
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json)
Hash identifier: wcopqbxNXBafYTy2bjq3HdDYk1GTFkLeu3SmMlG6FgU=
Subject key identifier: EE:84:32:E5:8C:77:7B:C3:99:7F:E5:AA:62:BE:9B:FD:3F:4D:09:34
Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78
Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78
Certificate serial: 0AEC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
Manifest number: 0ADD
Signing time: Tue 22 Sep 2026 19:16:04 +0000
Manifest this update: Tue 22 Sep 2026 19:16:03 +0000
Manifest next update: Tue 29 Sep 2026 19:16:03 +0000
Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: upmvBtqQ+wCIERSs0/soHtzVVaVlh7R7QE9zj6N5FN4=)
2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: vPWknUKvmhzNYKbXzeUeTtIU2gsg4u0/mGjZtAQaw4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl
rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2796 (0xaec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78
Validity
Not Before: Sep 22 19:16:03 2026 GMT
Not After : Sep 29 19:16:03 2026 GMT
Subject: CN=6ab2d3f4-ba0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:73:a1:58:bd:a2:f6:4e:ac:7d:1b:fb:57:
39:ee:f7:f9:8c:5b:09:07:14:27:02:1b:a0:27:b5:
98:89:0b:8f:35:a4:7c:e8:6b:8e:ce:1a:19:cd:21:
12:60:81:05:25:09:0f:65:02:39:b7:ed:9d:e0:dc:
1e:31:fe:78:f1:24:52:a6:71:1a:63:35:dd:48:ff:
be:83:2a:84:18:e8:a7:a3:74:21:8a:16:e2:51:72:
0a:72:3f:68:c0:cf:7b:83:3a:4c:e8:65:b5:02:b6:
92:ff:58:de:7b:c4:29:03:78:bd:a2:4e:7f:b9:ad:
00:6b:6d:36:d6:14:80:41:87:0f:e3:9e:8d:66:08:
97:e9:c8:16:ce:e6:0b:60:01:68:64:42:c7:f6:76:
65:b3:aa:1d:72:5e:4c:a6:2b:f2:c2:63:ef:3e:e1:
0c:1b:37:73:78:b8:f0:8b:92:43:59:33:42:56:43:
cc:2b:d8:8c:82:91:ee:25:81:af:38:9a:c1:10:d5:
34:12:f7:17:92:18:a7:02:05:da:96:82:76:97:13:
1d:3e:cd:46:ff:9f:37:e0:66:f2:fe:ca:87:8b:42:
6c:44:a4:5d:f3:cc:64:c2:25:6e:f3:75:26:4c:48:
b6:a1:4d:ee:c5:b5:a0:a5:b9:8d:ec:e9:38:f6:57:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:84:32:E5:8C:77:7B:C3:99:7F:E5:AA:62:BE:9B:FD:3F:4D:09:34
X509v3 Authority Key Identifier:
keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e9:76:cc:8b:1a:0d:ca:da:c4:89:78:bf:95:e5:a1:a2:c9:
99:62:98:d3:dd:eb:2c:77:fc:03:80:02:ec:f7:75:73:2f:3b:
e0:96:f9:c5:95:a4:61:da:ae:dc:17:89:4b:4d:a5:f2:60:1f:
16:df:96:e1:a3:2e:97:72:28:a6:b1:e1:ed:71:79:72:a7:e7:
fc:54:5c:a7:4e:19:c3:66:c8:84:04:e6:5a:86:a3:97:8f:0e:
ec:0f:48:a0:02:09:39:a1:3b:74:52:cf:47:8d:d7:92:fb:8a:
24:c3:93:10:9a:3e:da:69:46:65:8f:d9:98:06:b9:fe:39:d2:
c2:51:19:15:47:34:66:f8:7a:18:ee:e6:fd:9d:13:63:1c:0a:
60:95:c9:ff:3b:1c:8b:78:8b:4f:4c:12:46:b6:32:27:43:72:
9e:2f:ae:8d:63:9a:61:94:97:95:fd:d6:22:b2:b6:53:86:63:
ec:3e:f9:f5:10:14:ef:64:f0:46:c1:e3:5a:01:3f:95:d0:d1:
50:41:b4:e5:d9:23:0e:96:74:ca:32:13:c5:94:5a:dd:6e:e1:
c5:46:94:cc:76:c7:db:bb:1e:b5:86:11:8f:3a:30:a6:ca:1a:
b5:1a:ab:c3:53:82:4f:55:3f:50:d4:db:97:8d:81:fd:99:e7:
56:b0:fc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:13:27 2026 by rpki-client