
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
File: g9YM-N6oAia4ByS83mcD0Q1lf_4.mft (raw, json)
Hash identifier: cwiBdEWoFNEUHfBgh2ws+4I53ZoUgDUlBwL1vKG/+Bc=
Subject key identifier: C2:30:C0:1C:CF:1A:0B:ED:8C:4C:47:F3:90:09:3F:CC:A9:A3:D6:99
Authority key identifier: 83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE
Certificate issuer: /CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
Certificate serial: 0273
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
Manifest number: 085E
Signing time: Tue 12 May 2026 23:00:18 +0000
Manifest this update: Tue 12 May 2026 23:00:17 +0000
Manifest next update: Tue 19 May 2026 23:00:17 +0000
Files and hashes: 1: g9YM-N6oAia4ByS83mcD0Q1lf_4.crl (hash: rXtHAzfZuIiioZLPdscC3Vpy81T5zRsTC3TlbmNl68o=)
2: FC1D8B7A9C7C11ED96690F39C4F9AE02.roa (hash: gHCZaT3jtdgWwIgwr06dRhyEKK0JOD/GunxzEo5vooA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl
rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 627 (0x273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F7A1, serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
Validity
Not Before: May 12 23:00:17 2026 GMT
Not After : May 19 23:00:17 2026 GMT
Subject: CN=6a03b102-2ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:2b:e7:c8:d0:ee:fe:0d:b4:00:c1:f8:8b:
63:6d:20:b4:cf:55:48:e1:86:2e:67:fd:64:b7:81:
9c:d8:42:8f:a5:e2:8e:dc:88:b7:69:e6:15:9e:6a:
32:da:2f:69:a5:20:7d:d7:63:29:f1:e7:8a:8f:da:
5f:bc:77:ca:75:d3:88:69:17:1f:cd:77:68:58:d7:
81:86:0a:f7:39:bc:ff:dc:76:a2:ea:e6:a6:e6:c2:
84:c9:59:59:f9:00:b7:0d:c2:0a:ea:1e:ef:cf:4f:
68:8d:e1:e1:20:fe:26:10:28:cd:6d:03:4e:b6:83:
dc:9f:b3:77:28:61:55:b0:b7:dc:9d:ee:18:5d:ec:
b0:b4:5b:15:ad:e2:5c:97:62:4d:99:48:ea:11:06:
7b:ef:3b:d1:8e:07:64:ea:c1:35:74:60:02:e7:5b:
09:80:6a:97:f5:ac:1b:fe:8b:6b:8e:1b:1f:5b:f1:
3d:2d:af:79:91:2b:30:ff:d8:3e:57:d2:87:de:4c:
22:be:30:c4:a1:26:e0:2a:fb:36:ff:3c:74:d4:00:
55:6c:b9:97:2a:78:f1:29:e9:f2:bc:c6:86:b0:5e:
12:25:bc:f9:3f:a2:09:80:39:f1:26:d8:d4:e6:d3:
31:fa:e8:7c:1b:6e:58:e0:4b:98:06:1d:77:99:ce:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:30:C0:1C:CF:1A:0B:ED:8C:4C:47:F3:90:09:3F:CC:A9:A3:D6:99
X509v3 Authority Key Identifier:
keyid:83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:f4:07:bd:28:cf:15:88:0e:18:8d:ec:eb:96:e2:3a:94:7c:
b4:e6:a8:c5:cc:72:f6:63:ba:cf:08:81:15:5a:fc:a0:4f:43:
2e:7f:fa:24:c4:e5:98:b1:cb:7c:c9:e4:13:ff:58:2d:1d:c7:
ec:bc:ec:9f:37:3b:d7:06:24:48:3b:9d:c6:2f:08:3f:5a:fb:
df:6a:40:f4:66:ab:43:78:1d:42:ee:c2:35:23:2c:b1:56:98:
bc:94:5a:e3:e4:a1:0a:df:4c:e6:22:0f:0d:2d:e5:b5:14:10:
71:48:f2:93:39:85:bc:92:12:2b:ce:e9:c0:aa:57:5a:c7:e4:
cb:db:84:48:13:2f:56:01:0f:c3:17:da:df:e8:61:72:84:bb:
d0:73:e3:5d:44:ca:2c:8c:29:c4:d1:22:84:66:81:e9:0b:ee:
29:3a:f2:64:13:e5:e7:75:53:1a:e4:68:a9:36:12:d1:7b:91:
cd:25:b5:3f:a1:e5:94:32:4f:5b:e2:fe:64:10:2c:e6:ab:22:
67:14:26:74:e8:d5:6f:a8:f1:19:b1:2b:94:c2:40:99:41:b1:
6b:c2:f6:e8:59:93:4b:31:31:90:eb:4f:80:3d:94:7b:24:42:
66:09:6e:21:ca:68:ce:9f:b7:86:26:8b:0b:80:59:78:ec:e1:
fb:01:c2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:46:22 2026 by rpki-client