
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
File: gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft (raw, json)
Hash identifier: y1Bmr1a4uMRDePlaJOOjw4WkkJcYOBi733Dk+wvfK3c=
Subject key identifier: 79:14:EC:6F:E5:BA:F7:71:C3:DC:39:FD:F9:4E:87:CA:CD:96:35:A0
Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
Certificate issuer: /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
Manifest number: D1
Signing time: Fri 17 Apr 2026 06:27:37 +0000
Manifest this update: Fri 17 Apr 2026 06:27:36 +0000
Manifest next update: Fri 24 Apr 2026 06:27:36 +0000
Files and hashes: 1: gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl (hash: ew72H2WtG6/bV2QtBPcBnTpPm0lyd8pb25xXdnwcjLA=)
2: 691B3B36FCC611EF8337B652C4F9AE02.roa (hash: +9yjB6RtDViIzqiypLm/pOP2CEfuylarRjWsBGXeOv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Validity
Not Before: Apr 17 06:27:36 2026 GMT
Not After : Apr 24 06:27:36 2026 GMT
Subject: CN=69e1d2d8-97a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:26:81:f5:db:44:0a:78:3e:54:da:1f:27:
a9:82:99:85:dd:7b:07:d1:b8:f2:b2:cc:a1:6d:67:
f5:75:c2:16:ae:89:a5:9d:28:eb:e9:e8:83:dc:49:
39:27:9b:da:55:ee:0b:7d:f6:69:6a:59:b8:65:47:
93:ab:60:d9:32:94:bf:46:53:b4:f8:69:dd:02:bf:
0c:af:36:81:d4:fa:64:c5:7a:98:80:02:5e:73:ba:
78:a4:8a:35:dc:6f:ba:e3:2e:c7:5b:2b:97:cb:5f:
81:b5:ca:56:83:e7:0b:d2:15:2a:30:d8:f9:26:68:
f3:0d:41:48:b8:05:b6:26:66:e1:8f:9d:b7:aa:db:
18:b7:f0:e8:90:91:a9:a5:68:04:0c:c9:7a:28:9a:
d2:d6:d8:1e:83:91:e2:d1:2f:47:90:77:d7:ca:31:
ca:cd:af:b8:65:12:69:5b:e0:9b:cb:5e:00:63:b9:
ea:ae:64:37:53:c1:04:ae:1b:f4:b7:b1:61:d0:a0:
d4:a6:5c:51:3f:2e:4d:a4:71:79:5e:1f:ad:fb:c9:
bc:3f:40:ae:e1:45:29:28:2c:e9:93:30:9a:7d:f4:
b6:da:7a:33:53:2e:9f:cb:23:bf:fc:36:92:0b:bb:
5c:c4:0e:1e:d2:58:e8:79:5c:50:94:10:63:1c:c2:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:14:EC:6F:E5:BA:F7:71:C3:DC:39:FD:F9:4E:87:CA:CD:96:35:A0
X509v3 Authority Key Identifier:
keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:99:3e:d1:6b:c6:96:98:a8:df:0e:86:4f:2f:e4:c2:fd:6e:
0e:c2:da:5c:b3:32:75:d2:f6:6e:8a:6b:21:4e:11:84:15:d5:
ac:6b:74:2b:f8:68:a7:8b:c3:92:37:fa:e1:33:e4:8d:d8:33:
98:c0:a1:79:ca:f2:c3:61:fe:af:d5:d2:89:d3:68:35:e4:54:
b4:b0:12:66:e0:5c:0d:ac:48:26:5b:b7:9d:6f:7a:55:31:2e:
93:05:44:21:e0:89:9e:36:79:d6:f7:51:f5:f7:fc:37:ca:86:
e1:d7:54:4f:f6:7b:7a:07:82:58:b7:23:b6:09:e1:a8:61:98:
da:80:b6:ed:56:07:3a:de:4d:16:ef:ff:6d:ac:64:1b:25:a7:
3f:7e:57:14:92:3c:62:8f:86:09:7c:8c:c9:e7:da:ab:78:32:
56:32:12:88:7d:0e:ed:23:a5:82:c4:42:3f:de:0a:07:ba:db:
20:4f:72:3e:12:9c:2a:b0:21:77:d3:f8:da:9f:2a:3a:9f:29:
ce:ec:7b:df:36:46:e5:09:04:8d:96:2d:16:89:ab:eb:f9:3d:
8b:a3:81:05:10:09:57:c6:7d:7e:5d:c4:d8:c6:2a:86:f9:7f:
43:73:a0:3c:e7:de:05:10:d1:0b:3c:47:db:fd:36:79:ef:55:
e9:2a:4b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:34 2026 by rpki-client