
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
File: G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft (raw, json)
Hash identifier: J5yysmlv5UWPAxR+8obyW7w+I7Kn8Ph3vxZycXLWyxk=
Subject key identifier: C8:93:43:D4:71:B8:52:7F:C6:12:F5:87:95:7E:6F:0A:8A:9F:E5:E5
Authority key identifier: 1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1
Certificate issuer: /CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
Manifest number: 01F8
Signing time: Sun 15 Nov 2026 03:34:18 +0000
Manifest this update: Sun 15 Nov 2026 03:34:18 +0000
Manifest next update: Sun 22 Nov 2026 03:34:18 +0000
Files and hashes: 1: G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl (hash: FAvkoZ9t7qtsQtiwFg0Aw5Qu6du2dBWtSTmLqO65shA=)
2: 9E132FF6E82711EEA7DD994FC4F9AE02.roa (hash: B26dPX7b/Yjt4TuSkN2bNnJztJZLAH1RdhqMlSo1OgI=)
3: B5EC27DC80F411F1A8E5D2AB65A30FBC.roa (hash: HDAMBq9cGBoodO1E3jLw/cK2FtT7+fINXvRzCe1mDLw=)
4: B51FD00AE82711EEB8A9D24FC4F9AE02.roa (hash: 3cHCQj/rr6yYx0ybKITdR2Z1FEVXIoTC8cGCbWIYYI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl
rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 03:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188811, serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
Validity
Not Before: Nov 15 03:34:18 2026 GMT
Not After : Nov 22 03:34:18 2026 GMT
Subject: CN=6af9283a-18f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:60:c4:a8:40:15:21:98:d9:66:53:94:19:d6:
59:6d:6b:4b:c5:e2:1c:33:e7:59:98:bb:74:ab:e8:
82:e1:bf:48:62:46:de:6b:c8:03:12:91:48:76:07:
d3:3d:e4:d7:59:21:3f:17:33:25:82:b1:d1:85:f8:
a5:1d:20:3a:54:b7:63:0f:69:ad:79:c7:be:82:e2:
a5:d3:11:e0:15:b6:84:9c:53:e9:07:83:d1:c8:49:
85:52:26:57:dd:60:c7:0c:8d:89:34:22:d0:f1:3b:
81:78:74:a0:c9:93:8f:54:87:9a:4b:c9:4f:ca:43:
06:0a:5b:98:2a:cf:9a:cf:96:50:0d:d8:c1:83:d2:
ab:e1:15:b5:6c:99:5d:4f:28:8d:cf:c3:6b:cb:4f:
f1:3b:ad:20:cb:e8:8c:c0:05:a6:06:49:cc:19:82:
2f:9d:e3:1b:b4:36:d3:3a:0c:06:fe:9d:3d:5e:64:
60:bd:79:4f:d1:65:be:fb:0c:18:42:40:00:61:07:
0c:56:46:b2:a6:f9:0f:da:9e:34:fe:26:01:b0:54:
da:6a:11:cc:5f:cf:1f:c9:0d:af:0b:f1:28:6e:25:
94:2b:1c:9c:e8:10:4b:76:f1:f4:51:5c:1d:61:d5:
f7:f0:36:08:90:b1:37:fa:9a:f3:4f:85:7b:62:4e:
4e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:93:43:D4:71:B8:52:7F:C6:12:F5:87:95:7E:6F:0A:8A:9F:E5:E5
X509v3 Authority Key Identifier:
keyid:1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ef:cb:c8:9d:b5:f3:38:25:86:17:57:ec:d3:d1:ca:c2:bc:
78:0b:b5:55:3c:c9:d5:74:95:0d:f6:8c:9a:b0:7c:e6:53:bf:
2a:43:a8:6c:10:03:b5:3c:ac:9b:9e:94:76:31:db:93:a6:26:
ac:25:c8:fc:4d:a7:78:86:c2:89:c4:05:59:b4:d8:1b:6e:35:
17:fd:8a:51:05:65:5c:b4:11:90:a0:65:be:de:38:bb:02:33:
6d:53:fc:af:e4:b6:05:60:56:0c:f2:26:6e:c1:e4:1f:fb:9c:
b8:de:fc:00:e6:4e:4a:13:b2:d3:5f:8a:c4:73:d7:37:6c:48:
ed:df:e2:28:b7:d5:bd:30:24:91:08:01:d5:8b:90:38:4d:95:
b9:f9:35:41:9b:25:e6:78:4c:a5:78:39:be:a6:4c:ee:91:71:
15:8a:aa:de:74:68:04:84:bb:b3:4f:48:84:96:66:9f:cf:e0:
d7:35:99:53:de:87:60:8a:96:a3:fc:1a:09:2f:5a:4d:e8:a2:
83:f3:58:f1:12:b8:4b:6e:36:1a:2f:06:8a:cc:89:d0:3e:13:
b2:c3:03:44:24:c5:f2:d4:70:27:38:5a:f8:55:88:bb:48:e9:
54:4d:a0:bb:a5:a9:ad:4e:84:1f:e1:0c:62:58:9a:d8:67:dd:
51:f8:48:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:50:41 2026 by rpki-client