
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json)
Hash identifier: j0AXSvPAUZMWQqL+1TRYiKcTk1FbfsemDQ0MV2U8ogU=
Subject key identifier: 93:15:4D:85:38:06:A5:E3:2E:01:EE:85:1A:42:C2:10:CF:FF:DF:7B
Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Certificate serial: 1FB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
Manifest number: 1FA2
Signing time: Thu 26 Mar 2026 15:59:00 +0000
Manifest this update: Thu 26 Mar 2026 15:59:00 +0000
Manifest next update: Thu 02 Apr 2026 15:59:00 +0000
Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: euUwiUKbtx/ug4zlmSanSutbm/jS0W334W/whXR5NMA=)
2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: 8KvkPRwmxhEV4smy31k45OPE8C8gicai+UQplmn5B6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 15:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8117 (0x1fb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Validity
Not Before: Mar 26 15:59:00 2026 GMT
Not After : Apr 2 15:59:00 2026 GMT
Subject: CN=69c557c4-5b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:01:26:5e:08:cc:4b:b5:2b:05:04:df:66:e2:
fa:a2:77:3f:75:92:13:1e:f0:b9:91:39:44:f6:cc:
da:93:14:ce:22:dd:c7:2c:47:3e:96:4a:79:ee:6b:
a0:69:93:0d:2e:56:9b:21:31:79:d1:82:65:71:d7:
08:24:0c:88:e2:37:24:1d:e1:81:36:fa:ea:30:b1:
e8:bf:9e:ca:d8:a4:a8:53:3b:b4:ab:39:30:92:67:
82:a0:1e:64:b0:be:eb:b5:fb:c8:0e:d0:db:ec:55:
ee:09:79:08:5d:91:e3:cb:18:c7:4b:f2:0e:df:f2:
4a:e5:5b:fa:b7:0a:d5:27:b6:e2:f0:a9:1c:9d:89:
08:54:87:0d:63:f9:3b:2c:ea:09:77:65:b0:73:0f:
5d:fa:97:aa:54:d2:fe:a2:2d:39:e3:75:a1:a7:ed:
e9:c4:7f:5d:82:78:ab:b1:4c:fe:be:3a:19:ac:10:
74:99:43:aa:81:73:62:23:7f:7d:b9:7a:70:23:19:
f9:f1:3f:a2:5a:66:85:2d:ff:dd:fc:3a:46:81:8e:
28:23:9f:61:dc:97:f9:21:00:97:83:b5:09:e2:9f:
a7:cd:78:0b:a2:08:59:60:ff:9e:df:f6:6d:9f:e3:
71:07:66:44:43:37:8e:5b:a6:c3:0e:a5:b6:2d:f4:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:15:4D:85:38:06:A5:E3:2E:01:EE:85:1A:42:C2:10:CF:FF:DF:7B
X509v3 Authority Key Identifier:
keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:50:32:34:57:3c:32:82:1b:b7:33:6b:00:f0:b4:cc:e1:60:
cb:7d:aa:d7:9d:75:16:10:83:59:d8:ab:31:6f:7f:3d:aa:b2:
8d:ea:28:31:69:9b:0b:3f:b2:70:2d:a3:ff:0c:72:a5:fa:4d:
3f:ea:2f:97:b6:0e:cd:11:d4:bd:da:5c:4f:27:54:fd:41:2a:
25:98:a1:33:a5:f9:7f:91:e0:6d:d6:f2:01:86:79:53:bd:10:
24:df:95:93:6d:4e:48:39:bf:42:ab:be:1a:0b:7e:2f:b7:a4:
b8:4e:14:b4:a4:5d:85:15:26:a0:a3:f4:b5:10:d1:59:a1:26:
a8:7b:54:08:26:e0:15:d5:82:69:9e:76:e0:4a:3b:38:0b:37:
bc:97:c2:b1:66:85:07:ad:83:83:f5:7f:e9:6a:ef:6c:fe:5c:
f9:03:1f:d1:98:77:58:ae:83:d6:dc:a1:4b:0d:4d:0c:cd:b6:
8a:2d:41:c2:bc:9f:fd:cc:54:a4:3c:68:fe:fd:ef:c5:83:69:
e1:b5:4f:17:21:2a:23:c7:d7:11:c6:23:fe:4c:d7:a9:cb:51:
15:ef:d2:a7:e4:bc:57:e6:68:7a:fd:7b:25:83:e8:32:03:c7:
48:53:cb:37:ff:29:85:03:5f:78:4f:47:c2:24:11:52:04:e6:
9c:cc:9b:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2
NjEwNENENTAwHhcNMjYwMzI2MTU1OTAwWhcNMjYwNDAyMTU1OTAwWjAYMRYwFAYD
VQQDEw02OWM1NTdjNC01YjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6wEmXgjMS7UrBQTfZuL6onc/dZITHvC5kTlE9szakxTOIt3HLEc+lkp57mug
aZMNLlabITF50YJlcdcIJAyI4jckHeGBNvrqMLHov57K2KSoUzu0qzkwkmeCoB5k
sL7rtfvIDtDb7FXuCXkIXZHjyxjHS/IO3/JK5Vv6twrVJ7bi8KkcnYkIVIcNY/k7
LOoJd2Wwcw9d+peqVNL+oi0543Whp+3pxH9dgnirsUz+vjoZrBB0mUOqgXNiI399
uXpwIxn58T+iWmaFLf/d/DpGgY4oI59h3Jf5IQCXg7UJ4p+nzXgLoghZYP+e3/Zt
n+NxB2ZEQzeOW6bDDqW2LfQ6BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMVTYU4
BqXjLgHuhRpCwhDP/997MB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4
OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6
VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR
XzNhZGFxN3ZtZkptRUV6VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAVAyNFc8MoIbtzNrAPC0zOFgy32q1511FhCDWdirMW9/PaqyjeooMWmbCz+y
cC2j/wxypfpNP+ovl7YOzRHUvdpcTydU/UEqJZihM6X5f5HgbdbyAYZ5U70QJN+V
k21OSDm/Qqu+Ggt+L7ekuE4UtKRdhRUmoKP0tRDRWaEmqHtUCCbgFdWCaZ524Eo7
OAs3vJfCsWaFB62Dg/V/6WrvbP5c+QMf0Zh3WK6D1tyhSw1NDM22ii1Bwryf/cxU
pDxo/v3vxYNp4bVPFyEqI8fXEcYj/kzXqctRFe/Sp+S8V+Zoev17JYPoMgPHSFPL
N/8phQNfeE9HwiQRUgTmnMyb2g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:19:37 2026 by rpki-client