
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
File: G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json)
Hash identifier: m7F6ecEvA1TDP0nxY9fasq2vBVjMhqejZhBppctV1Zw=
Subject key identifier: C4:90:7E:09:CD:00:61:59:E6:96:0F:86:60:5C:99:02:20:DA:78:A0
Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
Certificate issuer: /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
Manifest number: 93
Signing time: Wed 15 Apr 2026 07:02:19 +0000
Manifest this update: Wed 15 Apr 2026 07:02:18 +0000
Manifest next update: Wed 22 Apr 2026 07:02:18 +0000
Files and hashes: 1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: RQv7ZuZly5e84cJis5W2NTM1oWB1ny3AA7d8EtYbFss=)
2: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: eBU/BwClmiFg499xv0HW6a00bR/BPwa7zYSjtYkxkiI=)
3: 6D18C6E88FF311F0B3309340C4F9AE02.roa (hash: B/siaUA6CI2wK/uyB8by+8BX4ZeMJoKY29AWKojuWa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Validity
Not Before: Apr 15 07:02:18 2026 GMT
Not After : Apr 22 07:02:18 2026 GMT
Subject: CN=69df37fb-2a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:6e:93:f4:87:b2:03:45:5b:29:a9:2a:af:
0a:00:b7:c2:a2:29:15:5f:ab:6a:27:3d:38:aa:f5:
6a:0d:62:09:a2:43:e4:42:58:61:36:f4:bb:63:cb:
13:db:7e:df:79:e3:67:64:73:d8:1f:68:77:e4:01:
79:b9:ec:b9:6a:3d:61:a5:5b:9e:13:b2:45:30:bd:
79:ce:65:20:38:b7:da:5e:3c:44:b6:21:c3:93:71:
8e:78:17:69:1e:cb:30:1e:90:1c:d7:aa:34:d9:a2:
8a:b2:a5:8a:78:f0:01:58:2c:6e:7f:b3:f4:08:a4:
49:67:1d:a3:28:f3:c9:94:50:7c:ac:5a:cf:4f:e6:
95:76:35:60:c1:ab:fd:5b:f6:91:7b:3f:65:fe:c7:
af:ea:a9:e7:a5:ad:8a:55:5d:fd:de:f3:92:4a:0a:
4f:e4:07:f2:00:11:31:89:87:ff:19:e4:ee:62:53:
b6:f5:7b:b7:3e:bd:7a:aa:6b:49:f4:11:2b:46:ad:
92:4c:ea:ed:f7:31:7d:e1:3b:ec:3c:12:de:27:86:
92:33:cb:0e:f4:d4:e1:c9:e9:da:84:b4:59:48:9d:
73:a1:ce:39:f1:b6:80:f7:46:de:fb:0e:14:65:1d:
71:4e:32:63:ca:24:7f:e5:b4:6c:d8:9a:69:aa:ab:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:90:7E:09:CD:00:61:59:E6:96:0F:86:60:5C:99:02:20:DA:78:A0
X509v3 Authority Key Identifier:
keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:34:ee:08:d7:67:ac:dc:97:a8:a8:64:9b:52:55:82:bc:92:
a7:19:88:fe:02:2a:92:f5:19:58:dd:b5:38:51:5f:31:4e:4b:
c8:25:10:e2:91:22:8e:01:e2:be:d8:6b:25:80:c2:a0:e7:eb:
b9:07:e1:09:34:74:8e:2c:c3:79:de:f9:6d:0d:1c:ce:5b:25:
e3:fd:1d:d0:ba:ee:fc:4d:4a:e5:8c:2f:20:45:1f:f1:ac:00:
17:54:5e:b7:eb:0f:ef:44:57:da:81:e6:06:dc:1a:ae:63:c3:
9a:3c:a6:5a:0d:41:91:e3:c9:c2:06:5a:42:08:b8:6e:64:79:
8a:fe:0e:66:3d:d5:ec:4e:72:d7:9f:35:4b:a6:35:3a:d9:57:
2b:9d:60:ac:3f:cd:9d:84:20:53:21:12:64:ef:15:03:b3:48:
55:f7:4e:75:e2:c9:1c:f3:41:d3:27:ac:ca:62:f4:06:a1:d9:
23:4f:88:04:6d:f7:ea:36:79:e6:93:c1:9a:2a:db:a8:77:01:
a6:b1:94:06:3e:30:a8:e3:17:aa:ec:b3:c1:b8:96:e8:e9:65:
4d:53:c9:0a:c1:5f:c8:75:5d:57:92:8c:1a:8a:85:a1:d9:5b:
f1:19:80:e9:b0:09:d8:8d:8a:fd:8e:4a:b2:30:0a:f8:01:18:
e5:7e:d5:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURGNTYxMTAvBgNVBAUTKDFCRDYzMzZCOTc4NjhDMkY1NEVCM0Q5NDc4RDM5RTQx
NzMxRDQ0ODcwHhcNMjYwNDE1MDcwMjE4WhcNMjYwNDIyMDcwMjE4WjAYMRYwFAYD
VQQDEw02OWRmMzdmYi0yYTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyLFuk/SHsgNFWympKq8KALfCoikVX6tqJz04qvVqDWIJokPkQlhhNvS7Y8sT
237feeNnZHPYH2h35AF5uey5aj1hpVueE7JFML15zmUgOLfaXjxEtiHDk3GOeBdp
HsswHpAc16o02aKKsqWKePABWCxuf7P0CKRJZx2jKPPJlFB8rFrPT+aVdjVgwav9
W/aRez9l/sev6qnnpa2KVV393vOSSgpP5AfyABExiYf/GeTuYlO29Xu3Pr16qmtJ
9BErRq2STOrt9zF94TvsPBLeJ4aSM8sO9NThyenahLRZSJ1zoc458baA90be+w4U
ZR1xTjJjyiR/5bRs2Jppqqv8tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSQfgnN
AGFZ5pYPhmBcmQIg2nigMB8GA1UdIwQYMBaAFBvWM2uXhowvVOs9lHjTnkFzHUSH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY1Ni82RDVFNkE1NDVC
RDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9HOVl6YTVlR2pDOVU2ejJVZU5PZVFYTWRS
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0c5WXphNWVHakM5VTZ6MlVlTk9lUVhNZFJJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REY1Ni82RDVFNkE1NDVCRDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9HOVl6YTVlR2pD
OVU2ejJVZU5PZVFYTWRSSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACDTuCNdnrNyXqKhkm1JVgrySpxmI/gIqkvUZWN21OFFfMU5LyCUQ4pEijgHi
vthrJYDCoOfruQfhCTR0jizDed75bQ0czlsl4/0d0Lru/E1K5YwvIEUf8awAF1Re
t+sP70RX2oHmBtwarmPDmjymWg1BkePJwgZaQgi4bmR5iv4OZj3V7E5y1581S6Y1
OtlXK51grD/NnYQgUyESZO8VA7NIVfdOdeLJHPNB0yesymL0BqHZI0+IBG336jZ5
5pPBmirbqHcBprGUBj4wqOMXquyzwbiW6OllTVPJCsFfyHVdV5KMGoqFodlb8RmA
6bAJ2I2K/Y5KsjAK+AEY5X7VBA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:55 2026 by rpki-client