:1a:59:1a:4b:52:88:f0:5b:
44:fd:73:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:16:44 2026 by rpki-client