
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
File: G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json)
Hash identifier: 0HU9qa9/tKFvkbOWn/Do2rco5ZNTdajULUDgEJZRAgg=
Subject key identifier: 6F:CF:F8:9F:33:0D:4F:D8:81:A6:E0:7A:D9:DA:3A:7F:39:C8:8B:25
Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
Certificate issuer: /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
Manifest number: E6
Signing time: Wed 23 Sep 2026 06:16:44 +0000
Manifest this update: Wed 23 Sep 2026 06:16:43 +0000
Manifest next update: Wed 30 Sep 2026 06:16:43 +0000
Files and hashes: 1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: JZEk6Ep+y1rqtYSHe0XPam91rYkn/i3D9J4YgPFe4Ag=)
2: 6D18C6E88FF311F0B3309340C4F9AE02.roa (hash: lELwYfCJ8QLJoPWBTmeafMYkQU/nJlsMXebmLAieoRc=)
3: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: 0fTr8Ky2ks1lTkMxL9IKSz1oQnIZMQcWNBUaHcz+NfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Validity
Not Before: Sep 23 06:16:43 2026 GMT
Not After : Sep 30 06:16:43 2026 GMT
Subject: CN=6ab36ecc-0b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:95:9a:79:49:76:90:41:c2:fc:f7:47:41:
65:e2:8c:30:2f:13:9f:b1:7d:02:01:30:68:ba:6c:
73:58:31:a1:7a:2b:7c:e4:12:f2:92:8d:81:f8:bb:
01:27:f8:2f:98:18:7b:fd:6c:73:d7:20:7d:03:c8:
c1:72:82:1e:7c:13:90:2f:12:0c:ae:64:71:fa:8f:
48:e7:b6:c9:7a:7e:d2:cf:69:3a:8b:89:85:f1:84:
7b:4b:6e:75:a3:36:8e:96:a2:5d:74:81:45:09:bd:
74:90:76:54:73:8c:d6:3f:58:59:ae:0c:75:e8:a6:
7b:ef:81:d7:e4:35:00:14:c2:9f:0c:de:57:55:85:
0a:17:bb:44:a3:6c:ef:ec:c5:e5:b3:fc:6a:db:15:
24:e4:d9:c9:84:14:24:a1:2f:c0:2a:d8:71:f8:d3:
19:c4:1e:3c:fb:fc:9d:dc:09:b9:78:87:fd:ce:fb:
50:09:f7:d5:77:c2:15:1c:dc:c2:d7:c7:74:14:db:
13:0e:2d:81:b6:6e:f3:68:46:ae:96:c1:57:68:18:
3a:6d:27:c7:ee:28:02:bb:80:0e:ac:82:ed:d8:4b:
3d:2d:d2:b2:97:bb:88:3d:26:31:37:ab:e6:a0:12:
2d:89:8d:04:49:d5:22:9c:2c:98:c9:99:c9:d1:79:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CF:F8:9F:33:0D:4F:D8:81:A6:E0:7A:D9:DA:3A:7F:39:C8:8B:25
X509v3 Authority Key Identifier:
keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:ea:1a:f8:f2:92:37:dc:fb:53:ec:10:2d:6d:fe:42:d1:b5:
89:06:a5:2f:c4:be:0b:f6:8b:74:aa:64:de:83:3c:01:a2:5e:
10:5f:35:c5:9d:27:29:b3:8b:af:6e:b1:ef:fa:82:62:a2:e2:
e7:71:72:84:04:6d:26:39:79:1b:09:78:ac:89:b0:e4:0a:15:
1b:cf:ea:86:a2:c9:a6:79:32:72:ea:fd:41:b7:ff:a7:46:5a:
f1:81:29:d3:eb:88:f9:b6:ba:b6:45:07:cb:e3:33:05:c0:36:
c2:b4:0b:4f:f1:63:e3:ff:d8:c9:1e:07:c9:fc:08:52:25:a3:
be:d4:b3:7e:e0:9e:66:65:ac:91:2c:c4:26:4f:cc:9b:bc:23:
4a:4e:3b:31:2c:dc:fc:15:cc:c6:3f:f6:b6:ac:d8:36:b3:aa:
50:bb:12:c8:6a:31:ff:b9:57:10:d8:fb:2a:de:fa:50:6e:0b:
84:08:a8:e9:1f:e8:e3:94:af:58:73:30:a8:fa:97:32:3c:3e:
d9:37:79:2e:53:43:da:78:d4:8c:9e:66:34:ef:c5:78:b4:05:
8e:b0:23:c9:d5:37:61:07:fd:c8:49:e0:6d:c0:fa:24:d6:a0:
17:61:a8:1b:66:b9:6d:88:3c:2f:ef:3e:ad:bd:76:a2:9b:1f:
af:c0:43:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:19:55 2026 by rpki-client