
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
File: G9xHZ6bV6-C--lyhI1MI915IiRo.mft (raw, json)
Hash identifier: pypLJshakrtQjNPpW4XQLn6pOKBp+ZilKmhkQTNNN6U=
Subject key identifier: DC:DA:69:6A:24:EE:FF:77:CC:3A:63:7B:DC:88:C9:58:9E:B9:06:A2
Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
Certificate issuer: /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Certificate serial: 1C65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
Manifest number: 1C50
Signing time: Sun 24 May 2026 16:10:23 +0000
Manifest this update: Sun 24 May 2026 16:10:23 +0000
Manifest next update: Sun 31 May 2026 16:10:23 +0000
Files and hashes: 1: G9xHZ6bV6-C--lyhI1MI915IiRo.crl (hash: oeZzsb5cmspdzgpWBz5pB/D+PU3PXrmVgkUpFvNrs6M=)
2: A607F8965F4611EE80BD8D2DC4F9AE02.roa (hash: fv4oRIQ4Gxh8CoHiTKL/BcGQRnYE0nj0QiSPtWSrjAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 31 May 2026 16:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7269 (0x1c65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149C2D, serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Validity
Not Before: May 24 16:10:23 2026 GMT
Not After : May 31 16:10:23 2026 GMT
Subject: CN=6a1322ef-5b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:4c:f9:28:37:a7:f0:46:7c:b2:51:1f:76:
e4:9f:2e:ad:13:53:d1:0d:22:d7:3f:1e:f5:d7:e9:
c2:aa:21:f3:c3:4b:ff:ea:b4:ed:fb:51:dd:bd:2b:
6e:11:58:dc:d8:ad:d8:98:a3:5a:8b:77:7b:36:f3:
0b:80:ca:83:71:51:01:84:db:c5:5d:2e:13:5e:d7:
69:fd:7d:0f:1d:9c:a4:4f:73:e0:8e:1a:cc:63:13:
48:69:aa:ec:50:db:37:2a:bb:db:7e:5a:35:42:a1:
3d:66:13:a9:f0:50:52:f0:c1:7a:87:9d:4f:c9:dd:
ec:c5:03:9c:f4:31:54:02:9b:e0:73:07:31:2b:f5:
a9:63:54:e9:4c:d8:29:97:64:6c:54:0b:c2:6c:f8:
e4:29:8a:1e:18:f9:ea:d3:4b:3d:67:1f:a9:c6:94:
12:b6:aa:73:a2:03:40:70:ea:80:5c:cc:2c:65:e2:
c6:98:26:83:90:14:10:9f:3f:40:67:9b:3a:8b:b0:
07:1c:a7:92:fb:c0:7d:15:2f:8e:3e:24:43:c1:ab:
56:ac:9f:a1:8b:60:1b:4c:47:8e:29:d1:8d:36:8f:
51:e1:1d:32:05:cd:e0:be:3e:51:81:9e:e2:0d:3f:
56:2c:bd:0d:03:66:dc:28:8f:1c:dc:10:56:85:5c:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DA:69:6A:24:EE:FF:77:CC:3A:63:7B:DC:88:C9:58:9E:B9:06:A2
X509v3 Authority Key Identifier:
keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:9f:2b:e9:be:12:b7:c1:fd:30:00:99:ed:72:c5:3c:9a:ba:
22:6e:22:1d:a1:10:50:40:16:b7:c0:8f:b5:de:f7:ff:00:70:
84:fd:1f:5f:a7:d1:75:3a:15:26:7d:49:ae:25:3e:74:d1:df:
49:70:71:70:a0:ce:d1:11:3c:00:58:9f:e4:a3:89:a2:49:8f:
28:d4:40:d5:d8:ff:f9:6c:4f:43:b7:77:7b:39:0b:10:d4:71:
62:fe:fb:46:82:91:d1:1e:8c:83:58:04:08:92:21:d4:3a:d7:
72:eb:61:e2:68:3c:c3:d7:96:4d:89:d4:56:3a:f9:72:eb:b8:
0e:16:ae:44:45:d2:ff:64:c2:92:fd:79:4e:1c:9a:3d:ce:8a:
06:96:c7:5b:b3:87:58:43:5c:0e:ce:7a:3f:86:91:d5:a3:7f:
e6:91:0d:4e:fe:1e:df:51:c6:68:11:12:c0:fc:07:f9:30:20:
4d:ee:f1:a5:f8:0a:7c:f1:e2:25:33:42:ac:89:b2:c6:03:cc:
c4:0a:d3:18:2b:e4:9e:b1:a5:f8:78:0c:7d:66:2f:5d:4b:ff:
a2:ea:3e:e5:48:bf:d0:fa:cb:4b:3d:1a:c8:b3:3f:dd:dc:a0:
74:94:ab:23:9f:76:ee:31:5c:2a:36:c2:cd:34:53:d8:e1:3a:
ce:20:34:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 07:58:13 2026 by rpki-client