
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json)
Hash identifier: xr5eKCd8a/Ya7s8CIzQkx7KawFVOrpluBOotRYd4y7A=
Subject key identifier: 95:1C:03:DA:A3:3C:1B:0E:8C:12:69:86:79:A7:4C:02:F7:44:CA:F0
Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Certificate serial: 1FFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
Manifest number: 1FEC
Signing time: Tue 18 Aug 2026 16:04:55 +0000
Manifest this update: Tue 18 Aug 2026 16:04:55 +0000
Manifest next update: Tue 25 Aug 2026 16:04:55 +0000
Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: Fr9YkFQt/mIxGlpxu9fOpjvChhxHMhoDNl80hCn7TvY=)
2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: 8KvkPRwmxhEV4smy31k45OPE8C8gicai+UQplmn5B6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8191 (0x1fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Validity
Not Before: Aug 18 16:04:55 2026 GMT
Not After : Aug 25 16:04:55 2026 GMT
Subject: CN=6a8482a7-c84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:6a:1e:83:81:7b:73:fc:10:b8:21:e1:b7:
6e:86:da:54:b3:5b:a5:69:4e:ee:d5:b0:95:fd:d8:
74:15:5b:a0:23:83:b4:2f:b1:88:9a:6b:ba:fa:79:
e6:53:62:df:9e:4a:ca:88:09:28:0c:ed:af:61:06:
df:55:80:27:df:71:39:7e:70:c2:22:9b:89:96:f1:
9c:89:ef:39:96:4c:8f:a6:c1:a6:c6:ad:2b:5e:18:
82:82:13:b4:9b:4f:d1:16:41:4a:b7:fa:e2:d6:7f:
63:72:1c:b0:58:85:15:87:c8:45:f8:4a:00:9e:9e:
a3:ac:2d:3f:ae:9e:04:e6:bb:a2:58:6a:d6:84:5b:
b5:a0:d4:99:d0:a6:b5:0e:7d:2b:ba:ce:b9:66:f8:
18:7c:7b:8f:c4:99:0b:dc:17:fa:89:78:b7:be:46:
a0:39:ba:56:18:ef:4a:97:fa:64:9f:5c:0d:37:99:
7b:69:9a:15:ff:a7:e9:37:a1:8b:17:d9:ee:17:0c:
53:72:22:80:7e:c6:bf:db:1a:8d:f3:04:b1:44:35:
4f:c4:cd:48:e0:cd:1b:50:82:93:2d:e0:18:a2:2c:
a0:33:ce:8b:1d:2e:7b:db:0f:24:24:64:68:0a:86:
a8:9a:75:f3:26:a8:25:a8:87:17:2c:51:23:83:af:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1C:03:DA:A3:3C:1B:0E:8C:12:69:86:79:A7:4C:02:F7:44:CA:F0
X509v3 Authority Key Identifier:
keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:23:e4:c4:22:86:90:79:f4:21:d5:fe:67:83:01:ee:ad:54:
72:30:3f:79:25:7c:e8:eb:9c:69:95:58:7d:65:50:f7:25:16:
03:2a:7d:97:dd:4c:f6:8e:ab:e6:30:04:e6:0a:cb:15:c1:64:
b8:45:a7:b4:f3:7d:89:5a:8a:d3:4f:31:d4:c2:66:fe:76:1f:
42:82:5d:95:22:27:64:d9:8b:7f:2d:91:09:5f:9e:60:17:f5:
9e:17:97:5d:9e:89:80:c0:ed:fb:ac:33:05:75:4d:ac:66:68:
9b:9e:26:c8:3c:1e:3b:38:fe:d7:c7:42:e5:e0:14:b6:81:a8:
95:86:52:dc:c1:85:4e:3d:0b:10:d2:e7:24:37:b7:d2:bd:de:
c6:f3:86:b7:10:a7:f1:4b:e9:17:67:ac:44:7e:9d:04:d0:77:
e0:20:90:fc:bc:7d:93:bb:28:d7:c4:d9:e3:93:f1:48:ca:ff:
1b:63:a8:a3:a3:58:df:12:dc:f5:83:c3:33:38:31:bc:98:cc:
33:74:f2:be:cc:bf:1d:4d:6d:06:92:da:ba:ca:a6:74:8e:fc:
c5:11:b3:2f:1d:73:5c:a7:49:f3:94:25:29:ed:81:d0:3f:ee:
41:58:c8:d8:92:bd:07:96:aa:fe:ae:2b:9a:a0:61:5a:de:1e:
c2:3e:57:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2
NjEwNENENTAwHhcNMjYwODE4MTYwNDU1WhcNMjYwODI1MTYwNDU1WjAYMRYwFAYD
VQQDEw02YTg0ODJhNy1jODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlEZqHoOBe3P8ELgh4bduhtpUs1ulaU7u1bCV/dh0FVugI4O0L7GImmu6+nnm
U2LfnkrKiAkoDO2vYQbfVYAn33E5fnDCIpuJlvGcie85lkyPpsGmxq0rXhiCghO0
m0/RFkFKt/ri1n9jchywWIUVh8hF+EoAnp6jrC0/rp4E5ruiWGrWhFu1oNSZ0Ka1
Dn0rus65ZvgYfHuPxJkL3Bf6iXi3vkagObpWGO9Kl/pkn1wNN5l7aZoV/6fpN6GL
F9nuFwxTciKAfsa/2xqN8wSxRDVPxM1I4M0bUIKTLeAYoiygM86LHS572w8kJGRo
CoaomnXzJqglqIcXLFEjg6+BgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJUcA9qj
PBsOjBJphnmnTAL3RMrwMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4
OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6
VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR
XzNhZGFxN3ZtZkptRUV6VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqSPkxCKGkHn0IdX+Z4MB7q1UcjA/eSV86OucaZVYfWVQ9yUWAyp9l91M9o6r
5jAE5grLFcFkuEWntPN9iVqK008x1MJm/nYfQoJdlSInZNmLfy2RCV+eYBf1nheX
XZ6JgMDt+6wzBXVNrGZom54myDweOzj+18dC5eAUtoGolYZS3MGFTj0LENLnJDe3
0r3exvOGtxCn8UvpF2esRH6dBNB34CCQ/Lx9k7so18TZ45PxSMr/G2Ooo6NY3xLc
9YPDMzgxvJjMM3Tyvsy/HU1tBpLausqmdI78xRGzLx1zXKdJ85QlKe2B0D/uQVjI
2JK9B5aq/q4rmqBhWt4ewj5XcA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:54 2026 by rpki-client