
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json)
Hash identifier: q7qeJpgHSjkPvvVu9SfgqMtpVmqCuW7Igc1leGkW3Qk=
Subject key identifier: 4A:E9:D2:87:69:5F:10:B9:01:7B:CF:98:C9:11:1D:60:79:A4:D2:82
Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27
Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
Certificate serial: 12E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
Manifest number: 1B7A
Signing time: Thu 16 Apr 2026 16:58:51 +0000
Manifest this update: Thu 16 Apr 2026 16:58:50 +0000
Manifest next update: Thu 23 Apr 2026 16:58:50 +0000
Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: g8l5x1BQNYvpJVM98m55glAqxwwmWTijnPoMC/fHWRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl
rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4838 (0x12e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
Validity
Not Before: Apr 16 16:58:50 2026 GMT
Not After : Apr 23 16:58:50 2026 GMT
Subject: CN=69e1154a-1c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:34:ca:6d:f9:45:7f:03:3f:a8:3a:07:8d:
64:c7:a9:ca:32:b8:86:96:49:2f:42:c8:08:04:82:
56:6c:29:00:35:af:c8:27:db:0d:c5:d8:c9:01:01:
34:27:a8:6e:d7:3d:47:d0:b2:48:3b:4c:dd:c8:06:
10:ec:ad:c5:c9:34:e4:17:e4:ea:1a:28:cc:62:ce:
e7:ce:88:4c:42:ae:1d:88:0d:8b:e1:f9:4f:5b:fd:
c1:b6:cd:23:6d:c8:53:19:26:18:80:cd:f5:b5:bd:
3e:8a:43:a4:eb:69:ae:06:c6:c9:59:0e:d0:20:99:
2e:30:b3:a7:a9:12:9d:34:e9:24:b8:0b:31:7e:b2:
41:a5:51:36:10:ba:6b:81:1d:95:d8:9c:95:4c:40:
19:a3:c7:fc:77:3f:b4:1f:0d:82:d7:7d:5d:29:9d:
7f:9b:19:67:d9:bf:07:6b:79:ed:d6:a8:e9:2c:91:
e6:5c:50:a1:c3:39:3c:d4:58:62:70:f0:c4:e8:82:
3f:03:99:fd:c1:4f:60:7f:c3:79:c2:fd:6c:2d:e2:
d6:8f:13:1c:45:dc:60:5a:05:e1:5d:96:d9:05:30:
56:5a:7f:f9:f2:a4:fb:5c:c7:57:bf:52:66:1a:3e:
72:06:54:7d:9d:52:92:2e:f0:95:97:d3:ae:9d:ea:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E9:D2:87:69:5F:10:B9:01:7B:CF:98:C9:11:1D:60:79:A4:D2:82
X509v3 Authority Key Identifier:
keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f5:54:51:24:55:ef:eb:4d:3f:c9:99:2a:98:09:24:6c:a9:
3d:c0:42:5a:3b:ff:3f:05:59:c8:51:a1:f2:0b:4d:23:59:aa:
fc:2a:61:02:dd:22:77:73:b4:a1:4a:fa:91:6c:77:98:96:a9:
42:81:79:d1:54:14:bb:0c:3d:60:7e:66:b8:4b:cf:91:0b:06:
06:39:d6:c2:14:83:70:47:f7:0f:04:fa:f2:fb:e5:91:f5:8d:
bb:e6:01:0a:ea:5c:0e:0d:d2:e0:46:eb:9e:fe:11:40:86:c2:
0e:31:ae:57:d3:40:e8:f8:77:92:7f:41:84:4d:16:6b:09:94:
c0:95:0e:1f:ba:70:12:1d:db:7d:af:b6:36:d6:b5:19:5e:1b:
9c:28:c1:0b:be:52:9c:b5:54:b4:cc:fe:dd:c2:18:9a:b0:83:
f1:67:96:73:60:17:41:22:77:d1:6c:53:0a:48:b0:d7:33:95:
6e:ee:80:aa:2d:ac:bb:17:06:a9:d5:9b:24:30:ab:a8:82:7a:
9c:ff:d2:4e:7b:1d:37:09:76:af:21:c6:06:19:6a:97:45:5e:
40:72:fc:e7:5b:24:7c:e3:b7:82:2e:7d:92:e1:06:75:24:e8:
01:68:a3:59:77:3b:54:6e:b6:8e:a6:06:e5:f3:f3:1e:42:c4:
64:c8:61:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:23:27 2026 by rpki-client