
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
File: G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json)
Hash identifier: RcaCRm2SXmBdtkQPHgZicXmYEKlrEU6Zkk/xU9qP2Ps=
Subject key identifier: 28:A9:A2:64:7D:C4:43:E8:91:5C:33:4A:D3:08:2C:0D:5F:0A:76:0B
Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
Certificate issuer: /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
Manifest number: 4C
Signing time: Fri 17 Apr 2026 07:59:58 +0000
Manifest this update: Fri 17 Apr 2026 07:59:58 +0000
Manifest next update: Fri 24 Apr 2026 07:59:58 +0000
Files and hashes: 1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: IEOmdHY0bWEQFldWEwD2kVPsM0RFjmLmKpKifRuAUMY=)
2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: IhKjrimtkW5GZgmr5nVxZh5rfh7SBgszAIZRuKiFWrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Validity
Not Before: Apr 17 07:59:58 2026 GMT
Not After : Apr 24 07:59:58 2026 GMT
Subject: CN=69e1e87e-5237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:4f:4a:65:46:3d:a6:f2:81:88:8d:49:3b:
a4:0d:6a:ab:2a:59:e4:40:3c:4e:52:63:ab:0e:e0:
d0:e6:df:a4:9f:ad:cb:85:26:3c:c9:ae:77:d7:6e:
46:61:0a:95:14:28:b7:5c:c6:95:3c:23:94:fa:65:
35:fb:33:dd:c5:fe:22:f0:69:cd:1b:b2:54:b8:1a:
e3:9a:c3:06:54:fd:12:ab:8b:77:74:01:d3:c5:42:
59:4f:f9:f7:25:67:08:3f:85:6a:6f:b2:60:5b:3d:
26:b4:24:3c:30:48:1b:8e:74:0d:be:f8:72:1a:1d:
f0:cc:31:1c:8d:58:cd:d2:5a:d9:eb:06:3a:ab:e1:
74:24:82:6b:4f:3b:3c:c0:62:61:c0:a3:1e:f6:68:
18:d1:0a:08:80:e2:7d:50:6a:3f:37:06:6a:c9:85:
31:a0:06:90:19:20:c0:21:1b:9e:29:9f:ca:7b:f4:
26:13:f0:41:e8:13:d2:33:9b:f5:2e:d5:15:98:2d:
82:1c:63:97:8f:2f:89:50:56:d1:13:c5:92:00:74:
4e:22:77:26:6a:4e:7e:34:9b:26:94:9b:fc:a6:b1:
46:01:e4:18:d9:56:e8:26:41:1d:96:5c:43:02:c7:
ad:b0:a4:51:7d:ae:f6:e0:62:50:bf:11:bc:95:85:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A9:A2:64:7D:C4:43:E8:91:5C:33:4A:D3:08:2C:0D:5F:0A:76:0B
X509v3 Authority Key Identifier:
keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:46:37:5c:28:04:49:7b:d5:46:26:59:ef:e5:45:59:68:78:
9f:2f:00:54:21:3e:9c:13:33:a1:46:d2:51:c1:c5:8b:6f:21:
e2:7c:7d:96:9a:29:5d:71:db:0a:d4:0b:06:78:e9:43:8f:cd:
37:af:7c:a0:63:b2:eb:53:1d:d4:07:66:75:80:ed:8c:46:cc:
0b:96:5b:eb:1d:7c:3f:f4:0d:fd:71:3b:40:df:a9:a2:c1:6d:
b5:ba:ff:36:12:9b:49:59:74:30:14:6a:db:b3:a8:22:22:9c:
e2:6c:db:3b:43:7f:8f:42:47:61:fe:3a:98:53:9c:f3:78:86:
e4:41:25:ea:bc:92:5a:f7:69:f1:4c:c4:41:51:68:12:5b:22:
96:4d:41:c9:e1:fa:2c:36:da:15:04:d5:1a:97:3c:25:6a:c1:
7a:ba:6a:96:6a:c2:9c:94:4e:40:0c:ef:66:c6:b3:d4:3b:31:
c9:ac:8b:1b:20:b9:2d:4b:ba:9e:8d:23:7c:d5:65:37:8f:df:
6f:2b:8c:c5:bb:9b:36:d4:6d:7d:c9:a3:c4:74:9b:60:e8:a6:
64:d0:b1:ad:32:d5:fd:ca:e1:f8:ba:aa:ba:dc:a8:69:42:3f:
07:ad:3f:d3:9b:27:f2:cb:60:e5:16:fd:e9:0d:b6:a6:cd:98:
01:7c:5c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:03:12 2026 by rpki-client