
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
File: G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json)
Hash identifier: aW9a1WkDnFa/EsaQSl9alrV6pX/0aIjvnyZm5f/tXts=
Subject key identifier: 12:BB:30:46:D1:A7:93:70:84:2E:5C:55:2A:89:A5:A2:E1:A8:00:58
Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
Certificate issuer: /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
Manifest number: 7C
Signing time: Thu 23 Jul 2026 09:38:31 +0000
Manifest this update: Thu 23 Jul 2026 09:38:31 +0000
Manifest next update: Thu 30 Jul 2026 09:38:31 +0000
Files and hashes: 1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: s8r8DWp4bw893GEcJTdVOCuOjVVJV27BbJuZnsZpySQ=)
2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: IhKjrimtkW5GZgmr5nVxZh5rfh7SBgszAIZRuKiFWrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:38:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Validity
Not Before: Jul 23 09:38:31 2026 GMT
Not After : Jul 30 09:38:31 2026 GMT
Subject: CN=6a61e117-86e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:e4:43:11:b5:99:c7:d0:2b:00:3b:f3:f5:
70:06:bd:81:34:1a:42:ce:af:3d:f1:9a:36:28:6c:
cd:5c:c3:84:aa:9b:1c:1c:44:01:f0:14:a8:f3:24:
a4:90:54:f4:29:cc:ff:1d:28:47:5f:a6:83:fc:17:
c8:51:28:c2:82:42:b6:5f:4b:33:3f:e7:ba:e7:5b:
ed:2b:b8:43:ea:82:92:b8:20:92:b9:b2:4d:04:9e:
f5:4b:ae:60:d5:c3:13:33:c3:62:53:95:cd:68:a7:
1b:d8:d6:84:83:cf:55:77:3d:59:61:7b:92:c2:37:
87:c2:41:80:0a:91:1f:07:c0:8f:3d:80:99:f0:7c:
de:02:80:9a:5a:b1:7f:a1:b2:23:9f:37:ab:b5:3c:
dd:2a:80:fe:b3:90:f5:99:10:2e:00:6b:de:59:25:
8c:d8:ec:f4:16:24:d4:13:a8:43:b3:be:58:96:a6:
11:f7:20:70:92:78:78:ea:a7:f3:3b:52:95:d2:03:
9f:20:a4:12:60:04:26:f4:9b:0e:49:3b:26:7b:83:
25:de:61:8c:08:a2:e9:fb:da:c0:69:aa:d8:cb:05:
0a:3f:a6:c1:83:4a:f3:06:dc:bd:06:34:de:86:84:
0b:2a:43:ab:ac:db:b8:0d:8e:d7:16:7b:83:7f:ef:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:30:46:D1:A7:93:70:84:2E:5C:55:2A:89:A5:A2:E1:A8:00:58
X509v3 Authority Key Identifier:
keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:d6:e0:14:3d:38:9b:dd:ff:6b:c0:d8:60:99:f2:8f:73:fa:
be:6c:82:bf:d6:28:43:d1:e0:c4:12:fe:90:d6:c6:d7:b4:f3:
b5:aa:8a:89:bd:72:36:f6:c7:b0:ea:25:5b:4d:c8:b0:d6:b4:
6d:7d:67:5a:2d:21:94:4b:5b:ce:9d:9d:4a:bd:3d:dc:49:1f:
d5:fd:4f:50:e7:23:78:9d:e5:32:b4:67:5d:c2:43:9d:28:b6:
5f:31:91:74:3b:6c:90:9b:5c:e3:f6:db:39:58:fd:c6:77:0b:
9a:5c:3b:0e:c3:68:57:4b:d6:3d:54:6a:fc:2e:c2:9b:82:8a:
e6:ae:f4:47:1d:8c:c7:37:90:c5:29:9e:6a:f7:67:e8:9e:f2:
a0:9f:0f:5c:af:4d:ed:9e:43:84:91:9a:7f:0b:a9:46:a3:02:
69:ef:25:e0:85:d1:91:8f:83:bc:db:fc:22:69:28:5a:81:85:
ae:53:24:5e:cd:df:8c:b6:3a:89:d1:f7:26:ca:65:8a:bc:6f:
e5:60:71:94:31:1f:0d:93:e3:80:73:57:c5:db:68:c7:01:ed:
93:45:24:2d:4a:b5:2d:92:09:6b:91:aa:28:a5:26:28:f8:88:
60:ec:fd:e3:be:26:4d:ef:0a:a6:70:98:d6:30:ed:ff:a1:08:
ad:c7:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:27:29 2026 by rpki-client