
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json)
Hash identifier: rE/o3Pg2nWnl43svs3d92MqseDiXEz9AUzDutRnniTM=
Subject key identifier: 4E:1D:35:AE:B0:5C:44:34:D4:9D:C0:9C:2D:3C:75:5C:41:7C:A7:A8
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 02E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
Manifest number: 02C3
Signing time: Sun 21 Jun 2026 01:28:32 +0000
Manifest this update: Sun 21 Jun 2026 01:28:32 +0000
Manifest next update: Sun 28 Jun 2026 01:28:32 +0000
Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: MzAsWU6fLgQDuMieXQIvS2yXGtvmBr4XxmKDvICyja8=)
2: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: WbC9Zi3FkuUimM2LDo18sEOCgwjkb/IqEbL/LDR9mkg=)
3: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: G3atXAKqq6oFKBpr32HyeNbKvnZw8JFgcP/o+eZXrQQ=)
4: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: 2dB8losCkzflgKLeyufFpykKeZbPyeG/91dZ2ar3/fk=)
5: C163E3D6170C11F1997E579B043D8C67.roa (hash: +bMsiCqkQRPGuAsovwzV+Jwx1b0r6sOT2iZqA0KUI2o=)
6: C1ECF984D07411F0B0B35C27C4F9AE02.roa (hash: 4b1qRgjlNRcZ+iubckIse8edU98Q81NltkHwnBtFg58=)
7: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 0XIzwd7D2/6iAcpSl1J963JfV4yO/w+9LYIuULpKH7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Jun 2026 01:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: Jun 21 01:28:32 2026 GMT
Not After : Jun 28 01:28:32 2026 GMT
Subject: CN=6a373e40-6769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:4e:e7:97:39:83:d0:ef:52:17:99:5b:7d:
75:1f:7c:0f:fb:03:06:0b:ff:d6:7c:08:a3:a0:26:
b9:79:ea:17:26:dc:03:3a:84:25:b3:3e:eb:8e:95:
33:8d:32:c7:df:88:88:cd:28:82:76:34:fa:0c:f0:
f7:3a:1b:8f:3b:c0:ec:c7:2e:57:9b:aa:d9:c2:5b:
b4:e9:28:4b:66:b1:46:21:e6:82:38:3f:51:8e:3e:
a1:36:e1:55:18:56:e2:30:7e:e4:19:a4:ae:b3:36:
8b:79:f0:e8:d4:66:72:46:74:0f:cb:bc:b9:fa:cd:
ef:d2:90:cc:1f:28:47:c0:9b:a6:22:03:3e:ac:80:
f8:bc:f0:01:45:ee:39:f9:55:0e:bf:15:9b:6b:7b:
e7:a2:81:e2:07:cb:3e:3e:cc:51:6d:d1:05:c1:04:
ff:62:6d:81:ca:14:f7:e9:bd:b7:02:e6:30:49:6a:
ca:21:ab:88:23:12:0f:71:28:5c:6b:f9:4a:f6:c0:
e4:40:11:50:bf:e7:b6:d0:4a:6f:18:81:47:47:fc:
75:3a:4f:f7:8f:77:9c:1c:04:92:b0:01:fc:52:6c:
eb:c6:33:ab:86:44:97:6c:bf:7d:53:0f:74:54:97:
e2:22:01:c7:75:74:56:49:da:8c:a2:6b:1e:ef:d0:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1D:35:AE:B0:5C:44:34:D4:9D:C0:9C:2D:3C:75:5C:41:7C:A7:A8
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:c4:5f:5d:3a:3a:42:bb:ed:94:17:fc:84:57:fb:fd:4f:d2:
95:57:57:6c:cf:f0:d6:6c:09:49:83:b5:e8:32:d7:48:3a:2a:
34:3d:ec:ec:2f:b3:3f:e9:43:9f:63:c1:8e:bb:3b:2f:38:aa:
bd:b8:22:db:19:7d:bc:5d:7c:5a:0c:b8:cb:53:0e:c3:d3:dd:
52:b8:64:55:0d:6e:17:e0:79:cb:41:09:e0:a5:e3:46:60:e8:
e7:f3:90:2c:21:26:a2:65:fc:ca:3d:97:e7:db:7f:69:30:0e:
4a:c4:af:af:74:0d:17:08:1f:19:3b:63:f0:5f:f0:a0:e1:e7:
a7:a9:d1:97:44:b1:de:d5:4f:fe:da:6f:79:cb:28:59:a6:25:
de:f0:4d:df:09:99:7c:3e:ef:5e:ba:fe:9d:8b:02:6a:52:2c:
90:51:84:a2:66:aa:56:0e:b0:a5:66:8a:73:72:26:3e:e1:f4:
a0:46:7d:8e:0c:5a:8d:03:55:5d:d6:68:36:59:1c:81:22:20:
eb:d3:48:b2:20:ef:c5:cc:df:bd:7c:53:9d:1d:07:8b:39:97:
f2:06:d2:15:0e:f1:a9:0d:7f:f9:11:01:9d:22:10:43:2e:6e:
d7:fb:e9:a0:4d:49:87:92:78:b8:ea:26:2f:7a:8a:6a:f7:b2:
35:02:94:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:31:00 2026 by rpki-client