
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json)
Hash identifier: t1Ff9fpNch13tC3zvs2NzEM4nzdZWvqLLuiKojd/TrQ=
Subject key identifier: 24:67:E0:7B:D8:3F:12:92:8E:7F:77:CB:C5:75:A9:C9:79:61:BB:1A
Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Certificate serial: 1FA8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
Manifest number: 1F95
Signing time: Sun 01 Mar 2026 23:32:19 +0000
Manifest this update: Sun 01 Mar 2026 23:32:18 +0000
Manifest next update: Sun 08 Mar 2026 23:32:18 +0000
Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: uZfMFALekOsNGUz51l/GbOBDJGVuChGwtzPaNqc71sg=)
2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: 8KvkPRwmxhEV4smy31k45OPE8C8gicai+UQplmn5B6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8104 (0x1fa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Validity
Not Before: Mar 1 23:32:18 2026 GMT
Not After : Mar 8 23:32:18 2026 GMT
Subject: CN=69a4cc82-c6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:73:5e:51:23:12:07:45:0a:a1:43:67:99:
f3:6b:1d:85:22:26:7c:13:91:74:4d:86:c8:9b:3b:
d8:51:62:b9:d3:9a:57:2b:1e:fc:9e:aa:16:60:88:
e6:40:17:91:86:a5:77:e4:03:57:23:af:54:a0:01:
e6:47:88:01:65:84:3d:9a:69:3e:f9:d4:e7:92:16:
9f:27:bf:e1:8b:f6:44:8d:8a:bb:f3:49:31:b7:7d:
b1:b3:9d:a4:96:01:a1:71:0c:4f:a7:65:a1:92:67:
83:b0:b4:ef:8f:5c:fe:67:7f:35:9c:2a:47:dd:b2:
13:97:e3:fd:87:56:5d:89:8b:8b:7f:2a:e5:07:f3:
ed:7b:88:0c:e5:0b:55:7f:fd:7e:8f:62:98:dc:08:
c9:b7:eb:1c:a7:92:aa:8a:64:bf:f7:39:21:1e:b3:
e6:12:2c:4c:f4:24:9a:e2:ce:b5:42:1d:fd:18:4a:
f8:d9:2a:4e:26:2f:d6:6c:3d:fa:bd:87:93:0a:f0:
df:cb:fc:c2:b4:7c:6e:93:9e:88:fd:03:5c:6e:59:
6d:2d:92:f2:52:f5:c6:c8:3d:f0:d5:b6:38:6b:47:
b0:50:54:6d:6a:2c:5b:ec:33:c8:d0:b6:c6:25:7c:
b6:80:2f:92:98:fc:f2:45:f4:04:71:8d:20:7b:15:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:67:E0:7B:D8:3F:12:92:8E:7F:77:CB:C5:75:A9:C9:79:61:BB:1A
X509v3 Authority Key Identifier:
keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a0:2e:be:cf:98:81:c9:60:bf:6f:70:68:8f:38:cb:97:38:
89:04:7e:fe:3c:71:29:07:ef:76:6a:83:e5:5a:ca:1c:b3:79:
a7:55:79:53:52:bc:3a:51:6f:22:c1:7d:3b:46:95:32:ef:37:
54:26:27:cd:05:c3:e3:69:3c:1b:27:98:35:10:61:64:79:30:
21:e0:d6:a0:0e:dd:2f:d7:54:89:78:98:22:b3:02:95:d1:46:
90:fd:57:33:d2:6a:1f:37:d7:1e:6b:cc:55:65:24:e1:b2:36:
cb:6e:1b:08:6c:da:c3:f9:1f:41:c5:3f:ec:57:00:82:74:5c:
65:8b:02:2b:d8:95:44:be:4e:e8:04:6b:f0:0d:0b:c4:2e:08:
3d:86:24:f4:81:23:d8:e4:85:3d:2d:3c:0c:1f:25:e3:93:c4:
19:24:f8:c3:76:d6:30:bc:a3:a9:5d:ce:ad:f9:12:6e:7e:6b:
70:e2:fd:81:9e:8a:96:cf:32:b4:bd:94:0b:5a:48:56:43:50:
3b:09:92:f9:28:9c:ff:59:b1:15:be:71:fe:9a:b6:80:eb:0d:
3f:10:34:2b:45:53:12:f8:af:9e:2a:3e:94:3e:d6:90:b6:66:
02:22:b3:30:8b:29:48:d6:5a:cd:ff:74:78:ec:5a:7d:d2:e1:
af:79:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:12 2026 by rpki-client