
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
File: G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json)
Hash identifier: 3PcNHtmSwnnnw/J80mtEtw8p5imbw/QGzCphFHBj13U=
Subject key identifier: DF:88:E0:A7:2A:82:3E:E1:0E:37:05:76:C2:5C:01:B9:2D:5B:84:BA
Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
Certificate issuer: /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
Manifest number: C8
Signing time: Mon 27 Jul 2026 08:58:52 +0000
Manifest this update: Mon 27 Jul 2026 08:58:52 +0000
Manifest next update: Mon 03 Aug 2026 08:58:52 +0000
Files and hashes: 1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: DEPmlHopPap4b27K5Fde1yMz6pW680aUIuatRwB5jKc=)
2: 6D18C6E88FF311F0B3309340C4F9AE02.roa (hash: lELwYfCJ8QLJoPWBTmeafMYkQU/nJlsMXebmLAieoRc=)
3: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: 0fTr8Ky2ks1lTkMxL9IKSz1oQnIZMQcWNBUaHcz+NfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Validity
Not Before: Jul 27 08:58:52 2026 GMT
Not After : Aug 3 08:58:52 2026 GMT
Subject: CN=6a671dcc-a362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:6f:1c:82:e3:1d:ca:55:f3:af:ac:45:24:
30:b2:00:ad:ef:55:de:0e:b7:cb:bc:73:b4:aa:1d:
dd:df:26:d3:92:cd:96:aa:75:ab:90:da:5c:58:04:
5e:ff:1f:f1:b6:f2:20:be:4c:1c:39:8e:66:33:c1:
61:35:5f:26:32:36:6b:bf:ee:a5:57:d1:d6:d5:bf:
59:17:d5:16:c5:e7:3b:63:f4:a5:2d:05:55:52:5e:
bf:19:bf:d9:d6:d4:71:2e:94:56:9d:13:97:0d:80:
31:7b:49:b3:1a:66:eb:00:2c:a9:66:43:93:75:81:
44:cd:2d:22:63:26:84:33:6d:bd:c1:70:13:b6:44:
83:72:48:23:07:dc:55:5d:9e:87:91:ef:3b:70:21:
19:f9:69:24:2b:e9:69:88:12:ba:fa:0d:75:26:2c:
7b:1c:39:bd:6b:11:55:fa:d9:28:99:6f:20:43:a0:
62:7c:9a:1a:a9:a0:b7:4f:48:bc:1a:c0:f8:8a:9e:
63:0c:a8:59:b7:48:c3:a0:1e:b8:28:03:14:86:72:
0d:d8:82:df:15:d2:61:7b:45:a5:d5:0d:3f:ed:36:
e8:a5:84:26:a9:38:ea:ea:37:29:b6:d9:f8:64:ad:
50:c4:a4:f0:04:00:a2:9b:8d:24:66:95:08:15:68:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:88:E0:A7:2A:82:3E:E1:0E:37:05:76:C2:5C:01:B9:2D:5B:84:BA
X509v3 Authority Key Identifier:
keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4a:25:9a:20:a9:f4:dc:38:40:f1:be:12:f7:63:14:a8:20:
75:7c:b0:4d:de:c4:df:fa:78:5f:aa:c8:c1:16:af:c6:80:27:
b1:86:12:5b:43:17:ff:b9:06:84:1e:32:a1:e8:18:56:f6:99:
b8:11:fc:8a:cf:18:c4:7f:10:fe:18:7d:ac:a7:1c:c6:13:ac:
49:30:9d:19:2a:84:9a:16:fd:15:69:cb:bf:14:5e:03:0a:5f:
22:c0:aa:83:ad:f3:46:4b:18:3b:d8:17:89:68:d0:96:68:77:
bd:03:73:33:f3:77:2b:d1:0c:30:94:c5:af:29:9a:b4:cf:0a:
56:f4:75:f4:85:d2:6c:5a:57:07:9a:19:79:3b:a2:fb:b3:a8:
e5:2e:e7:9b:5d:cc:e2:6b:8e:c4:f6:b8:14:5d:81:70:2a:53:
c7:8a:05:8b:8f:fb:8e:54:f3:0a:b2:c2:2b:93:d1:1c:5d:00:
63:79:d5:83:30:e3:aa:c9:97:be:be:bb:e3:5f:fa:c3:57:fc:
47:69:a2:15:fe:99:90:e0:31:3e:c7:43:77:85:42:c1:a0:f8:
eb:da:b1:81:15:30:ab:7f:59:82:af:af:ce:22:58:ac:ae:2d:
2e:7a:4d:3b:d9:27:4e:25:fb:fd:69:86:f0:e1:3e:ee:64:01:
ae:a5:a9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:43:32 2026 by rpki-client