
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json)
Hash identifier: w/D4oZR1LH0sNSB4vD+mPWDByz4nA0X+eqSwyfoda7U=
Subject key identifier: B9:66:62:2F:7C:CC:2F:ED:85:64:82:1F:3E:A8:11:8C:8C:91:CA:F1
Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27
Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
Certificate serial: 1338
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
Manifest number: 1C1E
Signing time: Thu 24 Sep 2026 16:58:26 +0000
Manifest this update: Thu 24 Sep 2026 16:58:26 +0000
Manifest next update: Thu 01 Oct 2026 16:58:26 +0000
Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: UJF8YrjbtpygKITLIUeenRnX+caMaRadXx1Ur2/JmBo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl
rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4920 (0x1338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
Validity
Not Before: Sep 24 16:58:26 2026 GMT
Not After : Oct 1 16:58:26 2026 GMT
Subject: CN=6ab556b2-bbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:8d:66:b3:c9:95:3f:73:64:c3:8e:d2:4f:
d2:bd:b5:1e:23:2d:9e:89:0e:72:26:ee:22:64:1b:
8e:ab:49:be:02:5d:dc:37:d5:ac:48:56:eb:5b:15:
45:67:c4:ba:b8:13:c1:d1:64:0a:81:38:9d:d4:a0:
5e:c0:d7:f1:3d:bf:67:5b:7a:43:ab:e4:6e:51:03:
0b:16:55:0f:0a:cd:03:35:4b:62:56:2a:b4:23:64:
74:c2:67:2c:10:06:99:c1:b3:17:c7:2c:3c:fa:ff:
1d:46:fb:22:65:88:bb:52:49:c5:3d:60:8d:d0:27:
1b:7a:5e:4e:08:e9:c4:9d:0a:ba:29:91:f1:f1:4d:
89:1d:bb:02:5c:51:64:40:02:f8:6a:d2:67:52:c6:
bd:81:c1:3a:bd:9f:99:86:8e:b3:a0:b4:d8:db:9e:
59:1e:93:79:6b:b6:9f:c9:3f:bc:cd:d6:ff:7d:af:
da:28:32:cf:d4:09:c9:c8:6f:70:f1:42:3b:35:95:
47:ff:db:80:a2:3b:a7:93:fd:4c:2d:07:61:11:61:
71:c9:49:b5:e1:b6:f9:fa:ac:66:b1:3a:37:b2:ac:
f7:53:b3:b0:86:cd:d2:93:c1:00:32:f8:79:23:2c:
6d:83:ac:99:73:9f:1e:0b:59:ce:62:0f:09:ac:af:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:62:2F:7C:CC:2F:ED:85:64:82:1F:3E:A8:11:8C:8C:91:CA:F1
X509v3 Authority Key Identifier:
keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:56:99:eb:87:27:4e:bf:56:bb:a3:d7:1b:02:e4:80:5d:86:
b5:22:ee:b0:76:75:d7:21:4f:30:65:ce:94:31:f4:4d:dd:7e:
a7:c1:2d:8c:a4:fb:b3:41:47:8b:4a:f6:43:43:fe:29:ca:b6:
64:2a:b0:23:ee:4d:2c:39:bf:9e:1a:86:3d:6f:58:33:bd:25:
45:3e:93:49:f0:58:76:7d:58:7e:2d:bd:c1:15:83:6b:d4:39:
fd:45:e5:a0:98:ae:84:26:f5:e0:e5:38:d3:62:88:d9:3c:ab:
62:62:bf:4f:19:01:46:01:06:69:23:f4:0d:16:8b:37:42:78:
a9:8a:90:e4:32:78:74:30:e5:b1:f1:91:16:16:92:f2:57:82:
65:fc:50:ac:f4:e4:48:4c:64:69:96:5e:83:e6:4d:a6:41:57:
01:5b:9a:c8:67:d2:d0:9c:43:62:a9:74:a9:6d:67:6c:4a:7d:
34:f4:9a:4c:e4:e1:38:f1:87:e6:f5:4c:0d:83:db:0b:0a:73:
85:a5:92:36:6d:60:91:09:e8:f0:04:ce:67:59:b9:b3:1e:98:
f3:49:71:6c:29:7c:65:12:8a:06:54:d9:04:10:54:7e:2b:5b:
f6:c4:59:02:6f:2a:f0:75:3e:c0:6e:3a:eb:99:95:41:90:53:
67:95:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:30:22 2026 by rpki-client