
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
File: G395gdniwsMPbyw0hxophthfiQ4.mft (raw, json)
Hash identifier: TY8xezZYRApt6V2Rp0f5povP9zjdt0VAnepJzIGgRiw=
Subject key identifier: 2B:AE:B7:3B:BE:8F:E7:F0:64:33:08:76:CF:3E:9A:4E:40:97:F6:F7
Authority key identifier: 1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Certificate issuer: /CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Certificate serial: 05E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
Manifest number: 05DF
Signing time: Tue 18 Aug 2026 23:20:46 +0000
Manifest this update: Tue 18 Aug 2026 23:20:46 +0000
Manifest next update: Tue 25 Aug 2026 23:20:46 +0000
Files and hashes: 1: G395gdniwsMPbyw0hxophthfiQ4.crl (hash: m4veky5cqvD3ZrQfiq7i5K2AHWEXTQy0qOO1c+P1kvA=)
2: 5D7779A6108A11EC9E1F3D49C4F9AE02.roa (hash: MARAw22DhIJFp/wfG19G5Gz01JcFPueQuJN4T376eTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1510 (0x5e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170AE9, serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Validity
Not Before: Aug 18 23:20:46 2026 GMT
Not After : Aug 25 23:20:46 2026 GMT
Subject: CN=6a84e8ce-15fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:cf:0c:19:5b:6a:c1:9d:d6:50:8c:8f:06:
c0:0b:3a:71:d1:e6:6d:5b:1c:88:14:24:64:ad:8f:
89:48:21:5c:ce:a6:15:9a:c0:22:19:8d:aa:78:c4:
56:bc:bd:89:7e:11:9f:b7:0e:25:57:95:cc:a2:9e:
d8:0d:11:27:67:82:87:a4:2c:e4:1c:c2:b2:6b:fe:
61:15:33:2e:40:73:00:5e:b0:e9:88:d8:ed:09:1f:
1a:58:8b:b9:ef:9e:bb:ec:82:fe:69:f4:3f:19:0d:
03:29:6b:35:5f:3d:a9:ac:40:a9:ad:f8:45:9b:e6:
49:aa:f4:f4:69:cb:01:88:d8:96:c1:15:1d:69:e0:
f6:ef:ba:e6:96:52:b1:43:69:e3:66:39:1e:db:2c:
28:c4:08:32:91:fd:d1:00:a6:c4:94:29:90:67:93:
c9:ea:df:ab:25:02:49:4c:7d:5f:58:1a:68:6a:8d:
c9:c0:71:7a:27:cd:c0:1e:43:f1:9a:85:a4:d8:06:
11:ef:44:d0:8f:cd:0c:b4:68:7e:de:fb:e4:3e:4a:
ae:a6:86:b2:62:fd:b3:91:71:67:5a:40:2e:a1:04:
b3:a1:ec:a8:60:ea:c4:24:f5:ad:56:19:25:31:d7:
b3:83:c7:a4:0e:9c:c8:c8:bf:45:60:16:bb:be:25:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AE:B7:3B:BE:8F:E7:F0:64:33:08:76:CF:3E:9A:4E:40:97:F6:F7
X509v3 Authority Key Identifier:
keyid:1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a6:e6:0e:97:35:31:0b:17:d6:a1:ea:b0:57:f4:8c:4f:2d:
84:1b:1c:8f:75:13:65:b1:10:e3:7d:3f:8e:cf:86:d8:02:dc:
28:88:f2:4c:22:b1:cd:ff:c6:3b:ed:f5:02:6c:5b:17:f8:2e:
c2:e8:75:76:aa:16:36:dc:ba:32:05:25:15:ac:59:2c:62:d0:
14:d2:23:83:fd:66:77:3f:e9:67:ef:ab:ad:6a:ad:c7:19:69:
a0:98:f2:78:1b:16:58:33:3b:5c:87:dc:2a:b7:91:21:62:db:
bb:2a:d5:60:63:26:f9:30:a6:ee:3e:e7:e5:dc:79:de:99:1a:
5c:58:43:01:05:3d:36:cf:fd:63:d1:84:ca:18:0f:94:f2:f3:
fb:e9:d4:e6:87:14:73:90:57:1f:2f:17:2d:01:b3:b0:27:a0:
c3:c5:32:c1:ce:db:c3:98:e3:4b:3a:86:f9:b2:46:29:df:19:
44:3d:35:d1:60:99:20:36:04:45:4c:5d:c6:86:15:9d:77:3b:
86:97:7c:90:18:16:e5:75:73:8c:f2:3d:3c:68:63:c0:8f:6a:
be:b5:48:44:6c:94:55:94:46:46:d7:21:2b:cc:b8:f4:ad:86:
c5:4a:35:b0:9a:a0:f0:a4:c8:9c:25:b4:b8:67:10:74:cc:20:
6f:d8:aa:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBBRTkxMTAvBgNVBAUTKDFCN0Y3OTgxRDlFMkMyQzMwRjZGMkMzNDg3MUEyOTg2
RDg1Rjg5MEUwHhcNMjYwODE4MjMyMDQ2WhcNMjYwODI1MjMyMDQ2WjAYMRYwFAYD
VQQDEw02YTg0ZThjZS0xNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYrPDBlbasGd1lCMjwbACzpx0eZtWxyIFCRkrY+JSCFczqYVmsAiGY2qeMRW
vL2JfhGftw4lV5XMop7YDREnZ4KHpCzkHMKya/5hFTMuQHMAXrDpiNjtCR8aWIu5
75677IL+afQ/GQ0DKWs1Xz2prECprfhFm+ZJqvT0acsBiNiWwRUdaeD277rmllKx
Q2njZjke2ywoxAgykf3RAKbElCmQZ5PJ6t+rJQJJTH1fWBpoao3JwHF6J83AHkPx
moWk2AYR70TQj80MtGh+3vvkPkqupoayYv2zkXFnWkAuoQSzoeyoYOrEJPWtVhkl
Mdezg8ekDpzIyL9FYBa7viUq0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuutzu+
j+fwZDMIds8+mk5Al/b3MB8GA1UdIwQYMBaAFBt/eYHZ4sLDD28sNIcaKYbYX4kO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFFOS8wOTEyMDM4MDEw
ODYxMUVDODFFNzcwM0ZDNEY5QUUwMi9HMzk1Z2RuaXdzTVBieXcwaHhvcGh0aGZp
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0czOTVnZG5pd3NNUGJ5dzBoeG9waHRoZmlRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEFFOS8wOTEyMDM4MDEwODYxMUVDODFFNzcwM0ZDNEY5QUUwMi9HMzk1Z2RuaXdz
TVBieXcwaHhvcGh0aGZpUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP6bmDpc1MQsX1qHqsFf0jE8thBscj3UTZbEQ430/js+G2ALcKIjyTCKxzf/G
O+31AmxbF/guwuh1dqoWNty6MgUlFaxZLGLQFNIjg/1mdz/pZ++rrWqtxxlpoJjy
eBsWWDM7XIfcKreRIWLbuyrVYGMm+TCm7j7n5dx53pkaXFhDAQU9Ns/9Y9GEyhgP
lPLz++nU5ocUc5BXHy8XLQGzsCegw8Uywc7bw5jjSzqG+bJGKd8ZRD010WCZIDYE
RUxdxoYVnXc7hpd8kBgW5XVzjPI9PGhjwI9qvrVIRGyUVZRGRtchK8y49K2GxUo1
sJqg8KTInCW0uGcQdMwgb9iq5A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:59 2026 by rpki-client