
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
File: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json)
Hash identifier: ppfq/N+8I0x/QzL8VvFtXHCvcQtY10dqfFe9sMtLcyE=
Subject key identifier: BA:2A:7F:DA:A6:B2:A6:13:CA:6D:51:74:DC:CC:4E:75:29:5A:6C:71
Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90
Certificate issuer: /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
Certificate serial: 0CA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
Manifest number: 0C99
Signing time: Tue 18 Aug 2026 18:52:23 +0000
Manifest this update: Tue 18 Aug 2026 18:52:22 +0000
Manifest next update: Tue 25 Aug 2026 18:52:22 +0000
Files and hashes: 1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: zy6Q2ao+EqrdbzADct47N8m4z93993Wwed+6nTKbmfA=)
2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: rmYnuMOnsWqJ1EMxIYJ3/6l6BUhvQSL5XzWmFrIJCBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl
rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3234 (0xca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
Validity
Not Before: Aug 18 18:52:22 2026 GMT
Not After : Aug 25 18:52:22 2026 GMT
Subject: CN=6a84a9e7-0486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:c6:91:1b:fb:39:db:37:e4:8f:02:42:03:
29:46:59:44:b8:27:cf:2d:88:33:2f:02:97:d6:77:
82:1a:82:79:6c:6e:52:3b:2f:1a:86:4b:8c:0d:19:
ba:61:fe:ea:e5:d2:50:14:37:7d:e9:42:0a:b3:33:
9f:b3:d3:8e:11:81:54:f7:5d:8e:ff:ec:e9:a7:df:
38:eb:06:c6:6e:80:bc:57:da:b4:f2:f2:94:53:5a:
93:2b:4a:dc:9d:c1:f3:0e:b4:c8:83:27:aa:2d:6d:
0c:9f:94:36:0b:56:2d:2e:57:c7:90:23:05:3c:75:
58:0d:03:80:00:99:91:c5:cc:99:60:cf:16:bc:05:
26:a6:98:93:53:9a:20:d2:48:c5:3a:44:8e:22:10:
2a:67:b2:39:ab:12:01:44:16:c4:59:f0:b5:91:e8:
45:a0:0f:a5:01:17:9d:8a:2d:8f:f8:12:8a:c4:f9:
ed:17:83:f3:58:ed:34:83:c2:6c:1f:6d:cc:77:4b:
81:ad:71:ff:73:74:24:e2:90:a8:f8:76:1b:bd:08:
98:00:d1:1b:91:87:9c:99:f1:4f:6c:df:67:b7:fb:
3f:4a:c5:6a:69:2e:df:59:d5:5d:62:c0:d6:7b:5f:
43:b5:e4:ac:57:35:fd:ad:17:10:f1:dd:8a:02:a0:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2A:7F:DA:A6:B2:A6:13:CA:6D:51:74:DC:CC:4E:75:29:5A:6C:71
X509v3 Authority Key Identifier:
keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:d6:1f:6c:18:4f:2b:50:d7:7d:d0:02:9d:4b:24:b5:21:19:
ed:4b:e3:1c:1e:00:95:0f:7b:78:a6:9f:a8:08:ef:bb:7c:77:
7c:53:60:1a:d2:ea:8e:d3:24:99:6b:ff:d4:33:8e:eb:20:17:
cb:ca:43:cf:4b:2e:f4:0c:d6:99:3f:34:de:8e:d3:6c:d8:a9:
d7:3e:3b:9c:1d:68:20:54:0d:8b:19:f8:e8:75:3a:44:a1:c5:
40:a5:9e:a9:22:48:0f:88:04:f8:ff:5a:0d:51:63:0a:42:99:
f5:72:26:d2:7f:13:b6:77:97:55:87:e1:d9:33:e1:4a:fc:4c:
b9:21:ac:f6:9e:0c:47:01:bc:93:fe:79:74:4f:82:c1:e8:1b:
3a:80:2a:44:cc:45:60:9c:1b:e1:7f:3a:d5:2c:3a:06:9b:c7:
9f:b8:8c:14:1c:82:69:f9:61:1c:a1:bc:9f:7a:7f:82:d3:cd:
b3:bf:97:3b:19:cc:46:0d:16:61:19:a2:7e:ab:3e:22:d4:f3:
32:3c:cc:59:b6:8b:ac:3d:3a:a6:1a:73:dd:83:80:98:31:c8:
b5:c6:88:fc:d9:26:dd:1d:2c:88:62:22:75:08:46:be:5e:38:
9b:e1:67:dc:93:9b:d8:df:8b:57:85:26:c4:63:90:2d:7d:9d:
d6:db:04:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBBNjkxMTAvBgNVBAUTKDFCNkUzMjkyQzgzNTY1NEU0OTE0OTJFNTU4NENGOTkz
RjA1QkQ5OTAwHhcNMjYwODE4MTg1MjIyWhcNMjYwODI1MTg1MjIyWjAYMRYwFAYD
VQQDEw02YTg0YTllNy0wNDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo5PGkRv7Ods35I8CQgMpRllEuCfPLYgzLwKX1neCGoJ5bG5SOy8ahkuMDRm6
Yf7q5dJQFDd96UIKszOfs9OOEYFU912O/+zpp9846wbGboC8V9q08vKUU1qTK0rc
ncHzDrTIgyeqLW0Mn5Q2C1YtLlfHkCMFPHVYDQOAAJmRxcyZYM8WvAUmppiTU5og
0kjFOkSOIhAqZ7I5qxIBRBbEWfC1kehFoA+lARedii2P+BKKxPntF4PzWO00g8Js
H23Md0uBrXH/c3Qk4pCo+HYbvQiYANEbkYecmfFPbN9nt/s/SsVqaS7fWdVdYsDW
e19DteSsVzX9rRcQ8d2KAqCT3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLoqf9qm
sqYTym1RdNzMTnUpWmxxMB8GA1UdIwQYMBaAFBtuMpLINWVOSRSS5VhM+ZPwW9mQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEE2OS9FM0FCRDA0MjIx
NDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpVNUpGSkxsV0V6NWtfQmIy
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cyNHlrc2cxWlU1SkZKTGxXRXo1a19CYjJaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEE2OS9FM0FCRDA0MjIxNDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpV
NUpGSkxsV0V6NWtfQmIyWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAINYfbBhPK1DXfdACnUsktSEZ7UvjHB4AlQ97eKafqAjvu3x3fFNgGtLqjtMk
mWv/1DOO6yAXy8pDz0su9AzWmT803o7TbNip1z47nB1oIFQNixn46HU6RKHFQKWe
qSJID4gE+P9aDVFjCkKZ9XIm0n8TtneXVYfh2TPhSvxMuSGs9p4MRwG8k/55dE+C
wegbOoAqRMxFYJwb4X861Sw6BpvHn7iMFByCaflhHKG8n3p/gtPNs7+XOxnMRg0W
YRmifqs+ItTzMjzMWbaLrD06phpz3YOAmDHItcaI/Nkm3R0siGIidQhGvl44m+Fn
3JOb2N+LV4UmxGOQLX2d1tsEIA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:02 2026 by rpki-client