
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
File: S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json)
Hash identifier: 1egIYzw/qhrrva/CdoWZNI4Rxbf6EwgkkPLMvxlpc7c=
Subject key identifier: AB:2E:64:B6:D7:2A:E2:DF:A5:90:3D:2D:F3:E1:33:B1:FA:2B:FC:EF
Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
Certificate issuer: /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Certificate serial: 0289
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
Manifest number: 0282
Signing time: Mon 27 Jul 2026 03:17:21 +0000
Manifest this update: Mon 27 Jul 2026 03:17:21 +0000
Manifest next update: Mon 03 Aug 2026 03:17:21 +0000
Files and hashes: 1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: RIRZ2dWw8JbqgzStMLUjYvnqzsA1fhc+DRM+PqsXjjA=)
2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: vfCasisl/udX1pawaHCEifoYin0FJKKdJCoRiOIHcf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 649 (0x289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Validity
Not Before: Jul 27 03:17:21 2026 GMT
Not After : Aug 3 03:17:21 2026 GMT
Subject: CN=6a66cdc1-514c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d9:1d:38:c3:0b:2c:2f:fc:f4:d3:52:fe:2c:
53:a6:e0:75:86:fa:e1:61:ed:78:20:b4:e0:62:33:
49:ee:2c:1d:e7:6b:71:3d:d8:04:97:c8:80:c8:19:
a4:b1:1a:64:04:4c:89:b0:58:72:3a:e0:35:18:df:
6e:a5:fb:8f:c0:66:4d:f5:65:ff:8e:36:f0:89:3c:
6a:d9:f3:b5:3b:ec:d8:51:6a:c2:32:8a:d4:7f:51:
8b:d8:a1:d4:d1:d3:13:a7:e9:ef:98:16:81:d6:25:
8a:00:da:24:0e:15:00:52:1c:b0:40:0d:3a:df:1d:
44:4c:3a:dd:13:d2:7c:4b:ea:b8:49:24:c1:22:df:
45:d3:d5:b5:e4:a7:d6:8b:39:d4:d3:cc:6b:64:d9:
74:f6:17:e9:15:3b:ec:be:99:9e:9c:f1:dd:0d:44:
04:e6:13:b5:35:a5:9f:cf:60:9a:bf:a2:31:67:a5:
3b:18:e3:12:d6:5e:99:02:62:1f:27:b8:6d:02:d4:
20:05:de:33:2b:42:f6:74:25:7e:89:36:4b:5e:a3:
09:83:44:00:c9:db:35:81:06:ed:15:d3:df:7d:2b:
4a:55:80:a6:98:02:1a:f6:4d:34:83:ae:2c:a1:9e:
33:74:6b:97:d9:47:3c:1e:7e:41:e5:65:13:f0:5a:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2E:64:B6:D7:2A:E2:DF:A5:90:3D:2D:F3:E1:33:B1:FA:2B:FC:EF
X509v3 Authority Key Identifier:
keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cc:cc:2d:73:5d:8b:1d:e6:b1:33:32:a9:33:f7:5e:ea:dc:
f8:ef:54:c1:5f:87:13:61:bd:b3:a3:31:6c:d2:09:6f:29:fb:
a4:4b:fc:70:a4:f2:78:97:7d:50:a0:51:a0:06:85:ff:de:3f:
65:82:69:d8:70:69:6e:28:31:9b:6a:b1:a4:53:ec:fa:51:ce:
52:5d:e5:14:90:26:24:2d:2f:c1:e1:6a:3f:c7:0f:9e:be:e2:
7b:86:ac:c1:b8:ae:a6:5f:cd:a1:7f:60:c8:9a:2e:ab:61:b3:
e4:ba:a7:57:25:ec:83:c7:14:0b:f1:d9:08:c7:96:64:e7:ca:
6d:98:34:fe:73:eb:f0:b4:56:c4:4b:ec:8a:d1:59:3b:01:7e:
2a:e4:9a:2d:6f:96:8a:e2:e8:5c:c5:2d:0d:fa:96:1b:dd:43:
38:75:24:0e:e2:55:3a:9d:98:6b:6c:61:68:57:a9:77:ac:5d:
4e:48:08:7b:ad:30:9e:e1:a6:f8:3c:73:9a:8c:ef:05:9c:59:
35:b7:be:5a:ee:23:25:eb:05:9a:7f:27:9f:88:27:a9:b6:40:
9c:47:5d:bc:53:9c:83:fd:9a:6b:e4:2d:12:06:09:2b:d8:c1:
c3:32:80:23:27:a2:98:f1:0b:59:18:40:38:d4:29:13:86:72:
b1:64:8e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:43:13 2026 by rpki-client