
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
File: G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json)
Hash identifier: fwMKRgsVsiuShDrkQG1pU5YUf2803lah0uUS6VmQ/9U=
Subject key identifier: E0:D1:62:6F:34:A5:C3:E7:4E:B2:93:01:48:71:37:9D:CA:AA:80:9F
Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
Certificate issuer: /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
Manifest number: 35
Signing time: Tue 03 Mar 2026 08:15:06 +0000
Manifest this update: Tue 03 Mar 2026 08:15:06 +0000
Manifest next update: Tue 10 Mar 2026 08:15:06 +0000
Files and hashes: 1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: cmmdeU9SZ14U9t5Sfv2JcHxE03VOZPzu84+Jb+pO7Mg=)
2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: IhKjrimtkW5GZgmr5nVxZh5rfh7SBgszAIZRuKiFWrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Validity
Not Before: Mar 3 08:15:06 2026 GMT
Not After : Mar 10 08:15:06 2026 GMT
Subject: CN=69a6988a-84fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:40:64:8a:cf:21:11:34:a8:05:20:f4:86:
7f:d1:fe:04:35:9c:e3:27:f2:98:d4:d4:6e:ab:37:
ae:e5:bb:81:4a:7c:0d:86:6d:97:d0:6d:14:56:4d:
c6:51:02:7b:fe:f4:b8:de:cd:ca:3f:73:7c:7e:a9:
d0:ca:94:a1:ef:dd:fa:d0:d7:ab:a3:e7:e2:15:a9:
23:71:38:71:8c:0e:f4:8d:75:c6:21:2e:b4:d4:2a:
3b:9d:1e:ac:a5:40:d2:5a:e6:02:96:a9:e5:dc:62:
e8:b6:d4:38:63:ab:1b:86:ae:3c:6c:7d:c2:12:0e:
02:81:4e:d2:d4:ab:d0:88:1e:bf:ef:c9:d6:bb:90:
4d:c0:68:11:98:7f:15:d5:d0:aa:36:02:f0:99:94:
68:f3:92:43:ee:f3:30:a6:92:0d:de:b6:ba:e5:cc:
da:7c:ab:a5:35:70:33:21:49:39:74:69:42:c1:c6:
22:e4:18:2b:f0:77:46:98:43:f3:ff:d5:7c:11:ca:
a7:f2:bc:0b:46:61:63:2f:87:4f:74:79:0a:6f:d2:
92:ad:76:c2:89:ad:93:1d:0d:28:9c:ad:df:66:b1:
bd:35:ef:44:dc:fe:80:f7:d7:af:89:41:2f:9f:28:
96:83:3e:1b:a4:2f:14:e0:d5:b8:fe:4e:38:8f:ec:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D1:62:6F:34:A5:C3:E7:4E:B2:93:01:48:71:37:9D:CA:AA:80:9F
X509v3 Authority Key Identifier:
keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:56:e3:ba:5f:d1:8c:a9:ed:af:1a:63:0b:d8:d6:23:d7:7a:
73:5a:07:0b:44:3b:b1:8e:ce:58:3b:d1:c0:8d:64:de:70:77:
e0:dd:b8:2f:54:1a:a0:09:18:3c:29:a0:60:67:ab:05:03:7b:
9c:85:e2:3e:19:9f:7e:67:37:05:b9:a8:74:82:83:a1:92:60:
85:99:f3:9b:f9:ba:13:84:1b:bd:96:71:29:a3:ca:85:b8:8e:
c9:6d:45:06:44:c3:45:91:94:05:96:80:89:dd:f5:cf:ba:bb:
88:56:1d:67:2f:75:9b:b5:43:d7:38:e7:43:ed:d0:29:f5:4f:
41:03:4e:4d:58:14:d4:e8:ec:0d:28:d2:57:e1:43:cf:d3:bf:
7b:05:c5:d1:9f:c1:f0:c2:a8:ce:eb:b9:e4:10:c7:8f:26:d5:
86:59:be:e1:af:c2:35:51:2c:cb:ae:d7:ac:d1:7c:68:d5:6d:
fd:14:c9:05:a6:b3:6b:cd:c1:82:b9:85:ed:9a:73:de:c0:7d:
c4:ca:ab:36:1e:db:70:e5:71:55:28:cb:d9:8f:1e:8f:74:b7:
2a:80:7f:25:12:10:98:47:8b:29:cf:87:b1:66:17:3d:9b:ab:
ff:29:24:6e:ce:29:61:0c:c4:8b:f4:8c:02:e4:dc:ab:9f:d2:
64:f8:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:33:47 2026 by rpki-client