
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
File: G9xHZ6bV6-C--lyhI1MI915IiRo.mft (raw, json)
Hash identifier: 1SJHUMnPobo3sg+8mtaVImcDZu6RsQ4Y6yCvJWL+r6s=
Subject key identifier: 32:36:9D:45:12:58:BA:DD:49:36:01:38:BB:1A:04:B6:69:C1:D1:B6
Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
Certificate issuer: /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Certificate serial: 1C83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
Manifest number: 1C6E
Signing time: Wed 22 Jul 2026 16:17:19 +0000
Manifest this update: Wed 22 Jul 2026 16:17:18 +0000
Manifest next update: Wed 29 Jul 2026 16:17:18 +0000
Files and hashes: 1: G9xHZ6bV6-C--lyhI1MI915IiRo.crl (hash: OiU96KTY+yrEQJhClOUsnL564DO4bWp4jxw4q9+ispY=)
2: A607F8965F4611EE80BD8D2DC4F9AE02.roa (hash: fv4oRIQ4Gxh8CoHiTKL/BcGQRnYE0nj0QiSPtWSrjAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7299 (0x1c83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149C2D, serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Validity
Not Before: Jul 22 16:17:18 2026 GMT
Not After : Jul 29 16:17:18 2026 GMT
Subject: CN=6a60ed0f-6e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:84:7a:99:1d:c2:be:16:93:a8:a2:a0:af:fa:
40:32:8f:c1:ee:cc:f1:6c:94:37:ee:93:15:ae:2f:
02:30:17:79:18:d2:bc:55:4a:0b:29:84:8a:b1:b3:
49:a1:4e:62:b2:e3:e3:3f:c9:76:bd:26:02:7e:12:
dd:ab:58:5b:d2:10:a6:ce:fb:be:3b:f4:41:f9:1d:
f6:84:4e:c7:2b:32:ad:43:a0:c4:81:93:ac:42:99:
a6:a4:99:1a:10:1a:d0:e0:06:5d:52:44:22:e6:18:
18:86:47:8b:c9:92:f8:b7:41:31:54:49:c7:de:f4:
b2:20:8f:81:c3:bc:c5:e2:ae:76:37:a7:95:51:4d:
c3:67:87:65:d8:0d:e1:cb:3b:f6:23:0b:cc:9a:15:
cd:8e:8f:2d:77:4b:4f:b1:b4:1e:21:0a:5e:55:7e:
d1:9f:9a:70:cd:01:e2:9c:29:10:f7:b6:8c:5f:f0:
73:2a:9e:66:d6:e3:84:5c:36:13:1c:f2:d4:4e:a2:
a4:46:c1:e9:61:b3:3c:6f:01:6b:ae:59:2d:27:e7:
90:f0:7f:f9:54:27:6a:4e:1b:26:a4:59:64:9a:f3:
94:f4:ae:9c:60:be:10:a6:49:6e:11:a3:ef:ca:12:
7b:7f:12:61:32:4b:83:0d:12:f0:54:08:c7:6d:13:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:36:9D:45:12:58:BA:DD:49:36:01:38:BB:1A:04:B6:69:C1:D1:B6
X509v3 Authority Key Identifier:
keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:15:2a:4f:b5:09:ee:80:1c:80:9b:a5:02:e4:95:5a:72:7f:
75:85:23:e0:9d:09:68:e3:5b:82:e3:99:e1:d9:62:ba:c0:14:
28:28:2a:73:b1:8f:6d:5f:b2:6c:21:6e:9e:5c:20:4b:d4:01:
81:fd:66:fe:a7:fd:d1:af:c5:ca:1d:51:02:af:8a:5c:50:80:
47:1f:40:1d:18:50:75:15:42:d6:cb:96:34:af:91:26:ab:00:
f2:98:f2:62:be:dc:62:4b:94:1f:4b:0b:59:0b:c7:86:67:53:
f5:7c:cf:39:13:0f:5f:a8:30:d6:d8:c2:d6:e5:c6:f1:f5:61:
7d:c5:c1:5c:56:84:ea:29:52:8f:00:4d:25:7c:c4:b9:62:d7:
13:f7:8a:eb:de:7d:85:49:00:4b:26:0a:5a:84:c4:b6:b4:ee:
95:3c:8c:cd:17:85:65:1f:74:7b:ac:0d:42:db:f7:b4:64:0b:
da:8a:e9:5d:fa:4c:cf:ab:5d:33:35:ee:b0:14:85:ca:fc:c6:
21:79:d2:14:c6:b2:6f:2f:09:85:bc:65:38:4b:c5:51:9c:30:
d9:f3:9d:1e:c7:64:0b:38:4c:3e:22:6c:dc:28:ee:41:32:7f:
7a:b2:24:9b:be:49:03:f2:b8:22:cb:77:ce:54:a7:42:6b:80:
53:1d:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:36:19 2026 by rpki-client