
$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
File: G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft (raw, json)
Hash identifier: AW9yyBI/DdOqcTGUKqTETQn8sDlzsxebcxJUM/aTW+w=
Subject key identifier: C9:31:3D:4D:AC:F1:78:23:E3:6E:AB:B0:F5:B6:A1:36:C2:66:6B:F2
Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
Certificate issuer: /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Certificate serial: 09ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
Manifest number: 1A72
Signing time: Wed 20 May 2026 17:21:09 +0000
Manifest this update: Wed 20 May 2026 17:21:08 +0000
Manifest next update: Wed 27 May 2026 17:21:08 +0000
Files and hashes: 1: G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl (hash: eXnDXxSiAWSXoQJhwJNih1Vz6l95TjYbSF3Jr5b29Dk=)
2: F70F5E7A505E11ED9947920DC4F9AE02.roa (hash: o3juqhlkzvoSTkKnkj2B9rqpg4vlEounEHggkPD3cB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2541 (0x9ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Validity
Not Before: May 20 17:21:08 2026 GMT
Not After : May 27 17:21:08 2026 GMT
Subject: CN=6a0ded85-a291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:0a:50:cc:aa:f2:bc:2a:17:e6:28:66:f7:
31:a8:36:84:f0:64:8c:27:a2:0c:7e:05:88:04:fe:
d7:bd:1d:4b:0d:51:6d:59:0c:ee:5b:4b:b0:a7:05:
e9:03:8b:cb:5f:c9:c2:7f:bb:ad:4b:ec:58:57:30:
83:96:ff:a0:53:30:cc:05:d2:5d:bd:3e:5d:bb:41:
91:c1:dd:5a:91:18:97:0e:23:94:3e:f1:27:a4:67:
d6:fb:cf:2f:d0:fa:c3:ce:42:59:6e:ca:ce:5c:5f:
72:85:e4:bf:fe:4f:ff:f9:ce:3e:b2:5c:a5:71:9b:
f5:69:1c:a0:cf:08:8c:6d:ea:16:02:3f:c8:8d:11:
22:b7:7d:c6:c3:ee:91:48:f2:de:5d:f4:75:19:32:
a0:51:a6:9e:30:77:34:00:ec:7c:e1:ff:b4:3d:07:
37:d0:67:ef:71:48:74:5d:56:fa:3f:10:30:79:96:
c6:15:26:21:92:63:37:5f:65:40:96:6b:8a:02:49:
02:66:b0:0f:7b:46:96:0d:2f:d2:2a:42:4f:4e:f8:
c1:1c:e2:68:0d:02:23:91:54:74:0f:91:1e:b9:68:
a8:a3:05:8f:7a:9f:aa:3f:50:ea:28:ed:1d:19:00:
22:a8:9c:00:5b:3e:7b:a6:78:33:c7:28:a8:b8:85:
48:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:31:3D:4D:AC:F1:78:23:E3:6E:AB:B0:F5:B6:A1:36:C2:66:6B:F2
X509v3 Authority Key Identifier:
keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:05:41:83:70:de:6f:f9:60:8b:b2:5a:61:8f:b0:71:4c:41:
5c:0b:6d:01:58:de:96:d4:f8:de:33:b8:27:6b:78:63:c1:e0:
3b:cf:fc:7d:56:62:50:16:71:13:84:67:67:70:57:c7:de:40:
86:27:95:f1:44:39:00:24:61:42:98:66:34:16:fe:2b:38:97:
b5:f2:8b:08:58:23:5e:6a:2c:5e:cf:69:a9:39:20:b9:f1:38:
12:0c:3e:01:b3:6b:d1:00:86:b2:f9:71:ea:49:42:b8:b3:29:
27:16:86:13:dc:a5:69:95:90:76:de:36:d5:7c:e2:0b:c8:6f:
e7:67:a3:e1:6e:68:b5:68:93:44:8f:d6:f6:5e:86:08:89:f2:
68:c8:64:ac:e4:6d:6a:2c:8f:5f:79:71:d3:04:11:65:a8:12:
e9:63:d9:5d:1b:0e:d9:a4:08:bf:7b:40:13:4a:4f:04:ba:42:
f7:b7:42:4c:22:91:03:bc:d6:b1:5b:16:ae:9f:63:24:50:73:
8d:00:ef:9e:d9:14:02:88:dd:ba:1f:83:3c:84:aa:45:62:01:
50:03:9f:1e:bb:45:a9:d9:7f:e0:42:63:92:17:a3:14:f3:71:
25:e2:5a:17:57:e7:8a:21:e0:f4:bc:c4:07:e4:2e:29:6a:97:
55:e6:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:58 2026 by rpki-client