
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
File: S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json)
Hash identifier: IbITtPAl7tP/0/eZ8PIJ2FsHXoj7RAkybL9BfDxF1g4=
Subject key identifier: 78:BD:05:3A:B8:E4:09:C6:FD:1A:A8:93:84:E5:6F:B6:37:44:7F:8C
Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
Certificate serial: 046C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
Manifest number: 0466
Signing time: Mon 02 Mar 2026 10:59:22 +0000
Manifest this update: Mon 02 Mar 2026 10:59:22 +0000
Manifest next update: Mon 09 Mar 2026 10:59:22 +0000
Files and hashes: 1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: TMVKpF7PZ2BuUTczD2n4LcCD2EvaYDXHMpy1wCl4KMo=)
2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: cU6eC+Y4LcFUHOpkxhA6AepdEwVmb5mf5fRgb2SQyIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl
rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1132 (0x46c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
Validity
Not Before: Mar 2 10:59:22 2026 GMT
Not After : Mar 9 10:59:22 2026 GMT
Subject: CN=69a56d8a-fc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:50:b2:29:57:e2:d8:0e:54:41:b9:30:18:
c1:8a:37:8e:c4:e1:d7:78:0a:39:7e:61:2d:1d:a9:
e3:dd:77:b6:2e:ba:56:d1:e7:cd:ee:93:e0:da:a8:
d2:33:76:e1:9d:30:82:d0:d5:1b:8b:ed:38:4d:56:
2c:ac:a5:bd:88:be:00:e3:00:0e:55:46:98:3d:5c:
9f:6c:63:e9:c8:28:bf:91:a1:79:ef:02:a5:f1:9e:
e8:1d:70:df:ef:41:55:96:47:2e:1f:3c:40:30:df:
20:73:58:ed:a1:d9:63:94:cc:32:c4:12:f6:03:6f:
2d:1a:6a:cc:19:a0:b1:5b:65:1e:3f:94:4c:78:54:
73:9d:db:aa:cc:9a:1f:28:68:45:92:e1:08:a4:a7:
d3:c6:7a:f8:af:90:f3:43:48:5c:3c:a6:a8:5c:c3:
79:67:42:0c:ae:06:04:ff:d4:ce:a8:97:65:c3:bf:
c6:9b:f5:1a:f2:7c:da:d9:34:a5:c0:1b:70:0e:46:
9b:7a:80:cd:b4:0b:76:c0:97:77:62:dc:f9:56:d4:
aa:fb:b1:ec:52:9f:9b:bc:d9:18:1f:77:37:55:5b:
73:aa:d7:3f:e7:9c:59:2e:3d:f6:49:e8:3e:82:57:
ba:3f:61:92:16:40:1e:5f:44:ac:1d:82:60:fa:1f:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BD:05:3A:B8:E4:09:C6:FD:1A:A8:93:84:E5:6F:B6:37:44:7F:8C
X509v3 Authority Key Identifier:
keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:66:be:d6:ad:87:d6:99:f3:87:b6:06:eb:b1:f4:16:94:eb:
de:89:43:85:80:77:eb:da:04:66:c1:7b:29:45:55:53:d8:b4:
09:32:37:cb:5f:34:04:21:91:a6:f7:fd:ec:00:34:23:9e:b7:
bb:08:9c:29:2d:45:83:a2:8d:11:b2:43:f0:a1:e8:92:27:d3:
ca:6e:8a:1d:05:af:cb:dc:de:c7:e2:a6:0e:a0:cf:dd:7f:a6:
ec:b1:14:14:3d:d4:d6:28:f1:cc:3a:80:aa:36:f2:7c:4a:24:
74:34:3d:7e:32:68:53:6f:97:a0:8d:9b:a3:41:21:e4:a2:ba:
48:70:28:69:c2:b4:fc:3f:6f:20:48:01:eb:57:7c:d6:4f:aa:
b5:00:f6:42:4c:fe:5e:71:50:02:47:92:b5:ad:10:8b:97:3a:
13:ae:d4:35:3f:0a:43:fb:ae:97:e4:04:1d:89:45:41:6d:25:
79:ee:a8:1d:b7:18:49:5a:38:10:cc:43:95:2e:01:04:27:27:
a4:5a:d9:97:e1:8f:29:68:29:72:23:93:66:8e:dd:e6:28:f0:
60:1f:55:12:f3:b9:d5:90:47:09:3a:ba:36:98:2c:fd:d3:cd:
45:da:af:ea:bb:92:dd:b2:a0:62:50:61:41:b7:ab:05:1a:51:
76:aa:cd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:49 2026 by rpki-client