
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
File: S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json)
Hash identifier: 4BsxrMHiW14T5O6LOh4nOTuxk3ox9tFWfoW7mqZSMsA=
Subject key identifier: EE:76:AB:37:7D:71:7A:AA:21:E6:21:1E:16:43:DB:4A:67:80:F1:0F
Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
Certificate issuer: /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Certificate serial: 0295
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
Manifest number: 028E
Signing time: Wed 19 Aug 2026 02:20:16 +0000
Manifest this update: Wed 19 Aug 2026 02:20:15 +0000
Manifest next update: Wed 26 Aug 2026 02:20:15 +0000
Files and hashes: 1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: eirUOAfSCFlLzuVa1VaIk2OLoa8sQEBvtJZxbXLZmn8=)
2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: vfCasisl/udX1pawaHCEifoYin0FJKKdJCoRiOIHcf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Validity
Not Before: Aug 19 02:20:15 2026 GMT
Not After : Aug 26 02:20:15 2026 GMT
Subject: CN=6a8512e0-dbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:5d:2c:f2:dc:47:63:dc:07:3e:6c:a7:40:
c4:d9:bc:8e:66:6e:fe:48:cd:00:ed:aa:b7:fb:23:
b1:83:c1:24:91:c5:28:c1:30:2c:7a:d7:d1:70:46:
94:9a:38:d5:67:b5:62:84:d0:6d:45:c5:80:e4:00:
4d:f3:ef:e8:a8:5f:d2:78:af:5a:da:67:08:a3:60:
31:b0:dd:f2:86:03:c8:e4:8c:7a:36:c9:52:70:dd:
db:b4:db:c8:7d:3e:e9:b6:c2:d2:68:62:2f:e8:4b:
fc:e2:f7:7e:2b:97:9f:68:0c:61:f6:2f:40:cb:4f:
eb:81:39:6c:26:cd:72:7f:28:6f:1f:58:f1:0c:40:
39:33:96:19:ce:dc:3d:13:d2:37:55:fc:27:f2:79:
24:a9:16:58:7b:e3:24:4f:c2:30:1d:74:71:28:e7:
4b:1c:2b:c9:d8:60:bc:87:8d:90:64:57:ab:dc:45:
35:77:fe:e9:04:4e:93:c4:e2:f6:3c:b3:46:db:a5:
db:f3:fd:92:56:1c:0c:3f:82:5c:ec:28:88:1c:a4:
6d:48:57:d6:ed:93:bf:59:fe:c6:2a:e4:06:43:54:
fb:9d:a7:6c:4e:5e:3b:48:92:14:6c:f2:50:3b:9b:
1b:fe:21:c2:c9:fa:b5:ee:f4:27:9a:52:37:0e:34:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:76:AB:37:7D:71:7A:AA:21:E6:21:1E:16:43:DB:4A:67:80:F1:0F
X509v3 Authority Key Identifier:
keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:3b:e1:97:ca:74:4e:03:1f:ef:8f:0d:30:82:36:10:0c:b6:
78:fc:3d:30:19:9e:4a:0c:d5:a8:01:e5:ad:d5:a7:73:5d:ee:
40:84:29:56:d0:af:82:20:60:71:1b:55:74:b3:48:1b:ef:7c:
a2:54:3a:e2:63:ec:80:37:e4:57:79:d2:07:0d:a7:59:2d:a8:
d4:4a:31:b3:35:e6:73:cc:93:75:55:df:95:82:eb:2b:b4:bc:
d8:7a:a1:50:f4:45:a9:4c:d1:ae:91:90:d8:bd:95:6b:61:3f:
8a:34:31:df:76:a3:11:a5:31:73:6f:2f:80:8a:4a:9d:76:8a:
b7:28:cd:cb:49:ab:32:85:c4:2e:e9:33:13:3f:99:d4:6e:54:
41:09:32:08:27:1e:81:62:77:71:34:07:70:2d:55:e9:37:6b:
df:09:10:1a:d4:9e:0a:0f:6b:8d:e2:4c:29:fa:54:7b:c7:4e:
bb:e1:9c:97:49:a7:99:ee:fc:0c:ce:78:13:d9:9f:2e:ed:0e:
03:89:97:56:52:7b:f8:f8:e4:27:01:d9:49:ec:b3:c0:55:07:
91:56:dd:8f:b1:85:37:a0:92:0f:bf:b4:e3:65:9d:22:2e:fc:
16:a1:91:91:12:46:1c:91:53:2c:37:a5:1d:de:e3:7d:79:5f:
06:d9:6f:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZGNzIxMTAvBgNVBAUTKDRCRDcwM0I3RkVDQTNBQTJBODM2Njc1RkEwRjNGMzI5
ODEyRTZGNjUwHhcNMjYwODE5MDIyMDE1WhcNMjYwODI2MDIyMDE1WjAYMRYwFAYD
VQQDEw02YTg1MTJlMC1kYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuBddLPLcR2PcBz5sp0DE2byOZm7+SM0A7aq3+yOxg8EkkcUowTAsetfRcEaU
mjjVZ7VihNBtRcWA5ABN8+/oqF/SeK9a2mcIo2AxsN3yhgPI5Ix6NslScN3btNvI
fT7ptsLSaGIv6Ev84vd+K5efaAxh9i9Ay0/rgTlsJs1yfyhvH1jxDEA5M5YZztw9
E9I3Vfwn8nkkqRZYe+MkT8IwHXRxKOdLHCvJ2GC8h42QZFer3EU1d/7pBE6TxOL2
PLNG26Xb8/2SVhwMP4Jc7CiIHKRtSFfW7ZO/Wf7GKuQGQ1T7nadsTl47SJIUbPJQ
O5sb/iHCyfq17vQnmlI3DjQ40wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO52qzd9
cXqqIeYhHhZD20pngPEPMB8GA1UdIwQYMBaAFEvXA7f+yjqiqDZnX6Dz8ymBLm9l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkY3Mi8yNkE1NTlENkJB
QTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09xS29ObWRmb1BQektZRXVi
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M5Y0R0XzdLT3FLb05tZGZvUFB6S1lFdWIyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkY3Mi8yNkE1NTlENkJBQTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09x
S29ObWRmb1BQektZRXViMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmDvhl8p0TgMf748NMII2EAy2ePw9MBmeSgzVqAHlrdWnc13uQIQpVtCvgiBg
cRtVdLNIG+98olQ64mPsgDfkV3nSBw2nWS2o1EoxszXmc8yTdVXflYLrK7S82Hqh
UPRFqUzRrpGQ2L2Va2E/ijQx33ajEaUxc28vgIpKnXaKtyjNy0mrMoXELukzEz+Z
1G5UQQkyCCcegWJ3cTQHcC1V6Tdr3wkQGtSeCg9rjeJMKfpUe8dOu+Gcl0mnme78
DM54E9mfLu0OA4mXVlJ7+PjkJwHZSeyzwFUHkVbdj7GFN6CSD7+042WdIi78FqGR
kRJGHJFTLDelHd7jfXlfBtlvTQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:48:16 2026 by rpki-client