
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json)
Hash identifier: VChJN9TVUheeWr0Rycf7T7YxmbybHHLlbWUjN4kBv/Y=
Subject key identifier: 81:26:92:0B:F2:E0:E4:36:20:4D:55:1D:3D:8C:81:00:4B:A7:8C:48
Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27
Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
Certificate serial: 133D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
Manifest number: 1C28
Signing time: Sun 04 Oct 2026 17:01:48 +0000
Manifest this update: Sun 04 Oct 2026 17:01:48 +0000
Manifest next update: Sun 11 Oct 2026 17:01:48 +0000
Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: v7xnav99Nz6qm3qksf+HkxtXC1jZ+0xpvq64HgHpnd4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl
rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4925 (0x133d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
Validity
Not Before: Oct 4 17:01:48 2026 GMT
Not After : Oct 11 17:01:48 2026 GMT
Subject: CN=6ac2867c-7857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:29:64:46:41:7b:3f:fa:8d:9c:33:b3:06:
8d:7a:7b:44:8c:99:fc:1c:6c:9e:6c:c0:3b:12:b9:
d7:b1:42:8f:44:ea:0b:dd:b3:70:5e:02:82:8d:f3:
e8:52:ca:79:2b:0f:7c:f3:47:4d:13:d5:65:04:69:
82:c7:54:b5:2d:07:8a:db:6d:04:b7:85:eb:25:53:
66:8d:93:70:e6:10:6c:8f:54:32:d1:f0:2d:38:85:
f1:bd:c1:ad:6e:7f:ca:f7:e8:85:9e:fd:55:37:b6:
81:a0:98:ba:d1:e6:0f:0f:90:b1:8e:83:43:4b:4b:
ae:97:10:f2:86:f1:a1:c8:68:10:70:ff:cd:32:3d:
94:a5:24:ac:5d:9c:de:4f:56:ad:42:89:19:ec:4d:
1d:d2:f4:cc:d5:c2:2a:0c:62:59:68:cd:7d:9e:09:
e1:6a:0b:d6:dc:3d:1e:ab:c6:79:70:93:a3:74:42:
cf:ca:6d:48:39:e8:e6:84:47:5c:a1:87:23:d9:1f:
83:9e:55:74:a2:2e:95:96:e2:cb:8d:eb:17:cc:fa:
96:e2:04:07:c9:9f:55:e7:a2:90:d1:76:ff:b4:a6:
cd:62:0e:dd:b8:9a:9f:15:5a:38:f5:1e:71:a6:60:
6d:3d:ee:5b:15:d0:38:78:f3:0e:6e:72:03:48:19:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:26:92:0B:F2:E0:E4:36:20:4D:55:1D:3D:8C:81:00:4B:A7:8C:48
X509v3 Authority Key Identifier:
keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d5:73:4a:95:2f:c2:e5:1f:a7:5f:44:b9:3d:da:cb:1a:a6:
f0:73:19:55:01:8f:4a:f3:e4:98:c3:43:8c:8a:73:9a:17:a0:
72:84:b7:eb:3f:5d:b0:45:96:a8:08:e3:2f:66:36:3f:e7:f0:
3b:53:f7:da:31:22:d8:2e:83:f3:a4:a9:38:ca:35:02:db:9e:
bc:0f:0d:10:7e:db:80:0d:38:fa:f5:24:e9:22:88:90:54:61:
20:b8:51:82:fa:bc:5c:dc:b4:e7:1a:f7:d0:f2:d6:90:fb:c6:
43:2a:c5:68:61:16:ce:d7:e5:c8:89:c5:c5:de:ab:53:0b:35:
1a:34:7b:f1:d9:5f:14:42:6b:8e:17:12:18:6e:92:3a:e7:07:
b6:d3:d9:b8:1d:a9:59:82:c4:ed:6d:db:0c:a9:a0:c5:07:62:
1e:09:ab:4a:85:73:3b:e2:01:4a:bb:c4:5b:5d:8d:1d:4f:cb:
cd:51:f6:7d:90:ae:ec:07:da:8d:0a:49:9b:c2:5d:5c:79:d0:
8a:c1:79:23:7c:8b:7b:46:72:e3:b3:bb:88:72:16:6d:97:90:
41:31:02:49:24:23:fc:40:6e:10:a0:f2:e7:a7:0b:15:f4:36:
f2:6a:20:5e:b3:24:17:8e:60:79:8a:80:dc:7e:79:2c:46:30:
67:14:7f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:28:05 2026 by rpki-client