
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
File: G395gdniwsMPbyw0hxophthfiQ4.mft (raw, json)
Hash identifier: mWo2k2IwHUij6hyjtjKKa7GWPfkZaMAvSd/57uTkgQc=
Subject key identifier: 7D:46:B6:2E:DF:84:CA:E5:B1:29:3B:57:6E:E9:23:5E:52:32:7B:41
Authority key identifier: 1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Certificate issuer: /CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Certificate serial: 05D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
Manifest number: 05D1
Signing time: Wed 22 Jul 2026 23:47:18 +0000
Manifest this update: Wed 22 Jul 2026 23:47:18 +0000
Manifest next update: Wed 29 Jul 2026 23:47:18 +0000
Files and hashes: 1: G395gdniwsMPbyw0hxophthfiQ4.crl (hash: hKWrEoImqf43D+eBd62NfxpctUk/aM3Wn9/Q2fgBFdM=)
2: 5D7779A6108A11EC9E1F3D49C4F9AE02.roa (hash: MARAw22DhIJFp/wfG19G5Gz01JcFPueQuJN4T376eTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170AE9, serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Validity
Not Before: Jul 22 23:47:18 2026 GMT
Not After : Jul 29 23:47:18 2026 GMT
Subject: CN=6a615686-6f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:6a:99:a8:04:90:41:f2:0e:0a:e7:af:ff:
1f:b5:fe:02:04:ab:f1:0c:48:02:b4:7e:9d:11:48:
fb:45:0c:4a:d8:4a:46:2b:b3:10:db:b8:41:53:e4:
9a:df:20:fe:9d:37:f7:54:45:e9:3e:c9:d0:9e:bf:
68:71:f9:c9:d1:24:83:b7:24:b0:bf:58:29:a4:9a:
1e:6e:26:30:01:ec:38:fc:d7:be:c8:46:07:f4:fb:
7a:b6:52:8b:4d:be:97:08:31:1d:65:d3:08:c2:42:
98:32:5b:56:71:28:cd:33:55:5d:2e:3b:2f:f9:0a:
13:77:04:db:9d:c0:35:3f:5d:29:ef:f9:94:bc:49:
e9:d8:66:6d:23:bb:b8:ab:bb:0f:dd:0e:9b:17:20:
83:2d:96:b5:87:c5:59:9c:33:95:ce:cd:df:45:4f:
ca:1b:ae:bf:a7:39:97:c9:8f:ae:cf:f9:ff:86:de:
54:53:81:98:05:3d:e5:73:1c:d1:b2:8e:b3:ee:21:
63:b6:e5:48:b3:97:ec:27:a5:60:77:93:20:9b:a1:
98:c3:4a:e2:b2:d5:c1:3d:9f:8b:48:60:16:93:e0:
84:e2:27:4f:3e:75:d6:9c:f7:ec:60:61:2d:0f:00:
44:68:a1:17:9c:cc:91:b9:e6:9e:0d:95:1b:ea:fd:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:46:B6:2E:DF:84:CA:E5:B1:29:3B:57:6E:E9:23:5E:52:32:7B:41
X509v3 Authority Key Identifier:
keyid:1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:63:6f:e1:cd:07:00:e1:73:45:6e:16:16:64:13:39:29:85:
a0:d9:fa:3c:fb:d3:9a:9e:a8:1c:24:e0:42:c5:09:91:96:40:
3b:49:0c:60:9f:b6:70:85:da:e8:be:7a:d0:26:7e:68:e5:1d:
c8:0c:18:3a:56:74:f0:ae:ae:da:fb:17:e6:44:92:28:e0:eb:
5c:9b:57:92:32:50:fa:02:71:c4:7c:56:ae:00:1f:ea:42:f1:
41:67:6c:f0:6b:b6:dd:93:f2:6f:f9:89:c0:c0:97:aa:c0:2c:
1e:ca:b8:c3:25:14:f3:1f:00:93:4f:37:78:5b:73:47:11:09:
3d:94:82:14:d5:6e:dc:f3:3c:68:fd:9a:be:ed:12:c0:12:4a:
e3:d6:cc:e9:5a:3a:8b:87:b9:9c:cd:ed:61:71:15:57:bd:c6:
3d:eb:67:a0:bb:0e:78:23:71:63:9e:ca:56:f9:e6:18:0e:cb:
69:67:9c:bc:62:a2:e3:80:26:00:ec:69:9a:08:72:cd:29:fd:
e8:02:fb:f4:69:77:d2:40:32:11:72:8d:66:67:15:e8:d6:e3:
ba:c3:fc:28:4c:ba:b7:f0:52:39:dc:0f:6a:98:3a:de:cc:fa:
30:4d:2e:cf:a7:b4:e1:19:68:71:18:7b:cd:d0:27:7e:d6:20:
26:3f:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:42 2026 by rpki-client