
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
File: S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json)
Hash identifier: gOHH0PmEwOn2abJwAvzuS4Mx1OxGUQdSOxXoHh/53zc=
Subject key identifier: 8A:E7:21:85:01:84:6A:E1:24:9F:FA:CD:AD:E4:12:74:C6:83:AF:64
Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
Certificate issuer: /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Certificate serial: 02B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
Manifest number: 02AA
Signing time: Tue 13 Oct 2026 02:01:07 +0000
Manifest this update: Tue 13 Oct 2026 02:01:06 +0000
Manifest next update: Tue 20 Oct 2026 02:01:06 +0000
Files and hashes: 1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: zU5DsEd+vtX6KFNx1nhIipcDDdtzbgOBAq7/3bV8G2o=)
2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: vfCasisl/udX1pawaHCEifoYin0FJKKdJCoRiOIHcf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Validity
Not Before: Oct 13 02:01:06 2026 GMT
Not After : Oct 20 02:01:06 2026 GMT
Subject: CN=6acd90e3-9509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:9a:d1:63:63:77:67:1b:48:d4:06:a4:fe:
6d:ac:c5:37:27:f8:70:11:4d:3a:59:80:08:5e:0a:
2c:1e:fa:86:0d:c7:20:92:fc:2b:c3:78:96:5d:f7:
cf:19:a4:8b:5c:e4:2b:bc:1a:d5:96:9f:c3:41:96:
8b:43:1c:58:9f:77:3f:89:ed:11:de:9b:6e:9a:db:
79:2b:f4:05:26:de:be:e4:f0:c2:36:23:5e:11:b8:
d8:61:f1:c0:96:8e:7f:9d:3d:89:5e:5e:85:97:be:
66:57:81:1b:ef:f3:bd:7c:79:a7:4b:95:82:b5:1b:
a2:fe:ff:88:ab:a0:95:57:75:2e:ff:b6:f9:53:aa:
ee:0e:c2:0e:30:11:17:26:f6:dd:78:f5:47:b6:77:
7b:40:8c:0d:b6:ea:ac:2c:97:c5:26:06:8c:3e:07:
95:a3:e9:6c:aa:47:ab:42:d3:f3:60:cf:30:61:96:
fd:52:13:a2:31:a0:37:da:9d:59:87:c3:30:bc:5c:
26:7d:78:8e:da:60:a9:f7:de:03:9a:05:c7:22:6b:
5f:1c:0b:ba:e2:52:50:b2:21:dc:66:24:12:3a:9c:
c7:97:66:2d:4f:da:87:bf:cb:d4:70:89:f7:bd:1e:
db:bc:62:39:41:bd:16:54:2b:6c:dc:46:e0:46:bf:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:21:85:01:84:6A:E1:24:9F:FA:CD:AD:E4:12:74:C6:83:AF:64
X509v3 Authority Key Identifier:
keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0a:82:99:bf:0b:c1:0d:c9:85:b9:eb:0c:d9:c1:b7:14:fc:
c7:f2:4f:0e:06:b5:4b:d2:08:7d:98:c3:21:ad:a2:d7:6a:64:
ea:16:da:40:6d:08:be:b5:2c:0d:3b:91:b1:f8:54:bc:8e:7f:
be:e3:7b:8f:59:21:1d:f2:04:b1:a5:85:94:60:86:a5:da:0e:
01:45:38:73:4b:a0:41:4e:33:2b:e0:d2:97:62:db:b6:36:53:
21:d2:b9:56:48:43:42:12:07:eb:7f:81:54:ee:20:18:0c:3d:
3c:a3:bc:55:d6:73:85:54:74:a6:50:3a:ad:f0:32:26:98:cd:
ea:57:70:09:04:4e:24:cc:48:88:60:0f:30:4b:3d:93:7d:7b:
59:60:3a:c5:00:78:bd:b8:e4:e4:b5:33:66:68:84:95:7e:75:
60:9f:5e:08:35:53:91:e5:b0:0b:bd:c8:79:ca:28:68:ff:60:
81:8b:fd:24:50:99:87:4b:37:fe:bf:a9:a5:62:b4:bd:b9:cb:
67:c3:ba:40:73:6f:66:8f:67:12:bb:0a:86:5a:80:cf:a6:01:
3d:50:aa:0f:ad:93:fb:2d:a2:ac:51:2c:d7:12:02:e0:b0:8d:
96:cf:06:19:55:9a:4b:8b:61:5f:0c:b1:81:dd:e6:78:56:68:
6f:cf:c1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:48:39 2026 by rpki-client