
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json)
Hash identifier: jrTMF9+DWxpuLIdohtyjqhyfWCyzb4hwE4YQBXWU/Ao=
Subject key identifier: 1F:73:B8:7E:21:21:A0:DD:2B:7A:15:C8:7A:AD:A6:D2:0A:AF:3C:BC
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 02CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
Manifest number: 02AD
Signing time: Thu 07 May 2026 01:28:41 +0000
Manifest this update: Thu 07 May 2026 01:28:40 +0000
Manifest next update: Thu 14 May 2026 01:28:40 +0000
Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: TLk2NcGUa4F/UnCwf4BULW5prb54poEN1fKV7GUfwa4=)
2: C1ECF984D07411F0B0B35C27C4F9AE02.roa (hash: 4b1qRgjlNRcZ+iubckIse8edU98Q81NltkHwnBtFg58=)
3: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 0XIzwd7D2/6iAcpSl1J963JfV4yO/w+9LYIuULpKH7s=)
4: C163E3D6170C11F1997E579B043D8C67.roa (hash: +bMsiCqkQRPGuAsovwzV+Jwx1b0r6sOT2iZqA0KUI2o=)
5: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: WbC9Zi3FkuUimM2LDo18sEOCgwjkb/IqEbL/LDR9mkg=)
6: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: G3atXAKqq6oFKBpr32HyeNbKvnZw8JFgcP/o+eZXrQQ=)
7: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: 2dB8losCkzflgKLeyufFpykKeZbPyeG/91dZ2ar3/fk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: May 7 01:28:40 2026 GMT
Not After : May 14 01:28:40 2026 GMT
Subject: CN=69fbeac9-cabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:c3:4b:f2:06:f7:63:2e:ee:4b:3a:39:b7:
ce:aa:cf:cf:23:a0:96:81:34:bb:38:75:db:4f:6d:
dd:ca:ce:4e:94:db:c8:7f:d8:7f:31:e2:72:a7:c2:
d2:5f:62:2f:f8:33:bb:7c:5d:69:a3:af:40:e6:5e:
51:79:e0:99:a6:8b:fb:5b:0b:2c:b5:d4:c3:ee:9a:
26:f5:1f:d1:6d:6f:49:23:5f:42:a4:3e:2f:c6:94:
88:c5:aa:3b:0c:c6:d2:e7:09:b6:0b:a7:ee:9d:8e:
fe:d0:16:a7:61:1e:93:88:97:b6:4e:0a:d0:d8:38:
8e:0a:65:5f:e4:19:44:25:68:2f:eb:d4:a5:17:dd:
78:1a:d8:67:5f:75:56:f6:75:c3:09:13:f2:72:6b:
d1:3e:de:f7:24:ae:8a:cd:c4:f1:8d:e9:7f:d4:53:
5e:cb:02:56:3a:bd:e3:5a:b4:2b:c3:31:38:a3:6e:
2e:75:9e:12:16:dc:79:16:c3:f0:e0:a5:39:b7:dd:
50:2a:39:59:f8:e6:f6:0f:65:a5:9b:b8:69:ac:66:
36:35:90:9b:bd:78:87:e4:c0:4b:4a:0d:af:05:07:
ad:c1:ff:f8:5a:36:33:96:86:29:c9:ca:e9:c0:95:
42:50:bd:7c:f1:bd:35:61:81:6e:5c:45:09:63:ab:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:73:B8:7E:21:21:A0:DD:2B:7A:15:C8:7A:AD:A6:D2:0A:AF:3C:BC
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:c3:5e:f5:37:42:2d:b0:90:68:f3:e8:e6:f5:3d:35:ee:53:
18:da:73:aa:6e:25:b2:06:9d:ed:31:a7:be:fc:51:e8:13:d9:
b4:dd:ab:e9:29:48:c4:ea:70:00:b1:29:ac:ba:a1:4b:8c:37:
1f:ed:ef:46:82:3c:76:ef:f7:6c:82:2b:c1:38:3b:26:ff:63:
22:4d:4c:49:ad:11:27:2a:12:4d:c2:70:7c:49:8b:1b:c4:44:
5a:c6:e5:16:a0:ff:e5:4f:a9:7a:b1:76:b1:20:7a:00:7d:80:
3d:c8:ff:82:b4:93:22:61:7c:85:86:7b:fa:b1:b3:6f:72:e9:
fe:6c:d2:50:20:15:38:63:23:65:e7:02:19:4c:18:b9:98:09:
82:f4:be:82:f7:c4:4e:04:03:30:58:85:30:dd:55:74:f8:8e:
01:8f:55:16:98:ed:9d:d4:9a:ae:0e:0d:ef:44:4b:fe:2d:27:
2d:29:9b:fe:a7:d2:ca:b8:3e:15:7c:21:29:cd:f1:8b:d3:ea:
cc:89:9d:d6:51:75:28:0f:62:b4:c9:4d:d7:0a:36:6b:e5:1d:
3c:ca:6e:7b:8b:45:eb:4e:61:42:b4:b4:46:fe:42:59:b3:11:
eb:30:ce:27:87:ac:40:4b:7b:fc:05:b5:4d:e8:0a:4d:14:cd:
c3:8c:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:35:32 2026 by rpki-client