
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
File: S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json)
Hash identifier: y1ZCYhsGLLBKuI3XBlsMZJ8Jb4hcfBlNX8UlwuMZwbk=
Subject key identifier: 34:65:2E:3F:14:34:D2:E9:E2:02:9A:AC:9A:DF:AF:E8:88:E3:B5:7F
Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
Certificate serial: 04BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
Manifest number: 04B2
Signing time: Mon 27 Jul 2026 00:55:08 +0000
Manifest this update: Mon 27 Jul 2026 00:55:07 +0000
Manifest next update: Mon 03 Aug 2026 00:55:07 +0000
Files and hashes: 1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: 3mIljau03nikQAaoqNQ6rBAucvdZIMU10D7eu7QbvMY=)
2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: 8e29YKH9OC4F44m19NG7u8QMBSSDUe5BupTd2yMwpBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl
rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
Validity
Not Before: Jul 27 00:55:07 2026 GMT
Not After : Aug 3 00:55:07 2026 GMT
Subject: CN=6a66ac6c-6cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:ea:ac:c3:28:1e:6b:b2:da:f0:e6:22:cd:
cb:fe:ed:b5:f5:1c:53:85:8d:4e:9f:08:7c:fe:df:
12:0c:3f:e0:81:a5:db:c7:10:37:54:06:29:f5:96:
f2:13:a2:d4:ce:cc:f4:4d:39:3e:29:0b:40:31:3d:
6d:ed:4e:81:2a:4b:18:48:f5:f3:66:0e:07:be:64:
30:22:a2:bc:d8:f1:2c:7d:c4:86:c4:89:e4:1b:e9:
d0:57:f3:fc:f7:b6:9a:6e:e1:46:33:06:ad:81:97:
f5:d9:30:e9:ed:b8:13:18:ff:eb:c6:67:7a:d6:c1:
77:52:13:28:ae:1e:ed:f3:23:8e:ce:2f:0f:d5:2a:
ac:bc:84:e0:5b:7f:71:57:cb:d9:53:74:ad:9d:86:
6b:aa:9d:13:6f:cd:27:f0:cc:07:af:fe:f4:c6:cc:
da:2a:53:12:80:09:85:be:b2:fb:ef:3f:31:6e:69:
da:f3:8f:9a:87:99:61:35:31:86:23:0f:a3:5b:16:
01:43:cf:41:70:97:37:7b:1e:75:b8:38:67:8e:7c:
32:93:55:47:2e:ca:53:26:a3:36:24:46:10:83:c4:
c0:f3:65:f7:f1:3b:42:1d:f8:6d:01:fb:8d:06:a6:
72:18:29:22:20:87:31:57:5e:b4:e2:17:9d:f7:26:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:65:2E:3F:14:34:D2:E9:E2:02:9A:AC:9A:DF:AF:E8:88:E3:B5:7F
X509v3 Authority Key Identifier:
keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:ec:be:29:e7:2d:52:53:39:3e:7e:ab:79:a0:05:01:80:c7:
d0:1b:8b:e8:2e:66:b7:dc:21:61:47:3b:13:af:e4:53:27:6b:
08:39:37:4b:86:e9:12:cb:96:ff:3b:f1:c7:8d:61:d4:94:8a:
7c:0f:c7:9c:0a:74:da:ef:68:81:69:d5:0e:d0:ef:15:84:92:
59:9b:8d:ba:0a:88:39:a6:31:f8:a8:19:49:23:f3:a3:35:ce:
01:d4:78:fb:cb:6e:c1:f6:e7:87:e9:2d:d6:98:45:81:c4:ef:
00:b1:64:e5:c2:dd:62:6e:94:e2:7e:28:7c:f7:ba:aa:9a:c9:
21:24:bc:9d:d4:fd:48:be:d7:68:c8:72:b3:16:70:c0:15:75:
cc:41:bf:a5:d5:57:24:b5:15:5a:2d:0f:c5:31:24:c7:62:e1:
bc:d2:64:27:fa:71:31:50:c9:53:14:8e:73:5e:a7:ee:0d:f8:
08:b4:ba:61:c3:ed:24:1f:16:c7:5d:53:cf:ef:54:09:73:4c:
55:67:01:68:c8:30:11:a9:8f:ae:a9:3e:06:92:33:43:78:64:
8b:2b:3a:27:34:97:77:d0:5e:7d:9c:98:07:9d:12:99:85:f6:
0d:90:e5:f4:57:60:1a:1c:ea:07:a5:64:3f:9e:ea:93:ef:90:
fb:60:2a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:58 2026 by rpki-client