
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json)
Hash identifier: R5ePx7EqLqPEN8FpWCJKekre27kdmEjYfYKi4VhlqNM=
Subject key identifier: 72:DA:33:E8:59:9E:D4:5A:54:A4:75:FE:28:61:14:13:29:9D:E4:45
Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
Manifest number: D8
Signing time: Thu 11 Jun 2026 09:04:18 +0000
Manifest this update: Thu 11 Jun 2026 09:04:17 +0000
Manifest next update: Thu 18 Jun 2026 09:04:17 +0000
Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: EqXeNJV0Kv4kDa3pKv+LFAjaabeSikEDhOPC5/q4dvc=)
2: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: ZAcnv2B2glJNz/amDzlP0oQS8f8IykGzbvOZt8DAQOY=)
3: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: V0jiGWcisCYeYKJhJdPZNpTEwuLUAeBQE/p7M60AP1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Validity
Not Before: Jun 11 09:04:17 2026 GMT
Not After : Jun 18 09:04:17 2026 GMT
Subject: CN=6a2a7a12-e447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:86:bd:b4:b0:98:11:25:dc:d3:5b:9d:a2:33:
eb:aa:a7:42:33:93:39:1c:42:a7:be:fa:ac:3f:91:
9a:e3:df:d5:33:2f:11:e1:bb:bc:57:74:12:3a:2c:
cf:de:bf:16:8a:ea:f3:ad:2d:63:b9:ca:e8:4f:75:
2b:7d:97:a3:07:e4:b3:07:8c:c4:fe:61:43:04:24:
31:5b:05:12:54:59:02:ce:86:b7:75:dc:b1:b5:59:
22:1f:b9:47:08:68:64:8d:12:c7:59:d4:e4:8a:e0:
f0:16:41:5a:8f:f9:e7:c6:65:87:59:b9:9e:ab:fd:
10:29:2a:0b:8d:12:de:38:ef:ea:e5:15:16:ca:c9:
b0:e4:69:51:43:4f:9b:f0:8e:e4:59:4f:a0:1a:bf:
d1:2b:88:c8:34:7f:27:34:6c:d3:ae:9f:de:8a:c3:
31:d1:13:e6:6d:0f:c4:49:eb:2d:a0:35:52:8e:d4:
2c:48:1c:73:2d:e9:4c:88:ff:c6:f0:a6:a8:9b:73:
a4:5a:ed:1d:cb:70:a6:0e:42:05:e7:4a:42:d1:ec:
92:0c:a5:ce:fa:8b:44:44:fe:79:50:1a:5c:01:10:
b5:ce:6e:f1:e0:68:7b:9e:36:d6:c7:ed:0b:3d:c0:
ab:9b:cc:8e:b1:f0:26:e9:e6:ad:83:88:66:18:ed:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DA:33:E8:59:9E:D4:5A:54:A4:75:FE:28:61:14:13:29:9D:E4:45
X509v3 Authority Key Identifier:
keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:d1:00:6b:f4:63:fa:06:76:6c:32:ad:10:12:96:57:25:7e:
96:e4:1e:41:c2:9e:15:75:fb:77:85:d1:f0:f8:f3:2a:09:88:
06:ad:cd:2e:d6:98:97:7c:f4:25:57:3a:11:2d:a8:f2:fc:7c:
fd:57:71:1a:a9:1c:b2:6f:80:55:52:9e:11:e0:c3:8f:2f:3b:
3d:9e:0f:e7:39:c8:fc:2b:34:15:b9:fe:50:4b:8e:59:3f:68:
6a:f9:37:93:5d:ed:c9:de:37:7c:71:30:d0:22:bb:cd:ee:7b:
bb:13:ec:af:08:87:7f:0b:c7:be:95:4f:b9:84:b2:c0:1f:42:
48:5b:8f:9f:83:02:59:1e:af:38:41:bc:60:23:58:ec:06:e2:
54:d5:ad:29:46:e4:69:06:40:78:0a:eb:d7:35:32:6e:cb:26:
73:0d:99:16:df:58:cf:f7:85:11:d0:2d:a2:e9:96:82:2b:c7:
f6:5b:5c:c8:fe:d0:10:52:69:99:71:e0:5b:7c:03:3f:96:11:
78:ae:55:51:75:15:41:aa:be:2e:6c:87:d2:e6:c1:c3:0b:67:
ef:48:9b:6e:2d:9c:b5:17:ba:1c:3f:03:cc:d1:89:c4:8c:d3:
1a:8f:fa:f7:06:16:d5:27:fb:a3:55:97:ba:b5:02:f5:58:ca:
dc:90:e9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:00 2026 by rpki-client