
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json)
Hash identifier: SO1MQ2EXWFNZmskUWd0ZEcmYhAD1EUnd+cFT/+yDpdU=
Subject key identifier: FD:8D:6C:C8:B7:D5:6F:D0:3D:8F:00:91:40:2A:BF:B1:76:D8:79:57
Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7
Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
Manifest number: 0185
Signing time: Wed 23 Sep 2026 04:28:30 +0000
Manifest this update: Wed 23 Sep 2026 04:28:30 +0000
Manifest next update: Wed 30 Sep 2026 04:28:30 +0000
Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: CSfvcDILhHT0sf+rfsoPQqa8YK9VinhW4O2862A0czU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl
rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
Validity
Not Before: Sep 23 04:28:30 2026 GMT
Not After : Sep 30 04:28:30 2026 GMT
Subject: CN=6ab3556e-fc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:80:26:62:8e:3d:88:fc:61:ec:7f:00:43:53:
f5:c7:a6:8a:a1:63:f2:87:94:97:44:03:42:4d:a5:
e4:88:c9:0e:eb:a4:1d:8a:20:90:84:6f:e7:e7:bc:
87:79:69:86:25:c7:95:cc:16:47:6b:42:e5:ba:74:
f3:e1:e4:21:76:13:9f:06:8a:d4:ed:d9:cf:cf:e8:
56:61:45:a9:be:da:a2:4d:19:06:ce:92:85:eb:23:
2b:9e:09:8b:9b:bd:74:ac:28:0f:c7:4f:f6:ad:22:
24:c2:ac:b2:65:e5:b1:16:97:10:9d:6d:c1:9c:01:
d2:2c:75:68:e4:76:75:3d:3a:20:64:e4:4f:4f:8c:
aa:23:0a:56:61:17:79:4e:55:cb:ce:a0:a5:26:eb:
eb:09:7f:4c:d8:9f:63:19:d0:ed:0e:04:3b:13:36:
b5:98:4b:5d:5a:71:f5:6f:7b:36:1f:18:ee:ea:6b:
20:92:ea:34:e6:75:03:c7:13:49:c2:8b:c8:2c:03:
ae:11:c6:65:85:fb:7d:aa:4c:63:e2:8e:7c:d9:fd:
1e:c9:0a:a7:9d:1b:3d:52:3e:d6:9c:66:10:b8:a4:
4d:b4:01:5f:f6:9d:14:82:60:90:9c:6d:7d:f9:49:
21:df:c8:0e:52:47:9a:4b:8c:81:e6:36:61:9c:e9:
02:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8D:6C:C8:B7:D5:6F:D0:3D:8F:00:91:40:2A:BF:B1:76:D8:79:57
X509v3 Authority Key Identifier:
keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:10:a2:f5:a2:94:cc:6d:fa:97:45:1c:e4:93:d2:6b:2d:f5:
94:a5:a3:50:89:83:05:5f:99:91:e1:c8:89:f8:34:85:3a:02:
69:e9:d0:ce:37:f5:e5:7a:e4:97:12:b8:90:d8:d0:74:a4:45:
3c:3e:eb:d5:36:a1:5b:9d:98:d8:9b:75:22:bf:09:cb:cb:76:
b2:1f:18:64:7e:63:57:88:69:9c:6e:be:b6:f2:64:04:90:83:
0d:cd:57:2c:89:07:87:6e:ea:26:36:ef:27:12:66:e8:e1:fe:
ac:d5:24:dc:67:2e:25:e9:7f:06:7b:1c:ea:a2:95:e2:3f:94:
f5:bd:42:e6:9d:11:2f:ca:b4:c8:b3:3b:1b:da:24:7a:6f:d5:
52:62:95:31:af:ac:35:32:a0:48:7e:24:3e:d6:18:5d:3b:a3:
06:bd:c4:ef:f6:6e:ee:87:46:1b:c7:84:45:e1:5b:6f:d1:f2:
51:30:6b:b8:38:ab:5d:34:97:08:9c:31:17:ab:e1:ee:4f:1e:
d4:84:12:bc:71:ca:f4:67:4c:a0:83:0f:bd:ae:27:3a:54:28:
cf:a1:df:5c:9f:10:da:94:75:52:44:30:00:7c:c8:e2:b0:62:
a7:82:cb:16:68:4f:7f:43:9c:52:28:57:5f:57:b9:3e:b9:1e:
bc:c4:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:25:15 2026 by rpki-client