
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json)
Hash identifier: Q24f72R3yGvcFPBh0SorB0C989DqGtYOI4lg8qtzB3g=
Subject key identifier: 68:F0:68:7A:0B:4C:9A:EE:66:18:E0:82:79:6F:5C:18:E7:EC:79:A6
Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Certificate serial: 034F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
Manifest number: 0348
Signing time: Wed 19 Aug 2026 01:21:40 +0000
Manifest this update: Wed 19 Aug 2026 01:21:39 +0000
Manifest next update: Wed 26 Aug 2026 01:21:39 +0000
Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: RMfcpuxnbztVtKJIyA0lRzHQUWf44/cq35m1LdVcAXQ=)
2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: LqX1NYcUBpIFn4nEYWAdBnB30XYthrymeUC3YsifzY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847 (0x34f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Validity
Not Before: Aug 19 01:21:39 2026 GMT
Not After : Aug 26 01:21:39 2026 GMT
Subject: CN=6a850524-05f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:9e:e8:cb:34:01:70:43:c8:ac:f1:4b:12:
ff:25:f8:3b:c1:67:4a:d2:7c:6a:28:7b:c2:17:8c:
22:b9:41:f7:24:0c:c2:64:9c:c3:e9:ac:c7:3c:43:
d0:2d:60:2f:53:0e:d8:3c:be:59:ce:a2:a6:08:38:
0f:9e:44:48:92:08:56:c5:79:3d:f7:d3:39:d3:f4:
31:fa:29:66:5c:b5:89:f4:28:26:6d:72:78:ab:a6:
40:c3:c2:7f:a2:5d:ce:5d:d3:b3:be:75:7e:c1:19:
b4:9f:1e:30:68:4b:0b:22:43:28:f7:ec:5c:35:b6:
90:9f:15:f1:d8:f9:80:01:05:8a:b6:0e:50:4e:eb:
a3:b0:65:33:1b:29:93:3a:98:07:41:25:23:c8:c8:
fc:7c:49:98:94:30:5f:cc:e5:1b:f5:aa:f0:f4:8c:
51:ac:4d:2b:6c:5d:50:64:7b:3f:e1:d3:09:f6:10:
12:58:c0:f6:58:a6:8f:59:91:91:56:86:7f:a1:b8:
1f:09:5a:7e:1d:51:67:7e:8b:58:7d:cc:7f:f1:0e:
b7:e6:62:21:3a:8b:48:94:2d:64:78:c9:78:61:b5:
e0:ec:e4:a0:69:54:ba:5f:99:30:7a:75:db:c4:42:
16:5d:a5:53:b3:4e:50:b9:ed:cf:6b:ef:5e:e4:e8:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F0:68:7A:0B:4C:9A:EE:66:18:E0:82:79:6F:5C:18:E7:EC:79:A6
X509v3 Authority Key Identifier:
keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f1:91:36:3e:09:1b:bc:4b:e8:f3:24:25:a0:fa:41:2e:d7:
16:e4:56:1b:37:51:fa:a3:a7:1a:f5:eb:ee:a6:a0:7f:6f:cd:
f3:df:5d:33:d4:18:4d:b0:ea:fc:49:22:a9:c5:48:c6:33:4b:
1d:0d:ec:cc:aa:b7:c0:d6:2e:1f:c4:58:16:22:5e:b4:68:53:
c0:77:26:05:0e:eb:ab:36:40:34:27:7f:16:aa:d9:35:4e:00:
55:cd:26:76:3e:c9:15:42:c9:6e:05:f0:64:21:f6:cc:31:e4:
86:79:b0:6d:50:d8:5f:28:f5:46:aa:63:1c:50:97:c3:a4:e9:
21:91:fe:1e:7f:96:91:03:9d:eb:23:3d:14:ad:83:1b:94:1a:
72:0a:f4:7b:9c:bd:05:6a:0f:ca:78:2f:96:bb:5d:54:7e:38:
fc:83:81:50:4d:72:47:25:bd:55:c8:89:cb:ba:b8:84:41:26:
39:52:d0:70:44:fc:b5:ce:6b:7d:02:18:08:ec:3b:af:d8:c3:
64:ca:11:c2:5c:c0:3d:db:3d:1e:08:3c:28:85:f8:03:66:1b:
18:e8:94:6d:63:90:1e:f4:bd:8b:dd:3d:7f:8d:6e:94:78:ff:
bb:52:ad:66:40:a9:f4:5e:f1:70:30:e3:a8:16:4a:d0:8c:c2:
77:e9:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:12 2026 by rpki-client