
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json)
Hash identifier: +XQKxa01O55bgMc3SYqJMtsSvmrzL7H8cgjTLJlk3VA=
Subject key identifier: 97:39:18:43:59:58:5E:C6:2F:E2:C2:52:C6:12:45:9F:A0:E8:27:39
Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Certificate serial: 0E19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
Manifest number: 0E10
Signing time: Tue 22 Sep 2026 17:43:10 +0000
Manifest this update: Tue 22 Sep 2026 17:43:09 +0000
Manifest next update: Tue 29 Sep 2026 17:43:09 +0000
Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: A0WEYTD9tY48cJ4DFP+4OeACt7zLy3lgXKXJns8c3y4=)
2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: az5Wu3rdmwem1fp3sJ1LkEbrXCOkEOGTGhmGNaaRozA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl
rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3609 (0xe19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Validity
Not Before: Sep 22 17:43:09 2026 GMT
Not After : Sep 29 17:43:09 2026 GMT
Subject: CN=6ab2be2d-c1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:73:02:1d:de:53:54:12:ef:cf:de:7c:c2:
84:5c:37:50:c7:bf:7b:65:90:7d:2a:88:01:d4:51:
0a:18:b9:ef:e7:fe:3b:41:7d:eb:b6:38:7c:54:8b:
21:af:79:b0:c1:37:86:6b:6c:c8:01:c1:77:bb:72:
37:23:71:84:76:29:06:08:86:ac:f8:24:60:d7:0b:
9c:8b:98:3b:7a:f5:06:51:af:2a:5d:22:c6:f6:f2:
11:9f:ed:fe:f5:43:c9:1c:03:00:6e:58:a3:eb:50:
8a:18:60:34:ec:92:46:de:82:47:3a:be:7a:db:f7:
c4:2a:9c:6f:3a:bf:d6:89:14:1e:b7:f9:2a:7a:32:
07:56:63:57:aa:12:d3:60:0f:86:bc:1e:01:af:b7:
fa:ea:ff:5d:39:ec:aa:f3:ec:67:98:26:5d:43:2e:
d3:c6:c3:ed:8c:dd:53:12:2d:fa:f2:f5:29:13:3e:
5d:72:d3:98:c6:cf:d8:12:63:85:9f:5d:1e:78:0a:
dc:f2:b6:d1:38:79:90:27:24:f1:a4:69:7b:af:fd:
be:cd:91:57:60:02:be:e2:f4:40:3c:e5:2e:c3:62:
b3:fe:3b:f6:18:17:30:ae:4b:84:56:b7:9e:95:b3:
be:fa:be:f0:bb:09:a8:3b:f1:ce:c5:69:ea:8d:98:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:18:43:59:58:5E:C6:2F:E2:C2:52:C6:12:45:9F:A0:E8:27:39
X509v3 Authority Key Identifier:
keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d3:a3:39:9e:43:ea:59:5a:d1:e5:e6:3b:95:ce:e2:fa:56:
96:56:5e:63:ce:8c:a7:df:40:98:16:e1:be:f2:f6:d1:df:75:
9d:7d:c9:62:ce:3d:ef:f1:91:e8:85:cb:5e:f9:24:0e:98:81:
bb:5a:86:b9:de:01:78:ec:f3:ed:a7:f1:59:87:e6:c8:ff:f3:
f5:5c:a3:2c:16:bd:d3:14:e6:93:27:a6:99:31:ae:59:5f:04:
cd:80:44:85:5e:3a:3e:39:87:d7:2a:01:42:1e:46:af:5a:33:
9b:21:8a:80:02:a0:8a:93:7a:7a:50:af:2b:d0:22:03:4a:1c:
9a:79:d6:d7:6c:5c:43:23:65:79:38:b4:2b:eb:a2:89:78:b9:
4a:ae:60:78:b7:8d:f6:7d:f3:65:76:6c:49:49:0b:bd:bf:1f:
1e:6a:3d:08:00:b9:22:95:5a:67:5b:99:4a:44:63:a2:c9:63:
5f:29:8f:77:92:04:e5:a5:0b:ce:b3:5b:db:b8:4b:05:1e:97:
df:8d:2f:f0:ee:99:b7:0e:e7:62:e3:a9:c9:aa:2d:37:fa:5f:
a1:c8:3b:4e:f8:c2:76:b0:04:24:aa:18:d0:98:a3:7f:24:34:
a9:59:14:52:5f:01:4c:84:59:88:05:95:24:06:23:b1:e6:6b:
3b:3d:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:54:59 2026 by rpki-client