
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
File: G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json)
Hash identifier: yCPlOnSIMelDCuWJDjOQVUeRn+EsjASm6E48FxD2/4A=
Subject key identifier: 94:20:37:88:29:FA:B6:18:61:99:69:69:30:47:69:11:BD:F2:68:30
Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
Certificate issuer: /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
Manifest number: 63
Signing time: Mon 01 Jun 2026 08:48:35 +0000
Manifest this update: Mon 01 Jun 2026 08:48:35 +0000
Manifest next update: Mon 08 Jun 2026 08:48:35 +0000
Files and hashes: 1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: ZZ4hmd3IAMrG3ZLZVwojWtg6qYut2+RpKGAST4xORsY=)
2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: IhKjrimtkW5GZgmr5nVxZh5rfh7SBgszAIZRuKiFWrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Validity
Not Before: Jun 1 08:48:35 2026 GMT
Not After : Jun 8 08:48:35 2026 GMT
Subject: CN=6a1d4763-f8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:e1:55:7f:2c:14:b2:df:ee:ca:8b:d8:63:
54:a4:13:bc:84:bd:38:63:72:7e:9c:a1:97:4a:9e:
35:6e:ba:36:19:20:c6:01:7f:95:9e:69:18:b4:82:
64:45:c9:6f:3e:fb:10:f8:60:b1:65:34:38:4b:9f:
37:01:87:16:d4:6a:12:37:73:8c:a0:6d:a0:95:71:
29:2c:fe:18:59:4f:79:38:25:52:a7:06:33:09:2a:
b1:4e:1a:d0:cb:00:b3:a6:50:45:47:69:07:9e:6a:
eb:e9:f6:3a:84:a6:73:b2:a3:13:07:03:80:df:b3:
58:4c:df:f6:69:43:5d:09:16:ce:b7:c9:28:0e:02:
4e:47:25:85:6b:5d:dd:86:9d:d5:35:b7:03:9c:38:
93:69:40:b1:dd:d5:f2:92:f9:dd:b9:2e:78:b3:7d:
c9:67:0a:45:f8:88:0c:ec:88:39:fe:45:c3:a5:8a:
27:fa:9c:5f:84:9f:02:b3:b3:97:6c:47:83:0a:66:
02:eb:cd:d9:cc:32:7f:63:ef:cf:50:17:92:41:d4:
95:ae:3a:89:a2:0f:04:94:85:f8:35:cb:ec:fe:7d:
5c:ee:a3:a4:93:bb:14:f6:5b:d0:33:a5:ca:3c:3b:
50:8d:bc:00:da:0f:8f:0b:84:4e:1d:0b:e2:ff:d3:
00:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:37:88:29:FA:B6:18:61:99:69:69:30:47:69:11:BD:F2:68:30
X509v3 Authority Key Identifier:
keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c7:3f:b7:e8:20:77:dd:e7:0e:04:aa:1c:7a:77:c9:67:c6:
4f:5e:32:08:5f:fd:63:fb:07:5b:71:cb:85:85:2f:1b:9d:94:
43:54:d6:1f:4e:11:74:84:65:a1:71:53:ff:d8:47:7d:6b:19:
5f:3c:09:26:75:a6:85:7d:81:b1:c7:a8:15:84:3f:53:c7:ff:
3b:de:2c:5c:c7:8b:d6:90:60:d2:91:86:a8:a3:25:c2:4e:68:
82:92:32:6e:e0:89:d2:8c:85:2d:d7:18:6a:0e:5c:e3:9c:ec:
43:46:68:42:7f:11:0a:94:4b:37:22:34:15:e8:11:a0:0b:5c:
08:0d:8f:bd:cc:a1:0c:3d:fc:2e:4e:13:a2:de:13:b3:d1:c3:
0d:83:02:d7:7b:6b:5b:41:9f:25:3d:56:a3:2b:17:d1:aa:76:
fa:f8:62:b7:0b:37:c0:69:fe:ca:9b:fc:b3:b3:29:9c:67:3b:
33:36:f2:71:4c:24:89:cd:7e:05:c3:ae:7b:83:62:13:92:82:
bf:b0:02:cf:bd:01:30:0d:53:77:2e:77:b4:4d:b3:f8:7a:f8:
fe:5a:f6:e2:77:52:a1:a8:0d:bd:6c:fd:aa:f5:96:96:16:56:
6f:e1:af:f9:9f:5d:4d:16:01:7d:30:7b:94:89:8b:7f:d3:99:
42:8b:84:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:44 2026 by rpki-client