
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json)
Hash identifier: zP2mGSoH/eQ/xfOVxDG4Vx3vCp/Fq5J/tRXP1nlwCfU=
Subject key identifier: FC:51:B3:80:A6:67:8A:C1:35:7E:D7:D6:E3:1F:A0:8E:0B:0B:1D:C1
Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78
Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78
Certificate serial: 0AD4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
Manifest number: 0AC5
Signing time: Thu 06 Aug 2026 19:20:05 +0000
Manifest this update: Thu 06 Aug 2026 19:20:05 +0000
Manifest next update: Thu 13 Aug 2026 19:20:05 +0000
Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: swc7u8HEgznNdL2pMaQzXI6N+OHLp8ub2JFeD+R4G/4=)
2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: vPWknUKvmhzNYKbXzeUeTtIU2gsg4u0/mGjZtAQaw4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl
rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Aug 2026 19:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2772 (0xad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78
Validity
Not Before: Aug 6 19:20:05 2026 GMT
Not After : Aug 13 19:20:05 2026 GMT
Subject: CN=6a74de65-ecb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:a6:7b:ba:35:59:36:49:18:97:77:c4:8b:
56:08:12:03:ef:88:fd:95:46:39:d0:25:79:af:df:
02:76:39:e9:6d:a7:ad:5f:d7:f1:f0:40:4e:fc:b4:
58:ab:b6:fe:9d:81:b2:11:2e:91:36:af:ab:91:01:
0c:ca:a6:8d:03:82:1f:8a:97:da:16:32:00:c8:da:
29:44:a0:41:d0:8b:93:cd:b6:20:6e:9a:71:67:bc:
39:28:a1:fb:0f:c5:ef:07:1a:a0:c7:a1:ad:98:2f:
70:58:65:7d:b0:f0:05:c1:e1:75:ed:1c:a2:ff:78:
44:95:54:68:45:53:ba:5f:24:31:69:db:ce:3d:3e:
e5:ed:84:be:7d:54:cb:bc:1c:43:b6:95:44:3f:7d:
03:77:b3:e1:f6:a2:d4:c6:f7:29:23:a1:f7:6d:af:
57:ac:9b:5e:cd:90:9a:7e:a3:df:2e:ed:4c:8f:a9:
9e:5b:55:e2:d1:71:ab:c0:6a:fa:2d:36:c3:45:a0:
71:c6:a9:30:a1:17:78:20:95:15:74:cc:cc:a8:af:
05:37:37:90:02:72:66:30:16:a6:15:4b:95:b3:d4:
68:7e:d8:8d:d3:25:90:65:db:55:f7:7d:6f:9d:ec:
f1:78:31:2b:77:a5:e8:c3:02:f5:74:65:e0:94:be:
45:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:51:B3:80:A6:67:8A:C1:35:7E:D7:D6:E3:1F:A0:8E:0B:0B:1D:C1
X509v3 Authority Key Identifier:
keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:68:37:03:24:18:75:51:07:90:fb:fe:1a:7f:5b:e8:42:61:
cb:04:c7:2a:5d:d0:7d:e6:dd:3f:1a:1f:55:3f:5e:8b:75:46:
de:cb:01:ba:15:dd:83:51:31:a3:ad:ea:8a:10:23:22:c4:2d:
00:e3:d4:ff:f8:6b:c9:a8:0d:20:c7:dd:4f:82:7d:55:f2:d1:
ff:6f:6d:a2:7d:d4:0b:82:c0:9c:99:9a:26:51:a9:9f:2e:d7:
62:ab:57:11:fb:6a:ba:24:61:40:83:cd:f3:1c:8f:70:7e:48:
d5:e7:05:79:12:7e:51:cd:40:39:07:2e:14:30:02:32:46:12:
af:d9:e1:7d:db:d3:79:fa:0e:a1:86:00:cf:1c:2f:26:00:56:
fc:79:d8:7a:c9:4a:37:c2:64:a1:1f:38:ef:97:f1:72:6b:b5:
e3:05:2c:f8:ca:f4:77:c4:4b:cb:04:b9:1f:7c:61:3f:28:fa:
2c:3a:d1:b2:58:d4:ba:02:52:1a:14:8b:9f:26:6a:57:af:63:
43:35:af:63:19:85:95:90:b6:5b:41:b1:17:0b:f4:4a:af:3b:
0f:36:62:df:bb:59:2c:d0:75:92:18:7f:85:52:ee:8d:25:e1:
ce:d5:4a:b7:5e:ff:52:d9:e4:d4:35:7f:b8:35:72:f4:e6:92:
db:28:5a:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1
RUVFRTBFNzgwHhcNMjYwODA2MTkyMDA1WhcNMjYwODEzMTkyMDA1WjAYMRYwFAYD
VQQDEw02YTc0ZGU2NS1lY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAivqme7o1WTZJGJd3xItWCBID74j9lUY50CV5r98CdjnpbaetX9fx8EBO/LRY
q7b+nYGyES6RNq+rkQEMyqaNA4IfipfaFjIAyNopRKBB0IuTzbYgbppxZ7w5KKH7
D8XvBxqgx6GtmC9wWGV9sPAFweF17Ryi/3hElVRoRVO6XyQxadvOPT7l7YS+fVTL
vBxDtpVEP30Dd7Ph9qLUxvcpI6H3ba9XrJtezZCafqPfLu1Mj6meW1Xi0XGrwGr6
LTbDRaBxxqkwoRd4IJUVdMzMqK8FNzeQAnJmMBamFUuVs9RoftiN0yWQZdtV931v
nezxeDErd6XowwL1dGXglL5FRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPxRs4Cm
Z4rBNX7X1uMfoI4LCx3BMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG
MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE
bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l
eTJhRHlVM0c3czFlN3VEbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsWg3AyQYdVEHkPv+Gn9b6EJhywTHKl3QfebdPxofVT9ei3VG3ssBuhXdg1Ex
o63qihAjIsQtAOPU//hryagNIMfdT4J9VfLR/29ton3UC4LAnJmaJlGpny7XYqtX
EftquiRhQIPN8xyPcH5I1ecFeRJ+Uc1AOQcuFDACMkYSr9nhfdvTefoOoYYAzxwv
JgBW/HnYeslKN8JkoR8475fxcmu14wUs+Mr0d8RLywS5H3xhPyj6LDrRsljUugJS
GhSLnyZqV69jQzWvYxmFlZC2W0GxFwv0Sq87DzZi37tZLNB1khh/hVLujSXhztVK
t17/Utnk1DV/uDVy9OaS2yha6g==
-----END CERTIFICATE-----
Generated at Thu Aug 6 21:05:01 2026 by rpki-client