
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json)
Hash identifier: ShCDUqK1+ZsmJmsxm9AFXa4wRzhjnUndArXKTHsPaw8=
Subject key identifier: 5B:99:DC:C9:9A:21:76:82:16:33:05:B0:7C:5B:CB:9A:F7:AF:D1:8B
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
Manifest number: E1
Signing time: Thu 21 May 2026 06:36:34 +0000
Manifest this update: Thu 21 May 2026 06:36:33 +0000
Manifest next update: Thu 28 May 2026 06:36:33 +0000
Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: smhCFZ4D5HgiYO4vlxjVNXkhf1vgV6KMwZmAbWhitwk=)
2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: XIXAdlf2Wapfr3aA+RYeScI/7J0gFTrDr34LwCofapU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Validity
Not Before: May 21 06:36:33 2026 GMT
Not After : May 28 06:36:33 2026 GMT
Subject: CN=6a0ea7f2-bfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:91:d9:f7:9d:d9:1a:22:f8:a2:d4:ac:3e:
2d:5c:ba:66:6b:19:66:de:fd:51:8f:33:df:88:15:
86:ba:69:7c:36:8f:47:93:0d:26:1b:37:b5:e3:be:
38:5e:de:a1:0c:f1:fe:bd:b5:cb:6d:c7:1f:9a:f6:
a0:99:64:d5:d0:5a:fc:4f:27:cf:34:81:ed:76:87:
3e:05:05:9d:ed:9f:58:ad:59:f5:18:2f:b9:30:3d:
65:f5:56:b2:3f:77:1d:88:33:df:e4:f6:bd:cb:77:
e5:e5:b1:4e:06:26:62:a4:64:3b:ba:89:cb:13:87:
4c:1d:61:eb:bc:1d:fc:01:63:59:2a:7f:02:2f:c5:
2d:73:b1:8c:b4:f5:08:e9:52:de:08:db:23:ea:10:
84:b2:4f:b6:2b:8e:77:39:09:a8:6e:1c:66:f6:29:
de:37:1d:4e:bb:c0:56:87:55:26:96:b6:da:8b:5e:
ef:55:12:43:9b:f3:00:2d:34:25:84:8e:19:17:ed:
3f:ae:07:8b:d2:64:f0:5f:27:46:06:b3:28:c7:54:
0e:07:94:a2:0f:18:e5:9e:ac:35:5a:24:b4:27:57:
41:3e:d8:3a:cb:24:4a:aa:c0:a3:fc:15:f9:4d:ad:
c7:c8:ae:d3:22:f3:fe:42:03:b5:e7:8c:4b:22:a1:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:99:DC:C9:9A:21:76:82:16:33:05:B0:7C:5B:CB:9A:F7:AF:D1:8B
X509v3 Authority Key Identifier:
keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7a:25:23:7c:cc:b3:1f:1f:87:aa:39:81:1a:51:5e:d4:73:
0c:d2:dc:d6:6b:ee:12:91:43:7e:80:c1:cf:e6:f2:e3:ae:51:
c1:d7:35:7d:eb:fa:f2:c9:b8:53:69:09:c8:f3:11:ce:8d:fc:
f1:83:7b:21:f2:73:c0:5d:fb:fa:f7:82:dd:dd:56:60:23:57:
52:d4:44:95:61:b1:61:c7:c5:cc:b2:e3:aa:74:24:e7:c7:75:
35:e9:e3:8d:86:3e:4f:74:5d:1e:f2:3c:1b:7b:2d:31:ee:40:
a5:6d:42:de:92:a0:6d:a0:46:86:cb:30:0d:55:bf:94:4a:97:
67:c7:2d:be:4b:18:90:0c:89:f3:49:40:5b:ac:94:c9:e1:41:
b6:48:2e:49:bb:b8:87:e0:6e:65:a3:5e:74:8d:66:3d:a4:f6:
14:07:eb:cb:93:cb:11:a1:6c:24:2e:fa:ee:9d:b0:9a:5c:a0:
4b:8f:99:4f:ed:d3:db:dc:ed:89:9a:91:ac:10:f3:c0:cd:01:
9b:a4:c5:6e:cf:38:d8:bc:e9:8d:52:a0:1e:dc:5b:5d:4c:8f:
f9:46:28:a5:85:68:14:4f:33:8f:22:92:33:3a:9e:a7:50:33:
22:26:ca:7b:c6:da:b2:77:96:f1:ef:42:30:b2:b5:48:56:ec:
d2:a0:06:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:31:09 2026 by rpki-client