
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
File: S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json)
Hash identifier: uOsAULQXG2P2VYSKxbHbv1Lp5Klgk6Du7cQ1FHW3sHE=
Subject key identifier: 7E:51:CE:FC:B4:08:BE:E4:7D:D0:70:D8:F0:22:99:56:8D:43:9E:9E
Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
Certificate serial: 04E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
Manifest number: 04DA
Signing time: Mon 12 Oct 2026 23:55:47 +0000
Manifest this update: Mon 12 Oct 2026 23:55:47 +0000
Manifest next update: Mon 19 Oct 2026 23:55:47 +0000
Files and hashes: 1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: LMM5Kgs4r2n8oWM2h39W7JzsnIQhGEz420B5fnDYL8w=)
2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: 8e29YKH9OC4F44m19NG7u8QMBSSDUe5BupTd2yMwpBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl
rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 23:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
Validity
Not Before: Oct 12 23:55:47 2026 GMT
Not After : Oct 19 23:55:47 2026 GMT
Subject: CN=6acd7383-1ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:04:59:2f:b0:c0:21:71:72:8c:2d:9d:78:a2:
39:a9:c4:39:ac:d8:08:50:51:fa:ce:ab:91:19:f1:
7d:1e:ee:e3:c1:98:0b:78:ad:cd:95:32:de:cd:80:
9d:84:03:ba:21:75:ad:1b:00:dc:65:54:ca:56:93:
ce:df:34:04:a1:f3:9c:54:2b:b9:a1:97:ad:99:36:
e1:ac:32:c7:9c:fe:1d:c0:ed:f5:ff:21:2a:44:5b:
3f:6f:02:1e:0a:dc:97:35:97:71:de:e9:e2:44:28:
59:bd:6c:c3:73:f4:bc:21:70:ee:08:20:b8:74:df:
68:16:30:ed:09:11:13:e4:83:c0:6f:b5:30:a3:2d:
c6:9b:09:01:8e:8d:c5:c7:9a:ea:69:81:46:38:e8:
67:d8:0f:d0:c7:82:35:69:13:4f:bc:23:af:df:44:
88:e7:62:7c:2a:3b:09:b2:f9:02:f3:77:bd:7c:9e:
c3:97:8e:03:06:a9:09:30:fb:0a:c2:97:76:2d:51:
6f:b5:40:46:ee:8a:0c:e2:b2:0a:d9:d1:b8:c6:80:
d6:c2:42:3d:6b:81:38:6f:23:1e:3d:e6:be:6d:0a:
e4:b5:49:d5:8b:56:50:e1:38:bf:fc:68:95:58:78:
a0:c3:00:6e:35:69:c1:9c:4b:03:14:17:6f:0f:30:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:51:CE:FC:B4:08:BE:E4:7D:D0:70:D8:F0:22:99:56:8D:43:9E:9E
X509v3 Authority Key Identifier:
keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d8:8e:a8:ae:b7:ef:02:98:14:2a:83:01:31:72:c7:0b:c6:
8f:fb:cd:b9:80:ab:73:72:fe:3e:de:6a:28:12:62:dd:e4:80:
dd:e3:0e:a4:df:48:0a:47:1e:89:58:b8:d3:fc:4f:9c:8d:b8:
b8:7d:81:2e:b8:86:4e:ac:db:28:63:06:d8:06:b4:a3:7b:c2:
ef:55:10:7a:ca:cb:7c:30:fd:94:fb:a1:74:c7:1f:45:de:4c:
a8:a6:32:ec:ff:90:f5:42:b9:5f:c9:bc:94:20:a3:98:bb:64:
3a:85:36:5f:f6:4d:1f:f3:55:1f:07:55:e6:d5:09:2a:0a:d7:
35:18:b4:0e:cc:80:5c:70:ea:34:37:ce:41:80:a6:4b:c5:90:
93:e0:dc:3d:b8:0f:6e:9d:68:f6:85:d0:d5:6b:df:ef:f6:14:
0e:c3:23:29:6c:ed:e0:24:b4:ab:65:fa:ff:fd:3b:71:b7:84:
27:90:01:50:d4:bf:4c:62:e5:c2:c1:70:a1:27:f6:82:4b:f9:
16:98:13:23:ba:5e:be:b3:f1:ec:21:c2:b2:4e:20:82:98:56:
6e:84:16:f7:a5:f2:19:b1:df:2c:d9:ce:44:56:b5:24:7a:24:
42:34:e6:e0:d6:25:56:8f:db:73:e7:3e:d3:8a:3d:b0:1c:2d:
45:77:56:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJCRTExMTAvBgNVBAUTKDRCRDVDMjMxODY3RTI3Mzk1MTU1QzAxQzc4NDhCM0Iw
MUM4NjA2RjIwHhcNMjYxMDEyMjM1NTQ3WhcNMjYxMDE5MjM1NTQ3WjAYMRYwFAYD
VQQDEw02YWNkNzM4My0xY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ARZL7DAIXFyjC2deKI5qcQ5rNgIUFH6zquRGfF9Hu7jwZgLeK3NlTLezYCd
hAO6IXWtGwDcZVTKVpPO3zQEofOcVCu5oZetmTbhrDLHnP4dwO31/yEqRFs/bwIe
CtyXNZdx3uniRChZvWzDc/S8IXDuCCC4dN9oFjDtCRET5IPAb7Uwoy3GmwkBjo3F
x5rqaYFGOOhn2A/Qx4I1aRNPvCOv30SI52J8KjsJsvkC83e9fJ7Dl44DBqkJMPsK
wpd2LVFvtUBG7ooM4rIK2dG4xoDWwkI9a4E4byMePea+bQrktUnVi1ZQ4Ti//GiV
WHigwwBuNWnBnEsDFBdvDzC+mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5Rzvy0
CL7kfdBw2PAimVaNQ56eMB8GA1UdIwQYMBaAFEvVwjGGfic5UVXAHHhIs7Achgby
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFMS85RTY2MDM0Qzg0
QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6bFJWY0FjZUVpenNCeUdC
dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M5WENNWVotSnpsUlZjQWNlRWl6c0J5R0J2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkJFMS85RTY2MDM0Qzg0QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6
bFJWY0FjZUVpenNCeUdCdkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbNiOqK637wKYFCqDATFyxwvGj/vNuYCrc3L+Pt5qKBJi3eSA3eMOpN9ICkce
iVi40/xPnI24uH2BLriGTqzbKGMG2Aa0o3vC71UQesrLfDD9lPuhdMcfRd5MqKYy
7P+Q9UK5X8m8lCCjmLtkOoU2X/ZNH/NVHwdV5tUJKgrXNRi0DsyAXHDqNDfOQYCm
S8WQk+DcPbgPbp1o9oXQ1Wvf7/YUDsMjKWzt4CS0q2X6//07cbeEJ5ABUNS/TGLl
wsFwoSf2gkv5FpgTI7pevrPx7CHCsk4ggphWboQW96XyGbHfLNnORFa1JHokQjTm
4NYlVo/bc+c+04o9sBwtRXdWMw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 21:58:46 2026 by rpki-client