
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json)
Hash identifier: wp5MgsT+1nYNfQD4egPC+2zbma7NMnUW7O13JpdAqAc=
Subject key identifier: D8:3F:E7:D3:26:31:D3:9A:FF:35:05:7A:7A:58:DE:87:EA:A7:9E:09
Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Certificate serial: 2021
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
Manifest number: 200A
Signing time: Tue 06 Oct 2026 15:59:21 +0000
Manifest this update: Tue 06 Oct 2026 15:59:20 +0000
Manifest next update: Tue 13 Oct 2026 15:59:20 +0000
Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: FGYiTfoa0Eu+516hAhcHOmTfeXp5KPwqbdKGfb4ZvFY=)
2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: 2pM7TvgdGAXqaUhWu0cxJaq+LWv0IGwie8txlXv9TlU=)
3: dgH7Ux0OYHiH5sFjLoejb7IhMXU.asa (hash: qtK782k98vMHaFKQc2KlU0IySz/PDjJNe6Q725dFzvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 15:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8225 (0x2021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Validity
Not Before: Oct 6 15:59:20 2026 GMT
Not After : Oct 13 15:59:20 2026 GMT
Subject: CN=6ac51ad9-5d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:0e:2b:ca:a6:3b:3f:b3:bf:c3:e2:d4:86:
51:9e:75:1c:4c:4f:06:d2:dd:02:4d:a5:4b:e0:c8:
48:24:4c:a9:7a:07:19:06:d8:b3:9c:fe:88:c7:52:
b7:4f:92:57:62:2d:81:63:f3:ae:c9:e3:b3:7e:37:
5e:b9:fe:cd:26:1c:b8:30:85:92:20:07:b6:14:e2:
f2:e8:68:e0:1f:79:02:90:15:a5:14:fd:63:d6:b7:
b9:f5:4b:6b:9c:af:e4:2a:ae:1a:9d:a0:b3:c4:1b:
24:ba:b6:58:b8:b3:d3:99:cb:54:8f:ab:ce:d7:10:
1f:f6:25:56:d0:f4:e6:98:da:8e:54:be:f0:55:a3:
7c:ad:7b:a8:5b:7a:a9:f0:30:69:3e:38:e6:78:5f:
22:13:3f:27:e5:02:33:ef:d0:b5:25:d1:6f:ea:ff:
e0:d8:f9:26:df:17:be:75:08:e6:7b:89:97:28:4b:
c2:4c:c6:b3:a0:51:73:18:fe:56:05:d7:49:3c:a4:
a7:a2:0f:a9:63:27:c8:ce:e3:c9:3a:c5:d5:73:fc:
e7:73:82:f8:66:90:e3:4c:a4:da:76:95:c4:ca:f9:
93:c9:02:b9:31:4a:05:2c:d8:9a:83:43:db:db:da:
24:42:59:fe:03:3f:c1:2d:32:62:1c:2f:55:48:68:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:E7:D3:26:31:D3:9A:FF:35:05:7A:7A:58:DE:87:EA:A7:9E:09
X509v3 Authority Key Identifier:
keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7e:d8:8d:88:26:08:18:83:9e:b8:7c:60:d3:f6:7c:b6:88:
0f:34:83:07:ef:9f:c1:20:6d:5c:f1:58:bd:ec:f0:99:0b:aa:
64:95:aa:df:29:95:ad:12:0e:78:58:e0:f3:73:25:dd:ee:d7:
d6:71:18:38:e8:02:35:ce:15:cf:0b:a9:6b:e2:a7:3e:51:a8:
d4:75:48:3b:39:c0:ed:e7:76:cc:b7:d6:9e:75:81:e6:4a:62:
97:69:ec:31:ff:fe:56:e6:d0:57:4a:2d:8b:35:46:6f:86:b5:
10:79:24:71:68:05:80:fe:49:a9:b5:48:a8:c1:0e:b7:1a:42:
2b:c3:9b:51:0f:3b:1a:4d:de:7c:c5:ec:89:dd:8d:7d:ee:13:
d8:4d:c4:44:f0:cd:56:b5:dd:f5:27:39:42:47:46:60:28:31:
5c:2f:f6:60:92:ee:43:c4:34:2b:7a:e2:ea:40:5a:27:9e:a0:
ca:88:5b:09:05:7a:81:e3:94:09:c7:cd:6a:85:01:d7:9a:52:
ca:1a:82:c5:3f:b7:c5:d0:f0:3d:b7:1b:8b:3b:9a:09:ce:71:
ff:8c:13:18:e8:73:40:2a:a0:d7:08:9c:51:c2:c5:12:db:4c:
62:02:7e:16:f1:bd:49:77:6d:25:08:3c:e5:61:2e:97:14:44:
29:26:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:29:57 2026 by rpki-client