
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
File: G395gdniwsMPbyw0hxophthfiQ4.mft (raw, json)
Hash identifier: tbTAiZBrXGCk9/JL76ZHaSOATfyonKCT36aeyEOeQ7A=
Subject key identifier: 83:26:58:3B:58:91:C5:E6:35:FF:B1:9D:89:35:E2:D7:D2:0B:57:18
Authority key identifier: 1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Certificate issuer: /CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Certificate serial: 05F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
Manifest number: 05F2
Signing time: Thu 24 Sep 2026 22:48:26 +0000
Manifest this update: Thu 24 Sep 2026 22:48:25 +0000
Manifest next update: Thu 01 Oct 2026 22:48:25 +0000
Files and hashes: 1: G395gdniwsMPbyw0hxophthfiQ4.crl (hash: XDkuCxZzNKIKC/6QwsEy1Mx74ts8PBL4a9Bi/q8p7H8=)
2: 5D7779A6108A11EC9E1F3D49C4F9AE02.roa (hash: MARAw22DhIJFp/wfG19G5Gz01JcFPueQuJN4T376eTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1529 (0x5f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170AE9, serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Validity
Not Before: Sep 24 22:48:25 2026 GMT
Not After : Oct 1 22:48:25 2026 GMT
Subject: CN=6ab5a8ba-42d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:08:97:9a:05:05:0d:76:36:65:86:ae:07:
ec:64:e3:b7:37:ac:04:95:d9:a8:3a:20:3f:0d:56:
27:92:11:3f:6d:d8:9c:37:a0:c2:99:71:c3:c9:36:
b5:a5:2b:d9:bf:f0:6a:e8:70:88:5f:a4:fc:de:f9:
db:98:13:89:c6:15:01:8c:bc:fc:cf:35:51:20:de:
9a:48:b5:f9:80:e7:58:78:64:60:b2:f1:b2:58:e3:
29:6a:e7:7d:6a:7c:18:7c:b1:c7:91:b2:e8:5b:58:
7f:44:f0:4a:d7:ea:21:c5:52:a3:86:12:db:97:cb:
76:87:ca:1d:22:58:65:7a:79:f6:7d:e2:33:a9:62:
4b:ef:ef:10:61:47:ee:e4:c2:a6:46:79:dc:80:f1:
b5:16:16:1d:cf:c5:97:59:6c:ec:fd:4f:73:6d:35:
98:d0:c7:51:5c:89:1e:d0:45:ec:79:a0:a1:d1:9e:
07:97:e3:e1:5e:be:b0:ff:9a:6d:49:e2:27:24:25:
04:3f:90:95:26:1c:88:52:9c:0c:28:8a:e0:17:8b:
55:97:35:8c:29:d5:16:d9:76:ec:59:35:2c:60:23:
38:4b:7e:7f:4e:26:2c:98:3a:b0:00:27:8e:34:d8:
78:4e:37:b1:d3:c4:7f:c2:da:08:6b:7a:96:5a:9c:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:26:58:3B:58:91:C5:E6:35:FF:B1:9D:89:35:E2:D7:D2:0B:57:18
X509v3 Authority Key Identifier:
keyid:1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:08:3e:c1:d0:c5:02:81:6a:9e:83:eb:df:34:37:4a:f6:28:
88:4c:85:d9:da:bb:cf:d9:fa:0b:ab:bb:11:7c:ec:86:d6:19:
63:85:19:34:50:65:54:45:55:2f:50:ad:88:4d:71:b1:a7:c9:
26:25:b8:60:02:ef:80:b5:cb:90:39:e8:13:98:ed:8c:31:bf:
38:fe:f8:23:56:18:74:fb:b9:1d:36:e3:a1:e8:ac:0d:08:cf:
0a:44:ca:0c:a5:32:68:ce:58:b3:47:32:2d:6d:26:6c:15:a1:
16:67:b4:75:d0:2e:b2:ae:b1:4b:86:75:8d:ec:44:17:00:fa:
0e:36:07:10:c1:ac:6f:61:66:0d:42:72:bb:6b:f0:b8:3f:5f:
de:bf:89:f4:89:f9:f2:81:10:6d:f6:ab:bb:5e:cf:8a:53:33:
59:54:ea:65:e7:84:6d:50:be:32:fc:e3:93:a1:36:4c:9f:e4:
67:e6:c3:31:2d:54:92:5d:a0:8c:7e:be:c2:17:e9:24:7f:b3:
c0:92:cb:44:e0:97:48:2c:6e:bd:32:2e:d1:f0:1e:89:f0:bb:
54:45:fa:59:56:72:00:4e:4b:7c:1c:63:15:6f:8f:49:21:d3:
31:5c:44:92:fb:7e:37:5a:59:72:33:e2:68:b7:37:ae:9b:a6:
8b:b3:42:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBBRTkxMTAvBgNVBAUTKDFCN0Y3OTgxRDlFMkMyQzMwRjZGMkMzNDg3MUEyOTg2
RDg1Rjg5MEUwHhcNMjYwOTI0MjI0ODI1WhcNMjYxMDAxMjI0ODI1WjAYMRYwFAYD
VQQDEw02YWI1YThiYS00MmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxREIl5oFBQ12NmWGrgfsZOO3N6wEldmoOiA/DVYnkhE/bdicN6DCmXHDyTa1
pSvZv/Bq6HCIX6T83vnbmBOJxhUBjLz8zzVRIN6aSLX5gOdYeGRgsvGyWOMpaud9
anwYfLHHkbLoW1h/RPBK1+ohxVKjhhLbl8t2h8odIlhlenn2feIzqWJL7+8QYUfu
5MKmRnncgPG1FhYdz8WXWWzs/U9zbTWY0MdRXIke0EXseaCh0Z4Hl+PhXr6w/5pt
SeInJCUEP5CVJhyIUpwMKIrgF4tVlzWMKdUW2XbsWTUsYCM4S35/TiYsmDqwACeO
NNh4Tjex08R/wtoIa3qWWpx57QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMmWDtY
kcXmNf+xnYk14tfSC1cYMB8GA1UdIwQYMBaAFBt/eYHZ4sLDD28sNIcaKYbYX4kO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFFOS8wOTEyMDM4MDEw
ODYxMUVDODFFNzcwM0ZDNEY5QUUwMi9HMzk1Z2RuaXdzTVBieXcwaHhvcGh0aGZp
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0czOTVnZG5pd3NNUGJ5dzBoeG9waHRoZmlRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEFFOS8wOTEyMDM4MDEwODYxMUVDODFFNzcwM0ZDNEY5QUUwMi9HMzk1Z2RuaXdz
TVBieXcwaHhvcGh0aGZpUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHwg+wdDFAoFqnoPr3zQ3SvYoiEyF2dq7z9n6C6u7EXzshtYZY4UZNFBlVEVV
L1CtiE1xsafJJiW4YALvgLXLkDnoE5jtjDG/OP74I1YYdPu5HTbjoeisDQjPCkTK
DKUyaM5Ys0cyLW0mbBWhFme0ddAusq6xS4Z1jexEFwD6DjYHEMGsb2FmDUJyu2vw
uD9f3r+J9In58oEQbfaru17PilMzWVTqZeeEbVC+Mvzjk6E2TJ/kZ+bDMS1Ukl2g
jH6+whfpJH+zwJLLROCXSCxuvTIu0fAeifC7VEX6WVZyAE5LfBxjFW+PSSHTMVxE
kvt+N1pZcjPiaLc3rpumi7NC/Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:24:38 2026 by rpki-client