
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
File: G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json)
Hash identifier: 6Lr1Sl5In2S4VscZkVXl8zZegJsVyJbXFb45VxTGpZI=
Subject key identifier: 36:45:C0:A2:08:3F:3E:42:E6:D8:57:75:6A:95:5E:97:A8:67:3E:0D
Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
Certificate issuer: /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
Manifest number: C1
Signing time: Mon 13 Jul 2026 07:12:38 +0000
Manifest this update: Mon 13 Jul 2026 07:12:38 +0000
Manifest next update: Mon 20 Jul 2026 07:12:38 +0000
Files and hashes: 1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: zvP13PA984aXfME0LzjqomhQA7Bi2Cs1XmomwpSiVXk=)
2: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: 0fTr8Ky2ks1lTkMxL9IKSz1oQnIZMQcWNBUaHcz+NfY=)
3: 6D18C6E88FF311F0B3309340C4F9AE02.roa (hash: lELwYfCJ8QLJoPWBTmeafMYkQU/nJlsMXebmLAieoRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 07:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Validity
Not Before: Jul 13 07:12:38 2026 GMT
Not After : Jul 20 07:12:38 2026 GMT
Subject: CN=6a548fe6-a58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4b:c8:54:fb:36:6a:96:5f:35:6d:44:62:66:
8c:f7:5a:c4:54:e8:34:a5:16:aa:93:4c:d8:ef:77:
41:45:4c:bd:75:85:12:17:9a:d8:4f:7b:2b:f3:4b:
08:dc:27:06:44:d5:92:43:3a:76:34:a7:df:d2:1d:
c8:b8:82:65:b7:96:ee:c9:d1:b8:33:b2:1a:fe:50:
d8:7b:bb:45:d4:74:51:f1:20:5e:6a:8c:1c:86:1d:
f2:84:83:ca:1e:c9:50:dc:fc:98:99:c0:6d:94:be:
ee:ed:75:7f:65:56:d6:65:3f:b6:8f:06:b4:6b:a1:
f1:3f:df:7b:c3:b4:44:fa:35:93:27:db:9e:c3:d0:
63:fd:bb:b0:c7:36:5e:ec:69:e5:6b:c7:f5:cc:0a:
db:0e:0e:ab:1b:f8:46:36:98:59:0d:68:18:58:eb:
49:06:3d:10:46:a4:f3:63:e5:87:54:dd:40:d6:d1:
2a:e6:ae:e9:ff:15:9e:f1:70:08:6e:a0:93:8a:1a:
1f:ba:aa:11:5f:2e:ca:9a:b3:48:20:ae:e4:46:e5:
47:bd:d1:88:e8:28:8c:d4:7c:45:fa:04:35:ba:27:
f2:ed:0a:b2:e8:20:27:ca:ea:ef:f4:46:8c:cd:6f:
e8:ae:b3:4b:44:a2:a0:3d:42:39:69:29:f3:c5:d6:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:45:C0:A2:08:3F:3E:42:E6:D8:57:75:6A:95:5E:97:A8:67:3E:0D
X509v3 Authority Key Identifier:
keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d5:ca:ef:0f:1f:40:16:24:21:c2:61:a5:b1:6a:3f:9b:1b:
bb:6c:a8:bc:da:73:1d:4c:58:eb:0d:c0:53:90:df:0e:ca:51:
d9:0f:bd:47:35:75:25:6c:eb:30:0b:f1:0c:9b:12:87:d3:b1:
13:84:77:dd:40:f1:82:29:2b:fc:a4:d3:cb:a2:2d:5e:72:8f:
85:d2:cb:31:28:8c:bf:93:37:59:5d:08:99:fc:24:f4:d5:82:
08:59:e9:75:2a:5d:35:7e:ff:c9:34:f6:8e:2c:25:7e:47:bf:
58:fb:b0:28:c1:5b:92:4d:b7:fd:51:9a:c6:1a:cd:22:0f:a5:
81:a5:fe:92:88:dd:57:a0:d1:c3:d7:74:ee:76:5a:69:12:81:
17:c5:b1:48:4e:0a:0a:bd:0d:cb:85:bb:b8:1e:69:fa:f1:c5:
d6:21:73:f4:be:4b:4c:a3:cd:c2:d9:2a:6f:6b:60:0d:94:df:
7b:25:20:93:8f:21:9a:41:f1:66:7f:aa:8b:d0:6a:20:da:cd:
74:f5:6d:3e:11:47:0a:aa:f1:e5:5f:36:0b:57:fc:1f:31:62:
e3:a0:79:38:07:d3:4c:c6:1b:34:ac:a8:fe:10:3c:a7:37:80:
62:c4:b4:ae:09:ec:80:0f:d9:0c:12:02:a1:9a:fe:02:63:42:
17:cf:97:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURGNTYxMTAvBgNVBAUTKDFCRDYzMzZCOTc4NjhDMkY1NEVCM0Q5NDc4RDM5RTQx
NzMxRDQ0ODcwHhcNMjYwNzEzMDcxMjM4WhcNMjYwNzIwMDcxMjM4WjAYMRYwFAYD
VQQDEw02YTU0OGZlNi1hNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7EvIVPs2apZfNW1EYmaM91rEVOg0pRaqk0zY73dBRUy9dYUSF5rYT3sr80sI
3CcGRNWSQzp2NKff0h3IuIJlt5buydG4M7Ia/lDYe7tF1HRR8SBeaowchh3yhIPK
HslQ3PyYmcBtlL7u7XV/ZVbWZT+2jwa0a6HxP997w7RE+jWTJ9uew9Bj/buwxzZe
7Gnla8f1zArbDg6rG/hGNphZDWgYWOtJBj0QRqTzY+WHVN1A1tEq5q7p/xWe8XAI
bqCTihofuqoRXy7KmrNIIK7kRuVHvdGI6CiM1HxF+gQ1uify7Qqy6CAnyurv9EaM
zW/orrNLRKKgPUI5aSnzxdaHJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZFwKII
Pz5C5thXdWqVXpeoZz4NMB8GA1UdIwQYMBaAFBvWM2uXhowvVOs9lHjTnkFzHUSH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY1Ni82RDVFNkE1NDVC
RDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9HOVl6YTVlR2pDOVU2ejJVZU5PZVFYTWRS
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0c5WXphNWVHakM5VTZ6MlVlTk9lUVhNZFJJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REY1Ni82RDVFNkE1NDVCRDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9HOVl6YTVlR2pD
OVU2ejJVZU5PZVFYTWRSSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAudXK7w8fQBYkIcJhpbFqP5sbu2yovNpzHUxY6w3AU5DfDspR2Q+9RzV1JWzr
MAvxDJsSh9OxE4R33UDxgikr/KTTy6ItXnKPhdLLMSiMv5M3WV0Imfwk9NWCCFnp
dSpdNX7/yTT2jiwlfke/WPuwKMFbkk23/VGaxhrNIg+lgaX+kojdV6DRw9d07nZa
aRKBF8WxSE4KCr0Ny4W7uB5p+vHF1iFz9L5LTKPNwtkqb2tgDZTfeyUgk48hmkHx
Zn+qi9BqINrNdPVtPhFHCqrx5V82C1f8HzFi46B5OAfTTMYbNKyo/hA8pzeAYsS0
rgnsgA/ZDBICoZr+AmNCF8+XeA==
-----END CERTIFICATE-----
Generated at Wed Jul 15 00:18:34 2026 by rpki-client