
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json)
Hash identifier: FcdEydW6Ak7waVJlEUyLBevKqKDjsmRAac48AtHPcH4=
Subject key identifier: 2B:89:60:EB:AF:BD:D5:46:8E:6A:85:06:7C:05:93:FE:AD:C0:B4:61
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
Manifest number: 023A
Signing time: Mon 27 Jul 2026 04:09:06 +0000
Manifest this update: Mon 27 Jul 2026 04:09:05 +0000
Manifest next update: Mon 03 Aug 2026 04:09:05 +0000
Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: h0x8ISNSLUlPe7I4rYTY4Zeo/0s1J4D5fGvyEbajUpE=)
2: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: wfqgmiYwhfm3vauQpeYyEZQnrqn5J3zQJQ5nfR04nk4=)
3: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: ZKyMMeDidw2RZBoa1Uac9hxWkhYX6qMAN6CuYcH5VgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Validity
Not Before: Jul 27 04:09:05 2026 GMT
Not After : Aug 3 04:09:05 2026 GMT
Subject: CN=6a66d9e2-64fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:2d:23:d8:69:55:30:c3:ac:58:dd:39:4e:
ae:1a:2e:43:ea:7c:93:e8:2d:38:18:41:c8:42:ed:
9d:34:ff:7c:39:8b:ac:7b:b0:df:e2:cf:59:13:fc:
19:6e:98:65:26:ce:50:49:bc:e2:d2:09:f4:fe:e7:
ee:b0:99:fa:08:ef:88:06:38:a7:78:63:b8:88:9c:
08:ce:75:01:fe:4b:ec:f6:c0:ae:08:e4:03:eb:16:
d7:e3:58:fb:a0:06:ab:de:c2:aa:47:43:ea:91:ad:
1c:83:31:37:54:0c:9f:14:35:89:a4:ec:ad:d4:25:
e6:5a:27:d5:9a:df:67:57:29:54:91:25:30:08:83:
46:df:a5:4b:72:99:94:d4:70:e2:94:78:59:fa:de:
98:e2:1b:e9:71:ae:d3:62:d0:1b:3e:a6:f0:1e:79:
a4:1c:7f:3b:d3:4f:47:d7:ee:15:9b:0b:28:6f:4d:
df:32:71:0f:7d:91:38:d4:d3:44:a2:1d:cf:85:d7:
ce:13:f1:9e:52:95:ea:93:5a:29:86:28:d5:e1:56:
68:06:c8:9b:18:69:73:12:bc:f0:4d:2b:ea:5e:ce:
e6:1c:68:5c:d5:60:dc:0b:55:48:84:b4:f6:6f:1b:
b4:c5:a7:12:80:22:ee:41:48:23:28:ce:c8:3b:88:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:60:EB:AF:BD:D5:46:8E:6A:85:06:7C:05:93:FE:AD:C0:B4:61
X509v3 Authority Key Identifier:
keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:23:91:c3:32:8b:67:5f:77:ff:44:98:dd:f8:a7:3e:b5:e2:
9a:13:3b:85:26:6c:13:9b:28:49:36:2b:81:6e:aa:0d:3a:c2:
30:70:84:71:a9:6c:1a:1c:37:5f:be:34:38:da:85:ed:55:ee:
c2:97:28:12:47:ed:aa:d4:3b:d3:ba:4c:36:62:4e:bb:0d:1c:
93:9a:33:e6:a1:b8:45:ac:62:99:d3:3f:de:65:da:5f:82:f5:
b5:67:ea:1d:5c:61:0e:ea:51:cf:93:23:e2:54:4a:45:28:62:
dc:f6:1e:12:49:85:6d:ce:24:e0:a1:c8:8f:07:23:eb:9b:fb:
db:eb:a3:97:38:ef:c7:48:36:06:a3:fa:e7:49:26:65:a6:6e:
3e:d5:40:16:8e:00:b4:a2:fa:48:7b:e2:db:78:52:27:19:cd:
16:30:ee:e8:c5:bf:0d:51:a5:5b:09:66:4a:38:15:08:0c:10:
67:dd:25:2b:b9:42:11:f7:b4:51:ad:11:87:d2:40:97:f4:19:
0e:f0:5a:0c:2f:c6:40:60:80:74:54:72:56:cb:dc:26:52:48:
03:c4:1e:d9:b6:3a:90:cb:e5:1e:4b:a6:65:94:38:1a:51:f6:
ff:87:39:d2:fa:0a:ae:d9:9f:28:42:93:66:5e:ed:7e:d7:79:
79:a9:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:14 2026 by rpki-client