
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
File: G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json)
Hash identifier: DTbHF+W5ugfOE8qW7fXpfHHVCp2nliPWei5vwmL6Zwk=
Subject key identifier: B9:6E:21:0D:5B:E6:F4:AB:6C:98:16:54:EE:C0:74:95:5A:C8:E5:3D
Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77
Certificate issuer: /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
Certificate serial: 06DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
Manifest number: 06D7
Signing time: Sat 28 Feb 2026 22:40:54 +0000
Manifest this update: Sat 28 Feb 2026 22:40:53 +0000
Manifest next update: Sat 07 Mar 2026 22:40:53 +0000
Files and hashes: 1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: +lOfzQVcWC3x0SqshOhj0hIGuYuZN/cBF/R7HsTPbcQ=)
2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: lV/cpNWUCFTUuQ8wWKZTK1Tzrge3tnngMyqR3AbKgb4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl
rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:40:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124803, serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
Validity
Not Before: Feb 28 22:40:53 2026 GMT
Not After : Mar 7 22:40:53 2026 GMT
Subject: CN=69a36ef6-f6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:cc:af:29:e7:9e:d7:6f:98:59:17:87:3e:
95:8c:14:5b:08:18:27:89:8e:3c:42:34:33:25:0f:
f6:71:a2:32:a7:f8:24:47:28:1f:2c:50:5a:b8:c6:
19:02:76:1c:44:53:35:54:6c:7d:2a:6c:c9:e6:61:
ad:be:30:6d:07:7d:21:52:57:59:39:11:1d:81:38:
c1:48:73:c6:34:e0:71:25:08:a2:6c:06:0f:1a:8a:
46:c8:d3:30:3c:e8:41:56:7f:fa:b1:ba:54:18:3c:
7f:ad:45:2c:bb:bf:38:fc:cb:98:48:b6:73:4a:74:
78:61:9f:68:9c:3b:33:25:9c:73:91:d1:0e:6c:1f:
dd:97:be:3e:79:13:ca:97:9e:c5:33:a8:dc:60:11:
37:f2:db:86:4b:23:b1:e1:39:21:80:03:e8:37:0e:
6e:38:d9:8f:02:42:33:c5:5a:76:c5:02:df:66:3a:
4e:94:20:f8:f3:8e:40:77:c9:34:a0:b6:1c:3e:95:
2e:b5:75:f0:f5:91:68:2e:f4:a3:61:c7:7f:9b:47:
02:86:15:93:b5:76:c7:55:d5:74:8f:d9:64:d4:81:
b9:b1:e1:89:5c:ae:7d:11:22:10:9c:4e:5d:f1:29:
af:c6:c0:25:50:6e:b2:e8:78:7e:84:5a:4d:f0:5c:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6E:21:0D:5B:E6:F4:AB:6C:98:16:54:EE:C0:74:95:5A:C8:E5:3D
X509v3 Authority Key Identifier:
keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:56:83:31:5f:d6:c2:99:fd:72:8d:97:75:c7:a2:b4:c0:a4:
f1:03:28:a8:40:3b:95:f0:57:96:4e:74:b8:7d:fb:17:cc:60:
5b:37:b5:77:e5:91:b3:d5:88:b4:ac:cb:49:36:7e:fe:47:29:
b6:f4:0c:b8:61:ac:37:39:57:6e:14:e9:36:eb:39:5c:a6:d5:
1e:e8:40:ed:85:b1:ce:6a:27:32:fd:46:1c:bc:3b:0a:39:1c:
1e:07:55:ab:0e:23:68:0e:80:8a:3f:00:dc:fa:b4:8a:ee:0e:
70:b6:5a:b1:80:cd:be:45:1f:da:a2:87:6d:85:2f:39:d9:08:
b0:d9:13:36:7e:f1:e9:14:b5:98:e1:5f:6d:88:77:53:e6:11:
8a:92:f1:15:3f:a2:0c:d4:10:b0:56:44:50:45:2c:fd:04:7c:
b1:11:4a:13:7a:a3:57:e8:8e:4f:8a:a7:58:16:a0:8b:e9:6d:
c6:23:65:5c:26:fa:55:72:d1:9d:c1:26:ec:56:a0:1c:70:dd:
2a:1e:03:7d:23:e9:20:a0:1b:60:63:d0:76:df:29:70:03:bd:
0f:80:3c:cd:79:9d:eb:20:84:42:a2:28:fa:c1:da:8e:56:dc:
c7:e8:b6:4d:31:df:1f:2c:d7:e9:5c:93:09:68:8b:77:f8:20:
f4:19:89:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ4MDMxMTAvBgNVBAUTKDFCOERFRURCMUQzQzQ4Q0MxQzRDMjE3Qjk2OUM3OTg1
NDFBNENDNzcwHhcNMjYwMjI4MjI0MDUzWhcNMjYwMzA3MjI0MDUzWjAYMRYwFAYD
VQQDDA02OWEzNmVmNi1mNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4DnMrynnntdvmFkXhz6VjBRbCBgniY48QjQzJQ/2caIyp/gkRygfLFBauMYZ
AnYcRFM1VGx9KmzJ5mGtvjBtB30hUldZOREdgTjBSHPGNOBxJQiibAYPGopGyNMw
POhBVn/6sbpUGDx/rUUsu784/MuYSLZzSnR4YZ9onDszJZxzkdEObB/dl74+eRPK
l57FM6jcYBE38tuGSyOx4TkhgAPoNw5uONmPAkIzxVp2xQLfZjpOlCD4845Ad8k0
oLYcPpUutXXw9ZFoLvSjYcd/m0cChhWTtXbHVdV0j9lk1IG5seGJXK59ESIQnE5d
8SmvxsAlUG6y6Hh+hFpN8Fw7twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLluIQ1b
5vSrbJgWVO7AdJVayOU9MB8GA1UdIwQYMBaAFBuN7tsdPEjMHEwhe5aceYVBpMx3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgwMy85NzdENzM2MDhD
NzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNNd2NUQ0Y3bHB4NWhVR2t6
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c0M3UyeDA4U013Y1RDRjdscHg1aFVHa3pIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDgwMy85NzdENzM2MDhDNzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNN
d2NUQ0Y3bHB4NWhVR2t6SGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL1aDMV/Wwpn9co2XdceitMCk8QMoqEA7lfBXlk50uH37F8xgWze1d+WRs9WI
tKzLSTZ+/kcptvQMuGGsNzlXbhTpNus5XKbVHuhA7YWxzmonMv1GHLw7CjkcHgdV
qw4jaA6Aij8A3Pq0iu4OcLZasYDNvkUf2qKHbYUvOdkIsNkTNn7x6RS1mOFfbYh3
U+YRipLxFT+iDNQQsFZEUEUs/QR8sRFKE3qjV+iOT4qnWBagi+ltxiNlXCb6VXLR
ncEm7FagHHDdKh4DfSPpIKAbYGPQdt8pcAO9D4A8zXmd6yCEQqIo+sHajlbcx+i2
TTHfHyzX6VyTCWiLd/gg9BmJAA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:59 2026 by rpki-client