
$ rpki-client -vvf rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
File: G7ThccrEGeYWe6On1yU8dhYxoo0.mft (raw, json)
Hash identifier: Deik1kxzHB4d9ivYyRTvAVqzSDTfU96BH3Qk95sU68M=
Subject key identifier: CD:E4:EE:B0:5C:38:0F:14:94:37:EA:18:45:91:02:3D:5C:B5:8A:8C
Authority key identifier: 1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
Certificate issuer: /CN=A91259CA/serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
Manifest number: E9
Signing time: Sat 13 Jun 2026 06:36:08 +0000
Manifest this update: Sat 13 Jun 2026 06:36:07 +0000
Manifest next update: Sat 20 Jun 2026 06:36:07 +0000
Files and hashes: 1: G7ThccrEGeYWe6On1yU8dhYxoo0.crl (hash: nn/oMa7StB7dF06CZ09rem9MnqcMnhrTSo71wDNCQIk=)
2: 2031308808A111F09B131E5BC4F9AE02.roa (hash: bfZHmy0//lzWJ0TH2iq1RiILBXFH7y1Z1TmJFXwbV9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl
rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91259CA, serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
Validity
Not Before: Jun 13 06:36:07 2026 GMT
Not After : Jun 20 06:36:07 2026 GMT
Subject: CN=6a2cfa58-8919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:d9:ca:8d:ec:d9:a2:a6:36:b8:36:72:be:
4d:0d:a7:0a:8c:99:96:e8:5c:17:7f:70:39:33:20:
36:fe:33:ba:4e:65:bc:dc:bc:fa:00:fe:e2:bb:19:
39:b9:08:4a:5c:94:86:4c:cb:be:7e:a5:6b:fb:a6:
ec:75:6c:a1:eb:52:36:7d:f2:4f:30:3b:42:ca:bb:
33:52:fd:7f:74:b5:0e:72:da:a1:a7:54:f2:a3:71:
a0:f5:cd:b4:e3:30:e4:17:42:b0:df:53:f6:5f:59:
98:e2:48:df:50:33:a8:6c:4c:1e:69:c5:7e:ce:d4:
d4:38:f9:e8:9a:4f:09:71:a0:01:7e:1f:00:3a:d8:
d1:44:25:a2:b8:a7:be:5f:3e:7f:ca:41:f1:b9:64:
7e:43:82:f2:3b:28:39:fe:79:23:09:05:a5:bc:2f:
d1:16:b2:13:e0:8f:c1:89:9d:f1:60:5b:7b:1b:a3:
98:e4:69:04:7f:40:f8:f0:ea:80:4b:23:e5:c3:e3:
92:06:3f:e2:a5:c5:e0:49:93:d4:67:27:43:ff:14:
59:f4:22:2d:d6:ef:0d:1c:dc:9f:7a:aa:f3:30:88:
96:47:06:5f:36:29:21:30:9c:15:7c:01:37:2f:78:
8f:61:a7:47:ed:3e:d9:c6:e9:1f:a9:81:51:56:d1:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E4:EE:B0:5C:38:0F:14:94:37:EA:18:45:91:02:3D:5C:B5:8A:8C
X509v3 Authority Key Identifier:
keyid:1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:f6:73:fa:5a:03:f0:94:0c:df:d4:71:41:f4:cd:b1:a9:d0:
af:24:2f:86:a2:c4:a2:ad:50:c6:49:f3:a3:7e:e4:37:92:e2:
cc:be:53:2d:e4:8a:66:69:05:9d:93:22:42:e2:fa:9a:a2:79:
76:d3:fd:6d:8d:3f:87:85:2a:ba:d8:59:d7:62:08:e4:e9:04:
2a:a2:70:48:42:e6:49:ae:75:22:6d:5b:cc:81:39:fe:7e:f5:
4f:bd:14:8c:81:19:2f:fd:af:67:3f:d0:e2:e7:0a:bf:7c:d5:
36:34:01:77:48:5e:b7:82:db:3f:19:03:e6:38:b4:4b:c5:3a:
e1:c9:08:4d:53:7b:28:ed:59:04:17:9a:4c:60:ed:0a:9c:40:
fe:02:d2:b7:27:0e:f5:af:41:2b:f1:19:b5:8a:f3:d3:a1:09:
5a:cc:a4:8d:ae:3d:e0:1d:14:de:d9:5d:5a:2c:26:2b:8a:72:
ce:e3:86:27:2f:c0:a7:35:23:54:54:30:8f:3b:6c:6a:2a:50:
27:8e:b1:8b:20:df:50:70:3b:d8:69:ea:9e:32:3c:54:9b:b8:
a5:f8:ea:bc:ad:8d:f6:de:4b:a5:f1:66:df:d7:8c:80:95:9c:
4c:6f:11:70:2e:90:44:72:4c:c5:16:7b:c5:7e:2b:ef:14:00:
b8:62:e8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:46:42 2026 by rpki-client