
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
File: G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json)
Hash identifier: hrRwg/ar6uX8U5pZlsJZP3Lh2pt68KUgS98BR/3CoI8=
Subject key identifier: 12:0E:DD:A5:91:FB:14:9A:65:57:3F:AF:D7:26:3E:02:9E:8C:0F:B0
Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
Certificate issuer: /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
Manifest number: 9C
Signing time: Wed 23 Sep 2026 07:05:33 +0000
Manifest this update: Wed 23 Sep 2026 07:05:33 +0000
Manifest next update: Wed 30 Sep 2026 07:05:33 +0000
Files and hashes: 1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: L7bnZABoGwI98dr+LUbzH6FuJ3E+XL9lB7IsPbb8FgA=)
2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: IhKjrimtkW5GZgmr5nVxZh5rfh7SBgszAIZRuKiFWrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Validity
Not Before: Sep 23 07:05:33 2026 GMT
Not After : Sep 30 07:05:33 2026 GMT
Subject: CN=6ab37a3d-9307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:10:e0:ae:40:11:25:51:8d:fa:a4:cd:4b:
52:6f:54:86:1b:e9:a6:83:1c:dc:28:ed:b0:c1:58:
16:1b:f1:ae:81:76:6c:f3:67:c5:0b:26:52:7a:52:
1b:93:c8:0f:32:fe:1a:59:7f:ee:03:a4:0f:92:2e:
ce:c1:2e:c7:0a:2a:9d:69:e5:b7:f1:d9:5f:b5:a9:
79:29:59:af:24:10:eb:80:35:38:29:95:2d:5a:9d:
73:74:06:91:ed:33:9f:71:57:2c:91:3b:5e:7d:bd:
02:17:5d:d4:8b:0c:f7:1b:09:bb:a5:45:85:30:fb:
3f:8a:a3:2d:50:aa:09:82:29:19:6a:58:59:92:58:
87:cd:43:52:8d:1e:5d:83:37:0a:5b:88:14:d4:59:
6e:f9:ec:2b:f8:5e:d7:fd:a6:25:78:38:e5:99:53:
b8:74:f8:11:84:25:e2:0b:97:9a:a7:db:e2:57:75:
57:bb:35:06:b0:d4:e3:2e:64:5a:7d:5d:00:94:17:
c5:fc:c7:37:63:d6:cd:04:e5:e8:86:39:50:0e:8d:
ea:fa:f8:4c:02:5c:a3:f3:d4:e2:83:42:55:e5:0e:
b4:dd:4d:21:1e:72:1c:b2:0b:e1:d9:1f:75:23:c9:
09:ab:f6:cd:9d:d5:b7:bf:4d:71:56:f1:d8:60:e8:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0E:DD:A5:91:FB:14:9A:65:57:3F:AF:D7:26:3E:02:9E:8C:0F:B0
X509v3 Authority Key Identifier:
keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c2:4a:e6:49:0f:fe:c0:90:73:b8:76:a3:fb:e1:f1:09:7c:
5c:f1:c2:35:1e:37:ad:e5:31:ee:58:ba:10:4d:9a:69:4e:18:
39:47:22:30:05:57:8e:bf:b9:03:89:17:f5:02:ba:c4:a5:d9:
41:e7:ac:d6:6b:38:f6:26:2c:3e:64:74:52:31:9a:de:06:ae:
44:4c:60:ed:f9:00:f4:c3:a2:b8:a3:74:d7:bd:72:dd:0b:a0:
a2:3d:2c:31:f7:d0:ae:c7:b3:bd:66:ad:1c:0d:d5:2c:72:ff:
0c:c8:ce:b0:d8:60:71:af:9a:00:ea:84:d6:47:75:35:be:23:
dc:8c:95:1f:0b:de:27:20:77:28:7f:2a:56:ff:8b:b5:db:fe:
89:6b:6e:fb:ac:e4:0c:d9:48:58:97:f5:75:68:2a:c4:c9:cb:
26:85:3f:42:4c:8e:66:43:9e:b4:21:72:d5:f1:57:69:c0:73:
c4:b0:1b:9e:93:78:0d:7a:26:5d:bd:b6:88:7a:8a:8c:85:b3:
d1:83:b2:7b:9d:8e:df:f7:12:b1:ff:a8:dc:23:f4:a9:3b:de:
84:80:b2:6c:dd:cb:8c:f0:31:69:13:40:6d:89:84:39:3d:42:
ca:7e:c0:eb:47:a9:ab:75:fb:7f:ef:3b:ca:f0:88:3d:7d:f9:
64:b4:04:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:04:23 2026 by rpki-client