
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
File: G395gdniwsMPbyw0hxophthfiQ4.mft (raw, json)
Hash identifier: DkL7Z5wlsWuYu8taw133x2T3jsrsnC3yHf3SeY9NEVs=
Subject key identifier: 83:07:BA:F8:34:87:F0:0D:4C:0C:25:1E:E5:A2:B3:E9:DE:74:9E:50
Authority key identifier: 1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Certificate issuer: /CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Certificate serial: 05DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
Manifest number: 05D3
Signing time: Sun 26 Jul 2026 23:54:24 +0000
Manifest this update: Sun 26 Jul 2026 23:54:24 +0000
Manifest next update: Sun 02 Aug 2026 23:54:24 +0000
Files and hashes: 1: G395gdniwsMPbyw0hxophthfiQ4.crl (hash: LWBtH7V4f/kHwXx1mOpvsWElwZvL9bv1cWNJLwsJEGg=)
2: 5D7779A6108A11EC9E1F3D49C4F9AE02.roa (hash: MARAw22DhIJFp/wfG19G5Gz01JcFPueQuJN4T376eTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1498 (0x5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170AE9, serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Validity
Not Before: Jul 26 23:54:24 2026 GMT
Not After : Aug 2 23:54:24 2026 GMT
Subject: CN=6a669e30-1b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:ec:6e:4d:f1:37:72:24:21:d8:29:2b:50:
cd:25:de:bf:db:cf:4b:81:06:08:e9:b8:b7:8b:3a:
17:b9:36:d6:f9:eb:a8:ca:29:84:cc:16:cd:0d:4e:
40:7a:7a:98:7e:02:88:a0:3d:b1:09:95:0a:72:e6:
29:34:23:82:98:7c:17:7b:db:a6:c4:06:35:be:da:
e1:39:a6:4e:a1:cd:0e:28:8e:c0:18:23:82:13:f2:
7f:8b:3d:16:8f:39:33:fb:99:48:13:37:52:1f:0d:
46:1e:68:85:cb:69:c1:b8:9e:0c:1a:cb:23:16:9b:
98:7c:8c:a4:6e:6e:16:93:25:c1:73:be:3a:fa:8f:
11:49:60:1f:e6:31:3d:ab:ba:bb:ec:32:07:93:9b:
09:8d:c3:06:1f:9a:e1:78:5d:02:e4:28:7b:72:3a:
06:9c:0a:f1:b7:1a:18:0e:2f:a0:a2:27:08:53:e2:
72:03:69:97:c5:f4:c4:c0:14:0e:0d:95:d6:99:35:
ae:f3:16:19:d7:c7:5b:ec:d7:25:68:18:ba:8a:2a:
c8:be:b8:42:d3:2c:37:26:55:a0:0c:03:21:d4:ea:
24:cb:a5:41:45:71:22:68:f4:c1:4d:22:bb:d5:f6:
b0:b1:5e:b4:af:51:f0:45:e9:2d:ca:d5:47:77:06:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:07:BA:F8:34:87:F0:0D:4C:0C:25:1E:E5:A2:B3:E9:DE:74:9E:50
X509v3 Authority Key Identifier:
keyid:1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:12:9d:66:cf:ea:17:69:70:41:91:e2:cf:e5:bc:73:84:ef:
8c:04:30:3d:50:30:2e:25:39:61:c7:fe:bb:32:ff:60:20:67:
6f:48:5d:86:e9:d3:ec:81:15:69:45:00:ef:2e:23:ed:94:66:
22:63:23:05:2b:a0:7b:9b:6e:dc:a7:0c:15:61:70:24:a7:09:
dd:55:53:75:c3:c8:ad:a2:a4:e7:65:3f:7d:3a:c7:1f:93:44:
91:83:7b:00:94:97:da:40:b3:05:a4:27:81:80:b8:b8:d3:2b:
3b:1d:32:89:4e:32:c3:cc:46:36:04:c8:3c:da:fa:dd:f5:b8:
8b:6b:df:1d:8d:19:51:c1:18:83:21:8e:bd:0c:5b:3f:22:60:
01:a2:65:b0:55:17:12:ea:3d:35:85:c2:71:a9:a4:78:73:96:
05:d8:d6:7e:d7:65:ec:00:2b:1a:c7:9f:a3:ad:8e:f5:00:b5:
52:f1:d1:83:b6:88:61:10:ca:f7:e1:5c:39:0f:2f:fa:1f:23:
57:f6:e8:cf:5d:55:80:be:b6:4c:14:d5:35:db:67:db:9b:06:
64:44:0a:ed:27:68:5a:15:1b:f0:83:49:97:41:82:18:60:71:
2b:96:ab:41:97:36:7b:da:1e:35:7c:1b:72:93:24:97:50:87:
77:ee:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:13 2026 by rpki-client