
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
File: G9xHZ6bV6-C--lyhI1MI915IiRo.mft (raw, json)
Hash identifier: G4ERlRUi6Qae22hJoDwucEzfK7p2XxFVbGRSR69D5xk=
Subject key identifier: FD:08:5B:7B:DA:7E:DF:02:CB:F1:80:9A:D5:44:59:E4:C3:CF:E3:29
Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
Certificate issuer: /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Certificate serial: 1C47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
Manifest number: 1C32
Signing time: Thu 26 Mar 2026 16:11:57 +0000
Manifest this update: Thu 26 Mar 2026 16:11:56 +0000
Manifest next update: Thu 02 Apr 2026 16:11:56 +0000
Files and hashes: 1: G9xHZ6bV6-C--lyhI1MI915IiRo.crl (hash: +HGL5ICJJTr1+0ziSOVY233/1GQG9rGAag1GFIuZMGU=)
2: A607F8965F4611EE80BD8D2DC4F9AE02.roa (hash: fv4oRIQ4Gxh8CoHiTKL/BcGQRnYE0nj0QiSPtWSrjAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7239 (0x1c47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149C2D, serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Validity
Not Before: Mar 26 16:11:56 2026 GMT
Not After : Apr 2 16:11:56 2026 GMT
Subject: CN=69c55acd-c115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:1a:a0:50:56:2a:3c:4c:e4:2b:d3:43:66:
53:4f:f2:52:e6:b9:b1:45:34:2b:04:2b:aa:fd:ad:
28:82:8e:8f:5d:28:32:91:03:97:20:f2:20:3d:dc:
4f:27:94:80:e1:4f:12:1b:11:7b:1b:25:28:2a:aa:
bd:ee:95:ab:b1:b9:d4:d7:79:fe:8c:ab:34:68:f6:
9e:41:e1:bb:32:6b:84:8a:37:c8:60:4e:b5:75:7f:
f9:d3:cc:0a:21:0b:e9:59:d9:a5:b8:d7:f1:1a:20:
3d:83:5f:3b:8a:06:63:40:9b:b8:1d:27:4c:e4:18:
83:b0:2e:17:71:d8:ee:5f:4a:b5:ae:36:b8:6e:31:
ec:22:dc:db:bc:64:44:2f:80:a2:d2:52:9e:2b:08:
63:19:3a:13:0f:7a:76:89:5b:77:40:bd:f0:04:5d:
e9:cc:50:68:a9:ea:94:4f:52:40:02:a0:5f:a3:c7:
39:d1:dc:ba:bf:2d:c0:9c:5d:7e:32:97:be:25:77:
30:f0:7d:b5:02:9b:0a:27:d9:a3:5d:ed:4a:07:a0:
de:90:85:ce:1d:f4:de:ec:39:57:3f:f4:b5:cd:53:
7a:31:29:a6:01:b8:90:72:62:a7:05:10:5a:af:e1:
03:6c:21:bc:24:25:9a:3c:b6:0e:48:19:12:7b:f0:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:08:5B:7B:DA:7E:DF:02:CB:F1:80:9A:D5:44:59:E4:C3:CF:E3:29
X509v3 Authority Key Identifier:
keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6a:31:f4:2d:e2:a8:e3:a6:f3:5f:a1:d6:be:52:5e:ac:24:
ff:ce:48:3e:13:f6:b0:f4:2c:31:2b:96:b6:82:56:53:be:cd:
22:51:e5:8a:ed:5f:91:8c:ca:ee:82:29:1d:f7:f3:80:6b:1c:
9d:d4:3c:40:78:73:12:85:72:98:dd:69:bc:31:24:49:50:6b:
b1:3a:41:07:40:c1:36:b5:1a:ae:60:29:c7:37:ff:89:cf:34:
e6:a8:81:27:e0:44:24:e8:1e:01:ed:b7:fd:a8:12:0c:a1:57:
0e:7f:02:49:7b:12:87:df:4e:23:27:1a:b9:95:74:5d:7e:ee:
fe:04:e9:c0:d5:80:75:6c:df:94:48:11:c1:ec:a4:44:a5:45:
0c:ab:44:d6:eb:7b:dc:61:ba:ba:a6:d7:5f:c6:06:cb:e9:19:
59:15:b7:db:32:0d:94:d5:15:15:6f:61:9d:ee:d4:ba:06:80:
da:88:c1:9d:a1:b3:93:30:d9:a5:d1:72:98:45:f1:fe:41:8a:
a5:29:80:30:6f:80:5d:a4:ee:78:f4:8f:fc:99:c1:08:5e:f6:
3f:b0:52:75:ab:a4:c9:43:d6:57:50:7c:ee:99:e5:55:d1:38:
26:d4:bb:b1:6e:9e:9a:e6:03:6b:e7:9a:eb:25:76:1a:bc:4e:
df:63:42:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:32 2026 by rpki-client