
$ rpki-client -vvf rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
File: SyWxRyDwREuz1mj5Y1hDVPf6whM.mft (raw, json)
Hash identifier: 4V0et0yuZmI0eFpair39tXHi8uQwMMzKeXzJ71SWxFU=
Subject key identifier: BB:0C:B3:EB:33:CD:3F:46:B2:CA:AC:B5:5A:FB:C0:36:C4:29:A1:55
Authority key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13
Certificate issuer: /CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
Manifest number: 01CE
Signing time: Wed 19 Aug 2026 04:19:38 +0000
Manifest this update: Wed 19 Aug 2026 04:19:38 +0000
Manifest next update: Wed 26 Aug 2026 04:19:38 +0000
Files and hashes: 1: SyWxRyDwREuz1mj5Y1hDVPf6whM.crl (hash: wXNh9Fi88mRF08ksMznuwvGsRAwXM86sJFMdLdh5q1M=)
2: D0F245E0D76711EE99C72C29C4F9AE02.roa (hash: /nSONda3h8Q8eZ5jy2F36VmYz3WvK3T5pKue5DyH0zM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl
rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650EA, serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213
Validity
Not Before: Aug 19 04:19:38 2026 GMT
Not After : Aug 26 04:19:38 2026 GMT
Subject: CN=6a852eda-7969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:81:4b:fe:a6:05:1a:c7:64:88:48:f2:83:
84:79:82:a9:59:de:27:7b:d8:e0:29:d6:14:ff:a8:
67:8f:fa:4a:10:ac:24:e8:c2:6a:3d:90:17:bd:2c:
97:4d:0a:60:3d:8f:26:b9:cf:80:9c:00:33:82:fc:
fc:36:95:ca:62:5d:bf:a9:cf:98:83:2f:6c:42:a4:
d1:62:c8:5e:dd:90:25:33:20:4c:59:3d:2b:59:b6:
6e:d7:92:06:75:f7:b5:12:5d:06:71:14:6f:e1:99:
3a:98:3d:ff:d3:92:85:fd:b4:fc:04:33:d4:f5:6b:
25:d4:8c:94:1d:3a:d9:2c:44:0b:52:1f:1c:f1:ec:
fb:5b:de:d0:2d:b7:82:05:30:83:af:3d:e9:d2:47:
4e:62:77:09:7e:7f:82:b4:86:3d:5b:8b:87:bf:97:
aa:8d:18:0d:73:83:6c:35:4a:be:3f:b4:09:6c:61:
62:9a:20:7c:e8:1a:38:7f:88:c9:0a:44:90:9d:f2:
64:bd:a3:79:37:fa:7f:15:8a:93:cc:f2:06:79:c7:
8c:45:70:39:97:f7:16:2a:70:44:08:06:25:ce:fa:
0d:df:8a:f4:32:42:35:71:75:65:2a:be:55:16:b0:
95:06:09:fe:e8:c9:8f:7f:6b:9a:fa:ed:12:4f:ec:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0C:B3:EB:33:CD:3F:46:B2:CA:AC:B5:5A:FB:C0:36:C4:29:A1:55
X509v3 Authority Key Identifier:
keyid:4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:de:39:36:c4:6d:44:7c:99:8e:cd:65:28:02:95:31:fb:87:
33:7c:b1:80:62:4d:e5:ce:94:33:64:16:55:f4:5d:ba:5e:90:
62:e1:cb:9c:8e:57:9b:55:27:32:b4:c7:d9:46:e8:81:92:a0:
ed:7c:6e:82:94:3e:f5:c0:51:e6:c0:c3:25:93:34:ce:0c:12:
4f:7f:e5:47:c6:f2:e1:50:71:ef:c2:50:99:4a:f4:56:3f:6f:
c5:91:c8:32:e9:63:d8:ec:43:77:b1:4c:89:39:98:de:d7:8b:
30:83:a0:0c:65:c9:05:0c:13:06:28:4b:fd:f1:43:80:0b:95:
9f:41:d5:1d:44:0c:69:a0:79:b2:90:c5:06:58:21:ab:6f:f0:
05:8a:c5:71:1e:c8:a3:e9:5f:9d:82:e4:64:26:45:b3:03:1a:
27:0a:aa:cb:19:bb:b7:52:23:0c:d7:39:e3:f8:40:ea:49:42:
2b:96:4b:5a:f1:5a:42:7a:05:d2:a9:bf:5d:6b:94:43:73:d5:
d4:4d:e4:d2:13:13:a7:ea:7f:d9:a5:e1:97:2d:a6:34:f9:fd:
04:0d:d2:bc:0c:73:84:63:02:f1:2f:e6:ea:fa:37:46:15:12:
a9:37:f6:de:a5:b7:b8:3e:f5:53:c0:4a:64:ee:bb:fc:20:07:
3f:eb:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:44 2026 by rpki-client