
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json)
Hash identifier: bLJWIr5ilH0naF4lEvO0rSiNiUOiShraFvhTPAQYpsQ=
Subject key identifier: F5:E8:FF:F1:ED:09:49:07:17:F6:2D:2F:74:F3:65:00:61:8F:B9:63
Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
Manifest number: 0117
Signing time: Mon 01 Jun 2026 06:43:57 +0000
Manifest this update: Mon 01 Jun 2026 06:43:56 +0000
Manifest next update: Mon 08 Jun 2026 06:43:56 +0000
Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: IP7vkToyli7rMPrfxuuMI93Z6K/D3N6RDTX1NOcpHuQ=)
2: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: AIZFydURKw6XqDJmBOYWV09bdGH4Y4iDWEmfI3xyTSM=)
3: 63DDF612050411F1819844D9163D8C67.roa (hash: UfMh6BGwSMUTiU+8jXLB4Ib9iALVAn0NIurceWTlxVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Validity
Not Before: Jun 1 06:43:56 2026 GMT
Not After : Jun 8 06:43:56 2026 GMT
Subject: CN=6a1d2a2d-8a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:93:70:c1:88:79:33:a8:81:88:eb:4c:69:
5d:8b:ac:d6:64:09:ac:69:a6:b8:a0:7c:1e:b0:a1:
d8:31:89:b0:0f:c4:2f:73:9c:a4:2f:a8:84:af:3a:
88:04:59:c0:fb:35:e2:22:71:19:80:ef:a5:e5:22:
28:a7:9b:a9:9c:7a:1f:3a:b0:72:6a:ec:60:fb:f6:
27:de:20:0e:d7:da:0c:35:3d:b4:21:4d:5c:d2:13:
1d:a7:44:ad:c4:c0:40:aa:29:41:84:52:ea:51:ef:
66:fb:ba:2a:b2:a9:39:86:05:a3:2d:b2:3c:c3:da:
7f:b2:c7:30:fc:58:62:48:1d:d6:25:88:f9:92:ae:
9a:39:a8:6a:94:78:83:4e:1c:00:5c:29:84:93:f0:
95:94:1e:7c:15:53:39:4c:0d:14:92:7d:9e:9a:39:
73:fd:f9:bd:62:93:8c:d7:db:0d:97:9e:20:fd:78:
9a:e4:b8:1a:45:bb:fa:3d:0d:ef:30:92:42:82:8b:
a1:b1:cc:36:ca:42:e1:9d:e0:d8:dd:4e:38:94:6b:
c5:4e:a1:28:c5:ed:95:9b:7c:9b:33:0c:ec:f2:b0:
02:ed:c8:4f:38:04:20:ba:34:f4:81:12:b3:7b:ae:
7f:8c:ea:e6:f1:35:5e:fc:c1:a9:4a:82:e3:60:f6:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E8:FF:F1:ED:09:49:07:17:F6:2D:2F:74:F3:65:00:61:8F:B9:63
X509v3 Authority Key Identifier:
keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9f:b3:63:bd:ec:78:fb:8d:af:20:74:51:61:e9:06:aa:17:
88:75:01:96:6b:6b:b6:a1:86:44:25:e4:1a:91:16:93:fb:d9:
ae:30:e9:26:9d:4a:26:10:f6:09:c6:fb:ca:0e:c3:8a:82:81:
70:c4:56:cb:b2:ee:de:29:bd:e7:2b:06:80:44:5c:59:76:5f:
a2:7d:a1:ff:27:f9:d3:ba:1c:25:50:e5:18:a6:0c:ee:26:6a:
85:78:e9:29:cb:e0:2b:01:5f:80:14:3d:ab:b0:ab:cd:0c:df:
d9:67:98:c8:45:35:83:21:a1:33:e5:c4:aa:01:69:76:27:38:
e4:9a:a8:39:ac:63:15:df:24:42:2d:c9:b8:69:3f:5a:39:8f:
d2:6a:c2:63:7d:b9:c3:70:8e:23:44:a4:6b:85:8f:21:52:90:
07:65:4f:c7:30:92:c8:f7:40:d7:8e:8f:7b:f2:02:2e:6c:0b:
79:9e:fb:4b:fa:8e:01:90:c4:08:78:32:50:52:40:da:29:c6:
f7:84:0b:bd:91:fd:20:0f:53:7c:8f:b8:fd:aa:e6:c4:28:de:
80:ed:29:cc:c1:0c:42:38:a3:04:4c:40:96:db:6e:fa:b2:2d:
ad:0c:ca:1c:e4:64:56:85:4c:e6:d3:40:dd:f0:c6:9b:ac:19:
34:a9:c7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:22 2026 by rpki-client