
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier: a5I02aFPpzYtB3+hY03lBfEa+XzlCT3z6M3h7W0HYSY=
Subject key identifier: EC:86:8D:93:87:BA:8A:D4:17:E0:A0:70:42:15:BE:5A:51:63:89:97
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial: 09C3
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number: 09C3
Signing time: Tue 28 Jul 2026 20:15:06 +0000
Manifest this update: Tue 28 Jul 2026 20:15:05 +0000
Manifest next update: Tue 04 Aug 2026 20:15:05 +0000
Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: PT4AdUpVxqIrUeyNlyMCtCx5Hk5sWlf8dOV0piBTcyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2499 (0x9c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Validity
Not Before: Jul 28 20:15:05 2026 GMT
Not After : Aug 4 20:15:05 2026 GMT
Subject: CN=6a690dc9-cccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:35:17:a4:5d:98:16:12:aa:4f:8c:81:05:
90:1d:9f:c9:b8:85:d0:ff:51:ea:0c:98:f2:8c:0b:
53:3e:cd:93:e4:02:70:15:73:91:82:22:d4:29:d2:
ac:3a:10:cd:b4:09:c9:56:14:5d:2e:ad:5c:56:a6:
be:da:b3:f3:16:5d:a3:c2:09:67:f5:d4:3c:ab:fc:
c7:ba:e3:69:5f:dd:e4:a6:21:41:8a:a8:1e:aa:0b:
d6:fb:5d:fb:cf:5c:c7:b1:21:02:e4:e3:b2:c9:82:
db:ac:0a:0c:e9:99:73:ae:37:ed:e0:ae:6e:e1:4d:
4f:ed:ee:a5:bc:22:bc:bb:13:1d:e0:75:21:05:e1:
7e:65:54:b6:1f:33:fc:a0:07:6c:ec:ac:53:4a:e9:
8c:e7:db:88:2e:47:54:bf:2a:29:87:85:5a:c3:f8:
06:3a:20:15:60:b7:68:a7:66:dd:97:ee:d2:02:b5:
12:b7:d4:75:fa:48:f2:c0:64:4f:f0:30:f0:5d:8d:
81:c9:2d:c8:49:43:f7:40:13:87:3f:97:34:e6:1c:
56:f4:50:97:de:4a:95:0a:4a:d9:bd:ae:a7:b5:fa:
d3:3a:8e:25:bb:d1:22:67:83:fc:43:7c:0f:26:fa:
59:0a:24:ec:ea:a0:8a:03:67:70:73:3c:01:fe:00:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:8D:93:87:BA:8A:D4:17:E0:A0:70:42:15:BE:5A:51:63:89:97
X509v3 Authority Key Identifier:
keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:21:ba:cd:f5:7a:e1:f4:94:4c:e2:56:9d:ce:96:22:1b:8e:
ee:47:1c:02:06:47:b5:5b:62:27:cf:56:1b:93:c5:2f:fb:f6:
49:51:8e:a1:e8:c2:35:91:58:a0:bb:ef:f3:db:f4:a1:78:ac:
cf:5e:5f:30:25:02:37:fa:43:17:6b:db:1a:89:43:d5:d3:fa:
ba:dd:d0:78:48:ae:db:0e:c8:7d:02:73:fa:3c:04:23:c5:5b:
aa:11:a4:ec:c0:4a:0a:c2:64:09:d0:7f:2e:2a:79:c3:a8:31:
c8:eb:1d:6a:9e:33:6b:e1:38:c4:81:a1:fc:92:05:9f:1b:2a:
02:41:c0:37:80:ff:7b:9b:f0:57:ab:b3:b0:d8:93:73:4d:11:
ab:aa:49:b0:3d:12:a3:05:05:1f:ca:90:94:6f:1e:df:ad:3e:
ce:17:11:23:5e:bb:9b:71:42:46:ff:b0:73:a4:b0:5b:42:b2:
31:30:22:2f:d5:5d:65:87:79:f4:bb:19:7e:53:2f:df:af:f3:
46:fd:df:21:9f:db:99:53:fe:84:be:cc:18:58:74:04:85:83:
02:9c:9e:b6:60:0d:d6:03:1b:de:d9:79:c0:a0:2a:d7:6f:bf:
aa:f2:ba:fe:3f:2d:00:10:5c:8f:81:6c:f6:04:1b:2a:2a:d1:
c2:b8:46:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:06:53 2026 by rpki-client