
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json)
Hash identifier: XLbKhGTUt7jGmfgbO1d73kgRLAqQVgK6JK8RuNbmX6g=
Subject key identifier: 42:70:FC:02:6D:D5:53:06:9B:75:ED:D8:65:DA:1C:0B:7D:31:36:25
Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Certificate serial: 0591
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
Manifest number: 0582
Signing time: Sat 28 Feb 2026 23:52:12 +0000
Manifest this update: Sat 28 Feb 2026 23:52:11 +0000
Manifest next update: Sat 07 Mar 2026 23:52:11 +0000
Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: m32QYSUXWaOk+cZX+dpIqK2R/hMwRzc7ilsQWmxfmZw=)
2: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: IhF3xpRX9OoLW4rm4Xp59CrFWa/bSzisaDG59ePuZ74=)
3: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: 1qOnTV46N1waQtQ9X47A8DgcQV4uyBkcfnz65a0/6wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl
rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1425 (0x591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Validity
Not Before: Feb 28 23:52:11 2026 GMT
Not After : Mar 7 23:52:11 2026 GMT
Subject: CN=69a37fac-3eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:51:e8:41:ec:e6:3a:04:0b:0e:1a:58:2d:cd:
16:24:b2:5a:3f:d7:aa:48:f5:7c:5a:b2:96:1e:e5:
01:dc:e0:2b:28:3d:9e:1c:07:9d:18:9c:4d:1c:54:
07:38:73:3d:65:67:cb:d7:a0:1e:e6:8c:76:13:07:
65:7b:d5:8b:a6:4b:e4:69:d9:12:20:41:61:bc:46:
99:bd:81:af:9b:2a:2a:7c:f7:10:3b:3e:5e:49:b4:
e5:e4:14:02:04:4c:14:08:1c:52:00:97:58:d1:cb:
d0:54:22:e7:c9:38:74:a2:52:7a:61:2e:f7:a1:1e:
29:ab:7d:85:0d:1a:86:f8:05:06:54:7c:27:2e:d7:
b3:b5:4f:5c:95:32:a7:6c:86:ee:63:2f:d3:1a:b0:
07:e3:60:e3:eb:f7:1c:41:29:55:cc:ad:4c:2a:68:
ee:10:76:53:96:34:d8:69:a2:84:93:55:9b:cf:2c:
ee:f0:1e:b2:9e:1b:e6:41:35:b4:40:b8:25:05:ef:
c5:b7:08:d6:2f:84:e2:1f:54:03:45:bd:5a:0a:2f:
f0:33:9c:8b:b4:48:5d:cf:3b:ee:4e:3c:c2:5e:f8:
63:44:53:a6:75:f9:75:f0:99:fa:bb:ff:27:09:48:
e4:76:a4:91:6a:eb:3f:94:b2:4b:c2:35:0a:51:6f:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:FC:02:6D:D5:53:06:9B:75:ED:D8:65:DA:1C:0B:7D:31:36:25
X509v3 Authority Key Identifier:
keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ff:d6:24:23:50:b3:50:b7:71:b4:b7:73:5f:50:2c:70:41:
4f:5a:ad:8d:9a:4d:37:ac:1b:f6:cb:94:aa:fd:3f:2e:3b:d4:
c4:bb:a0:56:98:54:12:e2:14:89:a5:ff:b5:b3:c3:70:d0:13:
5c:53:d3:8e:79:0c:8b:ad:28:df:3d:fb:cb:56:6c:15:bd:34:
e4:2a:24:ae:92:33:40:3e:a0:53:ef:0d:8a:b3:90:5b:db:da:
b7:f5:c3:44:8b:b5:68:0b:73:c1:e9:8c:1f:21:cc:1e:21:82:
9f:2b:de:cd:ad:28:07:7d:d1:bf:59:d5:57:33:96:08:30:96:
46:af:98:50:97:56:7f:50:4c:5f:dd:80:dd:6a:7b:b8:f4:eb:
d1:86:73:51:c7:30:b2:f0:da:1d:1a:b9:60:1b:dc:0d:f9:5f:
54:4e:43:6a:34:11:5b:1d:57:ae:cd:4b:f4:d1:53:a2:ba:a6:
a8:83:e8:79:fa:76:04:9e:23:5e:48:b7:33:16:8f:aa:9e:09:
66:67:fe:27:42:d8:8d:9e:ee:40:87:db:61:01:49:11:4e:5d:
21:4e:57:ed:b3:02:cd:23:d7:4e:09:ca:3d:cf:72:03:42:d0:
87:ed:1a:26:e2:19:21:1c:f4:0d:b4:37:ea:5b:ac:72:c4:fe:
7c:19:b9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:18 2026 by rpki-client