
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json)
Hash identifier: uOQuatUw8fBuQBUyaeSwG0tvf6lbuzzWWFrNB05eMGA=
Subject key identifier: F1:D9:14:D3:18:E7:1A:D9:A7:8A:DF:3D:5B:E4:D2:19:B8:6E:3C:F4
Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Certificate serial: 05FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
Manifest number: 05EC
Signing time: Sun 20 Sep 2026 22:50:14 +0000
Manifest this update: Sun 20 Sep 2026 22:50:14 +0000
Manifest next update: Sun 27 Sep 2026 22:50:14 +0000
Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: KD7a4NbM5dlMgNgYd0yr+DTjuoU0oRQUUj0vIIt0xgc=)
2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: 2+WcS7JB0+agxKcQ22MQ04J/yCONuIWJ6zoWcxPIlh0=)
3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: 49abEkg0KhXLphiSvkFxFB5/cBrDujbbgSy2255f/a8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl
rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Validity
Not Before: Sep 20 22:50:14 2026 GMT
Not After : Sep 27 22:50:14 2026 GMT
Subject: CN=6ab06326-8243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:9c:87:c9:6a:a6:a0:d1:26:68:b9:ab:1d:
a5:31:1c:8d:86:71:e6:21:0f:1d:45:e8:99:ec:d4:
5e:c6:4e:3c:b9:35:36:08:69:7d:70:e1:db:e6:2a:
b9:7b:e2:ea:e2:d7:78:1b:ef:63:b7:2a:62:38:42:
a5:af:62:d2:26:a3:27:92:56:e4:e9:8e:da:e0:59:
dc:b5:71:54:d2:d9:50:c8:e5:37:46:2e:0a:87:e7:
d2:9a:98:6f:3b:9c:dd:79:66:79:e7:2b:5f:f4:4a:
d0:46:59:e9:f0:22:89:17:dd:9f:48:4a:0d:79:6f:
16:7a:39:1f:1b:c8:57:e6:13:a8:dc:d3:63:86:51:
88:2c:21:68:dc:ba:f3:11:97:94:9f:c5:34:40:d4:
7f:6f:85:6d:fb:9f:9a:a0:63:44:e7:c6:0c:90:90:
ed:54:18:c5:2a:6c:6c:2a:6b:8a:92:0c:07:12:f8:
b3:ee:59:dc:36:10:d6:26:9f:b3:a9:30:cd:1e:f3:
45:92:73:f4:bd:4a:25:7c:88:8a:5e:78:c8:e0:8f:
a1:65:7d:48:88:1a:83:b3:e7:58:8a:83:2d:50:67:
ca:87:f5:30:be:2f:19:f6:70:c3:56:f3:18:1b:49:
33:6b:b3:84:31:e8:8b:eb:06:97:52:2c:4b:e9:b2:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D9:14:D3:18:E7:1A:D9:A7:8A:DF:3D:5B:E4:D2:19:B8:6E:3C:F4
X509v3 Authority Key Identifier:
keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:e5:f7:80:73:a8:e4:b1:ac:0b:ba:f5:32:29:72:df:da:15:
b3:aa:6b:c8:60:72:86:41:fb:5d:1c:94:fd:ab:e9:ac:fb:7a:
14:40:ed:7f:f4:36:13:ce:75:dd:93:88:e0:d1:6a:67:fb:a8:
06:9c:3b:59:ed:60:61:2b:af:d3:eb:f3:f3:f3:51:3c:ce:60:
2d:b2:ce:8a:6c:bf:e6:ad:19:e3:4b:a3:84:cd:8f:7f:fa:b9:
13:bc:76:85:74:e9:b3:c2:63:0d:bd:a7:87:7d:9f:09:c1:a3:
31:f9:b2:6c:5c:b6:8a:9a:18:aa:99:bd:22:bf:3b:44:1a:18:
db:2b:ed:ac:93:c3:e5:9c:66:7f:6d:e1:95:5e:97:ac:0c:8f:
4d:4d:54:14:0c:78:7b:15:ff:3e:a0:3a:a9:73:05:80:dd:f1:
9f:16:cf:62:b0:c1:17:ab:05:f0:5d:78:82:c2:0a:9d:60:bd:
cb:b1:3e:e8:65:0d:70:ae:8f:18:e9:a8:68:31:9c:9b:49:dd:
de:00:82:4b:24:32:f7:03:c0:60:11:d7:eb:2d:8d:33:7f:0d:
68:e5:d6:06:4c:29:4b:0d:72:44:5b:26:cc:24:cb:ff:8d:45:
42:0a:55:a7:84:74:4d:d3:06:59:22:80:07:9a:cb:53:d2:a4:
99:7f:6f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:14:12 2026 by rpki-client