
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
File: gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft (raw, json)
Hash identifier: xUD9GQWhpZ128SKRVks7wwEn88qlqOeHf5qAoV0iy+U=
Subject key identifier: 83:39:9A:2E:5D:F1:E4:6E:9E:07:03:DE:AC:D1:C4:4D:9E:11:59:66
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial: 36B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
Manifest number: 35F2
Signing time: Sat 26 Sep 2026 14:43:21 +0000
Manifest this update: Sat 26 Sep 2026 14:43:21 +0000
Manifest next update: Sat 03 Oct 2026 14:43:21 +0000
Files and hashes: 1: gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl (hash: x15U5rMQ6MMiejo7nzlc9ZiAJRbiXtp3SQ7NnK8PO+I=)
2: 7E04A27C33F911E98674843BC4F9AE02.roa (hash: K/FbqKkGLNfkzMZvmO5n0deejCfMARa+GZSp//AcSl4=)
3: A8689054340411E9A22CD05CC4F9AE02.roa (hash: DxTEagX79Dr96Is9Glefq8HkI7exSZJkW+URL013qaA=)
4: 7D883CF033F911E98674843BC4F9AE02.roa (hash: Qinegpds3HRCzVkZws6zfR5mnKyicG8PhIuPttjJE34=)
5: 8C7BC30E5B7E11F0AA42172EC4F9AE02.roa (hash: 7N5ALRYlVE6iMNpnq5glYyJ7X7AzT9iZXspmvpv/Ehs=)
6: AA2A006C340411E9A22CD05CC4F9AE02.roa (hash: 1Lpcsh4Qf+Hq87TjwbVVHnxjyqxNO76hC9h94aNRvTI=)
7: 095AD6BA702F11F1A8ECAE4661A30FBC.roa (hash: e1iAWo0tSmNxZi+Y/5uerTn44EzxY7j9gvJmFB1WWi4=)
8: AACC7DA6340411E9A22CD05CC4F9AE02.roa (hash: fhuL4as/jKU5LCg5kEb3sZKC4Pb5j31KM+AsrsAx2Lk=)
9: 26CCB614E0D011E9B0E8C36FC4F9AE02.roa (hash: sEtBFQaAIz6x4FaJSabRZ32JNzwDh3UGhWhKFimk35g=)
10: A8ED77E2340411E9A22CD05CC4F9AE02.roa (hash: n8F9u9UUBJyytokaAlXMsY6rRTA/9uLlE3yIHkXMLvQ=)
11: A98C92A0340411E9A22CD05CC4F9AE02.roa (hash: kQevHtU5tFMFPB1zrilI8pnjMDSu9uxOn4s3FmADvEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14001 (0x36b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Validity
Not Before: Sep 26 14:43:21 2026 GMT
Not After : Oct 3 14:43:21 2026 GMT
Subject: CN=6ab7da09-7b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:c9:62:8f:3e:41:62:94:96:33:e3:2a:2e:
20:df:d5:ec:24:36:30:5b:dc:6f:a2:8b:b8:ca:95:
c8:f2:ec:88:af:f0:c4:68:13:c8:67:ea:b8:a2:3e:
6f:9b:f1:72:55:a8:2d:2a:38:83:ba:00:40:25:62:
6f:d2:d4:63:88:26:e3:cc:5e:be:98:ca:f4:7a:70:
65:b6:ed:f4:bf:de:df:87:93:39:65:aa:92:07:8e:
9a:49:5a:5a:5b:f7:f1:d7:06:67:2a:81:59:1b:8a:
0a:7c:c0:72:4d:01:02:16:93:7b:9a:54:d0:d9:b2:
a1:8b:de:0d:2b:7b:ae:cc:49:10:ab:81:9c:2d:97:
96:f5:cf:7b:ce:d6:d3:83:07:8f:b7:1d:f7:20:ed:
3b:02:8a:bd:5d:46:59:48:a7:3b:84:32:af:cc:9f:
45:9e:ba:d4:53:16:1f:3b:f0:43:84:48:f4:8e:ce:
86:e6:cb:91:3e:90:17:0b:ba:4d:b2:8a:84:8d:b8:
ba:18:e6:8c:89:ec:47:05:48:28:cc:4f:f8:e2:f1:
02:d0:dc:07:94:d3:f5:80:46:e9:1c:e2:9a:bb:b9:
9b:0a:6f:16:f3:d9:f6:4a:61:d7:45:06:17:64:08:
c4:e5:93:bc:59:ad:cc:04:3f:dc:a5:a6:6f:2f:1b:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:39:9A:2E:5D:F1:E4:6E:9E:07:03:DE:AC:D1:C4:4D:9E:11:59:66
X509v3 Authority Key Identifier:
keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:a1:59:fa:be:91:a3:b7:28:4c:3f:9c:b5:46:d1:dd:04:02:
b0:d9:d6:0f:38:aa:28:7a:bf:29:15:8c:3e:20:53:7e:98:2b:
9b:73:4c:7f:57:d7:90:6e:b4:fe:e7:2b:01:56:cd:1a:4d:4b:
4a:d3:3a:39:e2:d7:86:ba:25:0e:75:18:bf:50:6a:f6:34:47:
64:ca:9b:00:1f:ab:34:d3:c1:db:a5:dd:d8:c8:43:9f:bf:56:
9e:29:df:f4:75:57:56:ed:d7:fa:e4:ae:ad:8a:7d:b0:9c:e8:
dc:a8:06:53:50:42:7e:f9:b0:1c:4d:42:b8:26:cf:9a:46:8f:
9a:2b:60:91:be:c9:23:9a:ae:fa:07:a6:97:a5:4d:1d:07:37:
5c:38:d8:18:59:61:e8:e6:97:98:f1:d3:6b:9b:c7:6b:aa:f4:
ef:c6:45:fa:94:c2:8a:ae:a8:ee:a0:56:b9:51:1c:72:77:40:
4d:c5:5b:68:8c:59:5f:36:8a:a5:68:e2:38:89:5f:3e:7d:63:
f1:2b:82:f0:3b:b0:d7:33:be:47:79:f9:85:66:43:6b:72:02:
c2:cc:86:87:3a:38:fb:12:5b:c4:fa:7f:b9:f6:a1:e5:da:02:
b9:83:56:12:0a:f6:d4:3d:44:60:14:cf:e5:58:db:a3:22:5a:
89:04:fa:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0
OTE4OUJDNjQwHhcNMjYwOTI2MTQ0MzIxWhcNMjYxMDAzMTQ0MzIxWjAYMRYwFAYD
VQQDEw02YWI3ZGEwOS03YjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArt7JYo8+QWKUljPjKi4g39XsJDYwW9xvoou4ypXI8uyIr/DEaBPIZ+q4oj5v
m/FyVagtKjiDugBAJWJv0tRjiCbjzF6+mMr0enBltu30v97fh5M5ZaqSB46aSVpa
W/fx1wZnKoFZG4oKfMByTQECFpN7mlTQ2bKhi94NK3uuzEkQq4GcLZeW9c97ztbT
gwePtx33IO07Aoq9XUZZSKc7hDKvzJ9FnrrUUxYfO/BDhEj0js6G5suRPpAXC7pN
soqEjbi6GOaMiexHBUgozE/44vEC0NwHlNP1gEbpHOKau7mbCm8W89n2SmHXRQYX
ZAjE5ZO8Wa3MBD/cpaZvLxukqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIM5mi5d
8eRungcD3qzRxE2eEVlmMB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE
OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2
R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTMxOC9EQzc0NTFGMjFEOTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRL
b3czbkNqRWE0dmhKR0p2R1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABaFZ+r6Ro7coTD+ctUbR3QQCsNnWDziqKHq/KRWMPiBTfpgrm3NMf1fXkG60
/ucrAVbNGk1LStM6OeLXhrolDnUYv1Bq9jRHZMqbAB+rNNPB26Xd2MhDn79Wninf
9HVXVu3X+uSurYp9sJzo3KgGU1BCfvmwHE1CuCbPmkaPmitgkb7JI5qu+geml6VN
HQc3XDjYGFlh6OaXmPHTa5vHa6r078ZF+pTCiq6o7qBWuVEccndATcVbaIxZXzaK
pWjiOIlfPn1j8SuC8Duw1zO+R3n5hWZDa3ICwsyGhzo4+xJbxPp/ufah5doCuYNW
Egr21D1EYBTP5VjboyJaiQT6LQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 11:36:03 2026 by rpki-client