
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json)
Hash identifier: yo1inyUrJU4ojRmLQnvLxl9oqun2l6CDKU2ndyheh5A=
Subject key identifier: 9B:CA:CC:9C:BC:C5:2D:6E:21:F6:5D:39:4F:23:B9:7D:29:EA:FF:12
Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Certificate serial: 05E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
Manifest number: 05CD
Signing time: Wed 22 Jul 2026 23:49:46 +0000
Manifest this update: Wed 22 Jul 2026 23:49:46 +0000
Manifest next update: Wed 29 Jul 2026 23:49:46 +0000
Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: GGYptVVQOUxNvzVgfuwgYJWgd6gvfVyc0992OgwHpbE=)
2: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: 49abEkg0KhXLphiSvkFxFB5/cBrDujbbgSy2255f/a8=)
3: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: 2+WcS7JB0+agxKcQ22MQ04J/yCONuIWJ6zoWcxPIlh0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl
rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1504 (0x5e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Validity
Not Before: Jul 22 23:49:46 2026 GMT
Not After : Jul 29 23:49:46 2026 GMT
Subject: CN=6a61571a-07b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:cb:c9:44:9b:f4:26:4f:3e:84:b3:6d:fa:
bc:ae:51:c6:35:03:35:e0:7c:a7:0d:8f:ec:3c:8f:
4a:e6:9c:02:f6:d9:24:6d:97:37:bf:0f:66:84:57:
58:81:9a:d4:05:bd:9f:ed:4e:1a:50:26:3d:db:b5:
c1:89:29:6b:07:ba:97:52:42:f7:bd:0c:e3:6a:ec:
1e:82:cb:9b:af:3a:2e:37:a1:3e:03:cd:5c:03:4e:
ae:f2:d0:7d:88:0c:e5:90:1a:89:10:b3:61:f4:10:
c4:73:dc:7c:cc:96:ec:bb:f4:d4:73:91:1b:5e:bd:
fc:42:c8:d0:e1:d5:2b:74:e6:2a:76:5a:84:ae:35:
55:b1:cd:03:d1:d9:72:5d:69:52:b3:f2:6f:f1:4c:
0e:40:1c:7a:57:7c:99:8a:ad:74:89:15:92:71:50:
c3:a9:69:17:a5:ff:1f:ec:6d:ad:b6:d1:78:3d:25:
97:87:29:2a:f6:dc:82:a9:de:d5:d5:b9:cc:3d:6e:
04:22:93:2f:bd:42:1c:62:25:f8:5e:81:f8:0d:15:
09:8c:6c:b2:e9:e9:e2:75:4b:ef:62:f6:12:1d:af:
fd:cc:02:3f:60:f0:36:20:d8:5a:00:10:ce:22:6d:
9a:7f:0f:af:23:cb:71:6d:49:55:03:e0:6c:9d:78:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CA:CC:9C:BC:C5:2D:6E:21:F6:5D:39:4F:23:B9:7D:29:EA:FF:12
X509v3 Authority Key Identifier:
keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:24:f5:74:07:ca:d6:e2:dc:ef:48:be:ca:13:ba:db:8f:b8:
96:72:ad:ad:b3:f8:1f:04:a5:31:d6:81:8f:1d:ab:f2:d1:15:
fc:bc:71:70:6f:ac:8b:2f:1a:b5:b9:41:c3:bc:31:29:aa:98:
f0:65:1d:7c:9d:a5:6d:42:e7:ba:19:ab:9a:ef:4c:97:71:f3:
bb:92:f0:54:a4:d8:95:61:85:d7:30:62:f3:78:81:b9:78:83:
97:31:56:b6:9e:b2:b2:d2:c9:2c:5f:61:59:aa:91:70:57:61:
05:ca:e8:32:e2:bb:8c:5d:23:f6:32:1e:59:ee:12:ef:7e:30:
87:e5:51:eb:2b:64:d7:1b:b9:12:7f:b3:11:35:69:a1:14:9b:
91:2d:2d:ad:58:68:91:32:3f:58:84:c6:fb:af:d2:86:58:7d:
37:fe:ae:85:3f:ab:1d:e9:7b:c6:7e:5c:96:45:fb:84:f1:19:
9d:8d:78:b3:49:c4:73:26:52:59:75:1a:9e:3b:8f:f0:14:50:
ef:18:a0:ae:58:13:a2:24:21:88:7d:7e:c5:87:87:69:89:c6:
ad:f4:41:16:72:ff:8a:33:32:ac:fb:1c:f0:ae:84:c8:ab:5f:
b1:14:3c:50:44:34:b7:b5:1b:81:38:3c:d1:bf:7e:2c:9b:90:
c5:9b:77:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:28 2026 by rpki-client