
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
File: g9YM-N6oAia4ByS83mcD0Q1lf_4.mft (raw, json)
Hash identifier: Ueiof3pWJu5S/gYZbOYjHp6w5C7Y+CYLj+xsZHHc/m8=
Subject key identifier: 37:EC:DC:FF:EB:05:D2:27:D3:47:13:88:B3:1D:3B:86:1D:87:AD:E2
Authority key identifier: 83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE
Certificate issuer: /CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
Certificate serial: 025A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
Manifest number: 082C
Signing time: Tue 24 Mar 2026 22:40:55 +0000
Manifest this update: Tue 24 Mar 2026 22:40:55 +0000
Manifest next update: Tue 31 Mar 2026 22:40:55 +0000
Files and hashes: 1: g9YM-N6oAia4ByS83mcD0Q1lf_4.crl (hash: wIdr4g3JLuwWECaJPbhyXP57aK+lqyZoK4bVQXpakjc=)
2: FC1D8B7A9C7C11ED96690F39C4F9AE02.roa (hash: gHCZaT3jtdgWwIgwr06dRhyEKK0JOD/GunxzEo5vooA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl
rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F7A1, serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
Validity
Not Before: Mar 24 22:40:55 2026 GMT
Not After : Mar 31 22:40:55 2026 GMT
Subject: CN=69c312f7-23fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:d5:d7:87:fc:d1:25:8e:cf:9c:ee:5a:2b:
53:dd:7b:73:11:bc:35:c8:19:c7:46:2b:6f:39:1e:
f6:c1:a4:5b:68:42:c1:0d:29:37:30:d3:19:9e:16:
1a:93:12:c1:dd:da:f5:b4:d0:59:1f:16:f0:ba:b6:
59:2f:c0:b0:46:65:d6:1f:92:31:e7:d4:30:db:27:
1b:fb:5d:4a:52:85:bb:7d:f2:29:fd:d3:27:92:0e:
3c:89:28:9d:30:98:a0:94:72:5d:9f:c8:e9:8b:aa:
c9:a6:bd:ff:40:ee:fc:cf:28:01:44:d5:28:4d:18:
e4:2d:fc:71:61:d2:f8:a0:2c:a0:a6:c4:7f:a0:33:
a0:4f:1f:a7:d8:71:f3:86:95:db:63:31:e4:83:c2:
66:69:7f:ae:e9:99:e4:f5:39:e6:2b:fd:cb:b7:39:
7c:78:08:1b:4a:b1:de:84:fd:5b:05:01:d1:62:e8:
b5:dc:32:bf:22:f7:d1:21:32:7c:be:70:72:27:53:
6e:7e:3e:06:e4:28:fc:59:88:fd:c6:cc:c5:b3:e9:
43:90:20:57:66:99:00:b2:35:6c:64:cd:bb:19:a1:
1d:3e:ae:67:8c:cd:19:8a:8a:bf:3f:8f:62:a1:c2:
6d:4e:26:72:27:97:22:97:eb:d1:82:b0:b0:5f:b1:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:DC:FF:EB:05:D2:27:D3:47:13:88:B3:1D:3B:86:1D:87:AD:E2
X509v3 Authority Key Identifier:
keyid:83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6a:9b:1a:0a:ea:f4:84:dd:57:a8:06:6a:c7:e8:08:7a:48:
f4:57:27:4a:4b:94:5d:0a:04:1c:c9:2d:db:13:25:1c:12:d2:
a2:a0:3c:0a:c2:49:d7:c1:9c:5a:fd:98:c1:cf:b1:91:7f:95:
f9:dc:3e:35:12:41:8d:0a:26:0a:73:30:4f:c3:5e:21:d3:df:
ff:3a:20:ce:e0:aa:49:2a:79:cf:9b:74:41:03:18:df:ab:67:
d9:8e:62:a9:cb:56:80:b6:8f:cc:63:67:41:43:ba:6f:d7:24:
a1:84:e4:9e:ee:bb:80:2b:ed:e5:4d:55:d8:04:b1:a8:88:25:
22:46:28:5c:e0:30:80:3f:e0:b5:fe:f3:09:8e:97:3e:94:f3:
62:42:fe:29:2a:7a:84:87:9c:be:69:56:10:61:20:0c:13:32:
44:2b:4b:b8:5e:58:03:0e:b5:f3:3c:0e:83:4b:a6:4e:fc:39:
59:06:f2:9e:69:b9:c6:e4:4c:4a:31:8a:32:1d:1e:32:ff:89:
79:48:77:29:3a:8d:f7:71:c0:22:da:97:71:a5:78:36:71:d3:
4c:cb:e2:ce:48:49:02:29:66:bf:10:b7:ac:0f:61:b0:64:c1:
8a:64:76:73:f0:92:ce:49:0b:fb:d1:c5:4a:2b:c0:e0:14:56:
6f:3a:0a:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY3QTExMTAvBgNVBAUTKDgzRDYwQ0Y4REVBODAyMjZCODA3MjRCQ0RFNjcwM0Qx
MEQ2NTdGRkUwHhcNMjYwMzI0MjI0MDU1WhcNMjYwMzMxMjI0MDU1WjAYMRYwFAYD
VQQDEw02OWMzMTJmNy0yM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0N/V14f80SWOz5zuWitT3XtzEbw1yBnHRitvOR72waRbaELBDSk3MNMZnhYa
kxLB3dr1tNBZHxbwurZZL8CwRmXWH5Ix59Qw2ycb+11KUoW7ffIp/dMnkg48iSid
MJiglHJdn8jpi6rJpr3/QO78zygBRNUoTRjkLfxxYdL4oCygpsR/oDOgTx+n2HHz
hpXbYzHkg8JmaX+u6Znk9TnmK/3Ltzl8eAgbSrHehP1bBQHRYui13DK/IvfRITJ8
vnByJ1Nufj4G5Cj8WYj9xszFs+lDkCBXZpkAsjVsZM27GaEdPq5njM0Zioq/P49i
ocJtTiZyJ5cil+vRgrCwX7G2BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfs3P/r
BdIn00cTiLMdO4Ydh63iMB8GA1UdIwQYMBaAFIPWDPjeqAImuAckvN5nA9ENZX/+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0
MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0FpYTRCeVM4M21jRDBRMWxm
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c5WU0tTjZvQWlhNEJ5UzgzbWNEMFExbGZfNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0Fp
YTRCeVM4M21jRDBRMWxmXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtWqbGgrq9ITdV6gGasfoCHpI9FcnSkuUXQoEHMkt2xMlHBLSoqA8CsJJ18Gc
Wv2Ywc+xkX+V+dw+NRJBjQomCnMwT8NeIdPf/zogzuCqSSp5z5t0QQMY36tn2Y5i
qctWgLaPzGNnQUO6b9ckoYTknu67gCvt5U1V2ASxqIglIkYoXOAwgD/gtf7zCY6X
PpTzYkL+KSp6hIecvmlWEGEgDBMyRCtLuF5YAw618zwOg0umTvw5WQbynmm5xuRM
SjGKMh0eMv+JeUh3KTqN93HAItqXcaV4NnHTTMvizkhJAilmvxC3rA9hsGTBimR2
c/CSzkkL+9HFSivA4BRWbzoK/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:11:31 2026 by rpki-client