
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier: zIzvIXTooZ5u1kDgyirTbfbMn82bgiVub6i+dkBhXPM=
Subject key identifier: AF:69:1E:A5:66:26:1D:0E:67:D2:D1:30:78:B6:7D:91:C0:21:26:A6
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial: 09D7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number: 09D7
Signing time: Fri 04 Sep 2026 19:45:43 +0000
Manifest this update: Fri 04 Sep 2026 19:45:43 +0000
Manifest next update: Fri 11 Sep 2026 19:45:43 +0000
Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: cty/SqnQIdiSWQHLkVfRKUUomf/6XQLKf3SQ+1wpw/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2519 (0x9d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Validity
Not Before: Sep 4 19:45:43 2026 GMT
Not After : Sep 11 19:45:43 2026 GMT
Subject: CN=6a9b1fe7-42a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:41:29:82:05:52:0d:a5:18:6b:f8:07:3e:
db:cc:a7:97:c0:0f:59:65:56:27:e6:67:f3:3c:ff:
20:3f:d1:29:72:3a:07:d5:e6:09:77:26:8b:50:de:
4d:fc:08:bc:49:5b:d5:f4:41:d1:5a:19:23:0d:08:
a4:22:b8:cf:b9:73:85:85:a0:9b:75:49:ae:61:ac:
cc:5a:6d:e4:01:b5:9d:06:3f:b3:03:8d:b4:f1:75:
a2:6e:1d:c7:5d:ec:55:bc:31:0e:58:c4:66:42:59:
f1:94:d7:fd:02:62:4e:bd:29:46:ab:45:f4:f8:5e:
c9:b2:26:79:87:da:3a:34:bb:5e:76:57:19:55:ba:
57:31:85:35:ac:ae:44:6f:e1:d0:b9:be:7e:28:74:
01:19:26:f6:d4:f9:09:cc:25:8f:49:72:aa:e2:f5:
f0:25:45:38:5a:dc:d5:27:8b:dd:90:99:56:96:6d:
86:8f:b5:1f:18:54:91:da:ea:2d:9f:4e:91:b3:50:
34:36:31:2d:0e:4a:21:ac:42:ac:d9:7f:6d:7e:f4:
b1:69:f0:9d:6e:6e:a1:31:0e:d6:4e:06:94:78:a7:
73:9a:f9:ce:e5:c9:9c:41:cc:a1:02:f7:33:a1:ad:
59:09:42:7e:0f:71:44:c0:5b:c9:90:66:e6:5c:2f:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:69:1E:A5:66:26:1D:0E:67:D2:D1:30:78:B6:7D:91:C0:21:26:A6
X509v3 Authority Key Identifier:
keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:53:fd:1f:de:28:31:2e:f4:36:98:17:6f:a7:c2:6a:38:d9:
d9:65:5b:39:2c:77:a9:7c:4f:2c:d7:e8:0f:4e:72:05:a5:6d:
e8:3d:75:68:55:7a:81:1f:86:9b:18:1f:db:45:2c:4d:e1:cf:
82:ce:37:66:92:49:ec:63:12:71:ca:df:f1:0a:10:96:d5:bc:
1b:98:e9:bc:d2:ea:ab:d8:15:35:39:22:a8:e0:d2:82:7a:0f:
c8:cc:1e:cf:55:bc:36:8b:81:8e:ab:48:73:89:63:c1:0c:e3:
6a:0d:4d:bc:64:66:51:06:59:82:c6:b8:46:ee:a5:64:52:f9:
52:8b:75:8a:40:b2:0b:8f:0b:2a:31:cd:26:cc:a1:c3:cd:19:
9c:ee:41:88:4a:39:62:d4:91:8f:19:74:25:c4:7e:c7:6e:d3:
31:dc:00:a8:4e:51:c1:b2:81:26:4d:00:a0:0f:17:b2:46:56:
47:2a:80:99:b3:33:43:fc:b7:8a:4d:89:40:2f:b2:0d:a1:4e:
8a:23:ae:56:6b:94:51:3e:93:f1:49:34:44:f5:f3:d9:18:f3:
1f:41:80:6a:54:08:73:4e:7f:1f:c7:cc:27:4c:1a:1c:cf:85:
4f:70:22:f0:ee:e2:25:d1:2e:a4:de:ac:ad:41:8e:97:64:39:
63:ed:dc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:07:28 2026 by rpki-client