
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json)
Hash identifier: oPhNXt3lzXbjTmuWOedb+7JVhS1/J0cZcSvphTsJ4I0=
Subject key identifier: 0A:C7:6D:77:04:86:16:AA:44:42:33:B2:4D:8C:01:0E:C0:C6:23:E7
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 0302
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
Manifest number: 02DC
Signing time: Wed 05 Aug 2026 02:10:51 +0000
Manifest this update: Wed 05 Aug 2026 02:10:50 +0000
Manifest next update: Wed 12 Aug 2026 02:10:50 +0000
Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: zaNBsbYhZ48YfmckwCI1aGvsih1/fv7CvUlsI4fTw+s=)
2: C163E3D6170C11F1997E579B043D8C67.roa (hash: wJJu7Gkn5klz+WG+WYyewpK4AQELyjDQvQ1Qur8VYvc=)
3: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: CRPg/Q2mXPBEqylj0Jz/coMyIwo1wpypsOjOwHedpMM=)
4: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 0XIzwd7D2/6iAcpSl1J963JfV4yO/w+9LYIuULpKH7s=)
5: C1ECF984D07411F0B0B35C27C4F9AE02.roa (hash: /yZQPTsxHkvk4ctloKc7UIVchuakTDwnSbZlJ8wAP38=)
6: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: ebgtTFO3AasXytfvPXSreDrm4OT7z/0UktQfKH8cIZU=)
7: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: hkTmLhoHVbaMZHz6R6CzIS8rA7idBoFtN1kqeUeSHm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 02:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: Aug 5 02:10:50 2026 GMT
Not After : Aug 12 02:10:50 2026 GMT
Subject: CN=6a729bab-6879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:4e:a2:ed:a5:a9:16:c9:b4:93:52:c8:16:
99:43:8a:75:71:b2:70:d1:4f:ca:fc:7b:71:2f:08:
d8:00:1f:77:29:6d:93:73:09:89:25:b2:e2:29:c8:
88:66:f6:ca:ce:f5:be:a5:db:e8:08:4e:6d:da:9e:
fe:f3:e9:f5:6a:b4:35:9d:cf:8f:06:a6:af:a2:75:
7b:7a:a8:2c:42:81:f2:34:91:a5:01:9d:a8:80:da:
aa:fe:31:26:87:b5:c1:46:49:60:69:40:5a:43:7b:
69:f1:80:2a:02:ea:ea:06:21:f1:f2:74:7e:87:9e:
81:50:25:0d:c2:c0:ff:8c:80:47:ac:00:4c:9a:3d:
de:53:0e:9c:5b:d1:69:8d:1d:a0:32:bf:3e:5b:51:
d8:92:c6:ab:ba:cf:4e:1d:f8:ce:2f:e0:7d:d3:95:
2b:0e:80:97:5c:30:ef:8f:02:b7:ca:b3:34:12:aa:
03:3c:11:ff:12:4e:90:73:5f:8f:d4:25:a1:8c:56:
8a:1c:3a:8b:56:b4:db:7b:3a:7c:d2:ec:b6:13:3e:
11:80:4c:19:43:ea:b0:c6:7c:ff:36:d5:ec:69:82:
67:3e:bf:76:29:5d:0f:21:1b:d5:9f:34:c0:92:e1:
1b:85:ad:ab:45:a1:fc:0f:63:97:9b:b3:c2:40:22:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C7:6D:77:04:86:16:AA:44:42:33:B2:4D:8C:01:0E:C0:C6:23:E7
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:f0:57:0c:a6:14:d1:30:22:4f:8e:b3:06:58:82:99:f5:c1:
c3:44:d2:73:ef:86:e3:32:91:5f:a4:f7:05:f6:a3:b9:e1:41:
31:d8:c0:19:52:f3:1c:16:b6:b5:53:27:27:ed:6a:3a:f8:bf:
7a:7b:34:a2:f0:d6:16:f2:19:5a:dc:ad:b6:7f:23:5a:7e:1c:
12:3b:f0:a3:c4:09:8c:c9:5c:e5:9d:a2:e0:36:08:ec:30:09:
21:12:69:0a:41:6d:06:ea:42:d3:9c:7a:1c:26:48:e5:01:eb:
0e:9a:29:63:52:96:d5:dd:0a:28:3c:dc:0a:6f:a0:55:cb:e4:
6d:30:21:84:0b:ce:e8:9b:a8:da:c0:ff:33:a2:0c:24:35:06:
2a:a7:c9:84:a6:85:67:4a:c4:37:0a:ff:77:67:58:a8:d7:f6:
43:14:48:d2:fe:e2:db:fc:cd:aa:26:49:a2:39:ad:b2:86:4a:
97:ff:ae:bf:fa:3e:b8:83:40:59:f8:62:dd:cf:cc:3c:74:d1:
b5:ac:b8:35:42:d4:42:71:5a:0e:1f:f0:1b:71:74:6b:1b:7b:
c9:59:ed:b6:e1:87:05:4b:98:98:54:55:0b:d9:2e:70:4d:f2:
52:52:fd:11:d9:fb:18:95:47:2f:d2:a3:1e:8a:de:a1:8d:9d:
03:16:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:51:31 2026 by rpki-client