
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
File: gBcCvJze9z33Ob-31L0ve4iF4Hc.mft (raw, json)
Hash identifier: It/Vi5n2+jjUlrWaJCniuPgsAxjAFvZapodfD/BSUjs=
Subject key identifier: D0:63:68:11:99:E0:46:EA:D7:59:68:82:33:A5:37:89:39:A4:6B:F6
Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Certificate serial: 0555
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
Manifest number: 053E
Signing time: Sat 26 Sep 2026 23:35:00 +0000
Manifest this update: Sat 26 Sep 2026 23:35:00 +0000
Manifest next update: Sat 03 Oct 2026 23:35:00 +0000
Files and hashes: 1: gBcCvJze9z33Ob-31L0ve4iF4Hc.crl (hash: o5jmxByFPLAgn6Ceu9mIjPs+KF0skuLIgXIyGpRZuBs=)
2: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (hash: +pV8MUFMD6DhuSiuoXuPicHZS5pTjm70rSYAIUz1WWk=)
3: 86BADBF8013511EE81A9F21FC4F9AE02.roa (hash: H5Kg0WWi2ArQlY3F4MuVxADOQ4KYkHou5PZkoZEWfh0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 23:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1365 (0x555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124731, serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Validity
Not Before: Sep 26 23:35:00 2026 GMT
Not After : Oct 3 23:35:00 2026 GMT
Subject: CN=6ab856a4-2e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:af:4d:d2:08:ba:1e:2e:46:bf:49:8c:b5:
40:9f:bf:80:93:e4:b3:ce:55:9a:77:25:9f:98:18:
0b:d0:b4:31:c6:e8:4e:33:0b:f4:73:e4:ac:be:79:
16:52:38:28:5c:b1:69:fe:04:34:3e:31:9e:10:39:
77:92:5b:6e:5e:65:56:b9:a9:f9:10:ea:74:39:d3:
f1:3f:da:c4:7c:ac:b9:74:92:3e:4e:a7:64:bb:f3:
59:84:6b:6b:14:02:82:de:f1:c8:40:46:31:fc:9f:
77:94:f1:cd:3a:26:a4:62:ea:99:47:40:18:a9:35:
5b:b0:42:9d:0f:fa:24:07:23:34:48:0c:e2:13:68:
f3:33:14:66:28:a6:a5:68:72:53:42:91:63:61:b5:
0f:cc:12:8f:96:47:27:47:dc:ff:5a:02:43:b0:d2:
ee:8e:49:74:91:d3:14:48:8a:c0:fd:ee:14:3a:62:
e0:12:d9:52:d1:f2:2d:d3:eb:52:12:8a:53:46:45:
9c:85:4f:d2:eb:38:2e:aa:90:4b:7b:79:08:b6:9d:
3a:9b:3a:b3:b4:4b:92:ff:4d:db:ea:bf:8b:61:2a:
0c:96:02:5c:a7:dc:77:9a:7c:63:f4:36:33:56:fc:
5f:d0:80:30:b6:42:ad:0e:1a:68:97:92:7a:05:2a:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:63:68:11:99:E0:46:EA:D7:59:68:82:33:A5:37:89:39:A4:6B:F6
X509v3 Authority Key Identifier:
keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:aa:b0:a9:e2:66:61:e9:fc:cb:4e:58:b3:30:4f:66:11:17:
55:81:fb:e0:76:ea:53:8b:64:7b:d3:8d:c7:8f:50:03:0c:d7:
41:d6:3f:19:ff:a1:25:d5:88:aa:91:0e:fa:e8:aa:f8:8a:38:
d0:44:6f:ce:60:e1:76:7b:fe:07:ad:cb:b9:44:d7:44:52:01:
31:02:83:49:1c:86:af:5b:6c:92:d8:e0:51:cb:c5:e1:c1:3e:
df:58:fa:97:df:e7:84:be:95:d2:27:12:71:ba:41:2d:fd:56:
e1:13:f5:1c:34:55:4a:90:da:83:d0:a2:50:e1:d1:ba:47:40:
d6:73:2e:b2:63:18:23:37:d9:95:f3:ca:09:1d:d9:c1:c6:ad:
47:b4:8c:bc:b1:81:9f:47:39:b2:55:e5:39:3e:b8:c6:48:77:
eb:96:18:98:78:d7:52:3b:4c:5e:e1:ab:0f:e5:12:a0:cc:75:
9a:d6:dc:e8:db:02:d9:d0:36:e7:c4:47:37:3d:c4:75:f6:b4:
71:65:3c:cf:6d:8c:09:7d:9c:66:3a:79:99:17:44:fd:ec:9e:
e8:e7:e2:41:7f:21:b2:ba:a9:fe:7a:3b:57:18:71:1d:84:8e:
2b:b1:55:59:c9:4c:80:fd:8d:8c:b3:a9:c0:73:d0:cf:2b:ed:
d8:86:ea:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:35:51 2026 by rpki-client