
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
File: G9xHZ6bV6-C--lyhI1MI915IiRo.mft (raw, json)
Hash identifier: 65kfntoauSJjAjVg1sY8SHjTnhcCGLpdSifYxzs8d8M=
Subject key identifier: E1:2C:E4:F2:69:54:34:1D:62:84:AD:37:1E:85:45:93:50:00:D0:25
Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
Certificate issuer: /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Certificate serial: 1CA8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
Manifest number: 1C93
Signing time: Fri 02 Oct 2026 16:18:42 +0000
Manifest this update: Fri 02 Oct 2026 16:18:41 +0000
Manifest next update: Fri 09 Oct 2026 16:18:41 +0000
Files and hashes: 1: G9xHZ6bV6-C--lyhI1MI915IiRo.crl (hash: HMF4vmwA1tnnk80TLwo43p0vGNRY9gTs49z22d+Eoqc=)
2: A607F8965F4611EE80BD8D2DC4F9AE02.roa (hash: fv4oRIQ4Gxh8CoHiTKL/BcGQRnYE0nj0QiSPtWSrjAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7336 (0x1ca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149C2D, serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Validity
Not Before: Oct 2 16:18:41 2026 GMT
Not After : Oct 9 16:18:41 2026 GMT
Subject: CN=6abfd962-05f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:7c:15:c9:ad:11:e2:3b:36:3d:08:cc:4f:
15:d0:f1:cb:db:2c:9a:57:3e:74:03:f8:d7:95:66:
7b:88:7f:3d:a0:e8:0f:74:79:ae:b3:e5:40:58:40:
4c:bf:16:07:0f:8b:fd:4c:59:a2:ec:19:5c:15:d9:
d8:61:a9:1e:ac:9b:ce:b7:aa:26:05:70:13:7a:30:
7a:07:9d:d3:78:45:b4:0a:23:4f:d6:3a:cc:bc:79:
ac:d8:ae:46:36:92:d1:a9:27:1c:41:2c:96:a9:8d:
55:72:41:ee:52:14:c8:f6:d9:d2:51:8e:d0:65:a4:
6b:05:70:78:74:6a:fe:f5:bb:4d:5a:e6:9f:84:7b:
c7:46:b1:8f:55:f2:93:ec:2c:13:33:4a:18:cd:7a:
f5:a4:93:c4:e9:44:4e:24:9d:ab:7d:87:ef:fa:d5:
da:86:ff:dc:4a:5d:d5:1f:ed:fe:9a:a9:4b:8b:48:
18:49:a3:42:37:3d:10:a3:52:37:18:4d:85:95:67:
0a:ac:35:ac:ca:21:ab:7c:dd:3b:99:3b:25:f1:c6:
38:50:08:35:bb:fc:99:e1:37:9a:37:f7:77:e3:72:
4a:f1:f1:2c:aa:3f:bf:3b:0d:28:eb:9c:26:4b:ec:
c9:5f:0c:2b:06:92:95:0b:60:d2:12:0b:21:c5:38:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2C:E4:F2:69:54:34:1D:62:84:AD:37:1E:85:45:93:50:00:D0:25
X509v3 Authority Key Identifier:
keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:3d:d1:86:65:dc:cd:6b:85:f2:2f:8a:72:aa:33:be:74:87:
5b:c5:89:0d:71:65:5d:81:70:b2:a4:a0:e6:4c:2b:b2:cb:6d:
1f:12:fe:bb:e7:bb:d8:34:5e:66:35:0d:cd:60:bd:e8:f5:f2:
57:68:01:8e:28:c9:7a:0d:b5:b8:6c:7e:33:b8:da:5a:4e:d3:
e6:8c:6f:83:38:9b:97:9a:fa:9f:9d:16:4f:19:3f:98:a5:2e:
74:f1:c7:f9:50:b8:cb:ad:c2:d2:02:71:4d:29:ca:83:c4:29:
b4:c4:f0:e0:6e:49:b6:53:54:b9:d1:cd:aa:24:37:7f:b4:a0:
70:ca:0e:d5:36:6a:9d:2d:1b:94:64:02:64:54:b3:c1:f4:13:
ee:76:4b:b3:f2:b0:89:e5:52:4b:84:5b:78:76:d9:60:ad:f1:
88:96:c9:cc:0b:48:06:0d:90:96:33:14:9f:98:31:29:a9:b1:
a7:ab:03:98:79:e6:07:81:dc:a3:ba:e9:b5:a9:89:b1:b2:1f:
79:38:cb:4c:89:88:32:f9:d5:80:9e:e3:b1:fc:c3:ad:c0:28:
7d:a3:b8:79:7a:74:9c:5c:06:ae:85:e5:a5:ab:9b:6d:5a:5e:
e5:e3:4d:54:9c:ff:14:9d:29:13:d9:4d:01:97:de:8a:f6:4e:
1a:6c:e5:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlDMkQxMTAvBgNVBAUTKDFCREM0NzY3QTZENUVCRTBCRUZBNUNBMTIzNTMwOEY3
NUU0ODg5MUEwHhcNMjYxMDAyMTYxODQxWhcNMjYxMDA5MTYxODQxWjAYMRYwFAYD
VQQDEw02YWJmZDk2Mi0wNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkuR8FcmtEeI7Nj0IzE8V0PHL2yyaVz50A/jXlWZ7iH89oOgPdHmus+VAWEBM
vxYHD4v9TFmi7BlcFdnYYakerJvOt6omBXATejB6B53TeEW0CiNP1jrMvHms2K5G
NpLRqSccQSyWqY1VckHuUhTI9tnSUY7QZaRrBXB4dGr+9btNWuafhHvHRrGPVfKT
7CwTM0oYzXr1pJPE6UROJJ2rfYfv+tXahv/cSl3VH+3+mqlLi0gYSaNCNz0Qo1I3
GE2FlWcKrDWsyiGrfN07mTsl8cY4UAg1u/yZ4TeaN/d343JK8fEsqj+/Ow0o65wm
S+zJXwwrBpKVC2DSEgshxTjwjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOEs5PJp
VDQdYoStNx6FRZNQANAlMB8GA1UdIwQYMBaAFBvcR2em1evgvvpcoSNTCPdeSIka
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUMyRC80RDVBNzg4MDA4
NzMxMUU3OUM4MzlCMDlDNEY5QUUwMi9HOXhIWjZiVjYtQy0tbHloSTFNSTkxNUlp
Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c5eEhaNmJWNi1DLS1seWhJMU1JOTE1SWlSby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUMyRC80RDVBNzg4MDA4NzMxMUU3OUM4MzlCMDlDNEY5QUUwMi9HOXhIWjZiVjYt
Qy0tbHloSTFNSTkxNUlpUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACT3RhmXczWuF8i+KcqozvnSHW8WJDXFlXYFwsqSg5kwrssttHxL+u+e72DRe
ZjUNzWC96PXyV2gBjijJeg21uGx+M7jaWk7T5oxvgzibl5r6n50WTxk/mKUudPHH
+VC4y63C0gJxTSnKg8QptMTw4G5JtlNUudHNqiQ3f7SgcMoO1TZqnS0blGQCZFSz
wfQT7nZLs/KwieVSS4RbeHbZYK3xiJbJzAtIBg2QljMUn5gxKamxp6sDmHnmB4Hc
o7rptamJsbIfeTjLTImIMvnVgJ7jsfzDrcAofaO4eXp0nFwGroXlpaubbVpe5eNN
VJz/FJ0pE9lNAZfeivZOGmzl4g==
-----END CERTIFICATE-----
Generated at Sat Oct 3 06:45:46 2026 by rpki-client