
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json)
Hash identifier: qr8D9ZR32AkYP281dylsnDRLoRNYhgfAc4dH5YEbPF8=
Subject key identifier: E7:4F:16:42:DD:53:F8:A7:94:AA:E3:C1:EA:7B:74:12:81:81:F2:62
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
Manifest number: 01EE
Signing time: Sun 01 Mar 2026 23:49:02 +0000
Manifest this update: Sun 01 Mar 2026 23:49:00 +0000
Manifest next update: Sun 08 Mar 2026 23:49:00 +0000
Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: 2DNNOfiMvxXuEfWWzVn/L43UokyP5DoeqLGeyNXGnqU=)
2: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: QCegcRYs57pRsPyT5X8JuUVRIwN6pDaNJngx1VkdWBE=)
3: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: nm71mjp1wKJMnw5o4H2CqL1YYBqldzh5Oha2XaIb+4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Validity
Not Before: Mar 1 23:49:00 2026 GMT
Not After : Mar 8 23:49:00 2026 GMT
Subject: CN=69a4d06d-8450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:97:39:9e:64:7f:15:64:5b:10:37:c0:92:
fb:cc:8b:d5:1c:42:5c:88:d4:89:99:67:72:c0:2e:
84:31:32:ea:e4:19:c7:59:61:32:54:61:14:79:08:
33:0f:d3:87:76:48:86:37:eb:40:88:32:4e:d2:a4:
0b:92:c4:a1:a9:09:8c:7e:0e:5a:c3:44:c2:da:db:
86:4e:b7:7f:8e:7f:49:b8:97:f8:41:87:f9:79:85:
43:13:99:a6:2d:40:a7:16:c1:7e:17:59:8a:cf:ee:
8d:ca:5f:94:17:96:c8:78:b6:5f:63:5d:d5:ec:3f:
75:dc:df:9b:29:26:b6:86:bf:44:b7:7e:ce:66:ae:
b8:55:6d:88:23:36:e9:d1:88:9d:2b:85:81:36:f5:
a3:93:54:a3:67:4c:24:05:d9:66:5f:5f:05:79:19:
01:f1:6f:d5:03:ed:0b:b6:cc:de:5f:50:2e:6b:27:
ef:4e:70:9f:eb:9e:48:01:c3:e4:f3:b4:ae:90:62:
b0:d5:05:b2:c4:8d:d7:b2:a9:27:23:b2:4b:2e:1a:
79:b8:e5:7d:62:05:dd:bf:12:01:e9:62:06:83:68:
60:1e:91:fc:16:16:a3:5a:7a:24:a0:f3:65:55:42:
4a:77:96:b8:23:37:39:32:d7:cc:a5:66:9d:47:b1:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4F:16:42:DD:53:F8:A7:94:AA:E3:C1:EA:7B:74:12:81:81:F2:62
X509v3 Authority Key Identifier:
keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:2f:98:2e:32:fd:30:92:35:0a:58:e7:d7:1e:dd:41:cf:14:
59:4e:29:89:d9:a2:9c:3b:c6:d6:0d:c0:98:85:7a:5c:c9:a6:
90:40:b9:66:1b:ae:ef:e3:ea:75:be:63:13:27:8f:e9:05:dd:
b0:b5:a4:55:a8:3d:d3:00:39:9e:b0:be:82:8f:87:55:93:c7:
5b:db:66:02:cf:1b:d2:6c:5e:be:68:04:df:3d:c2:be:d0:bf:
8c:c9:56:58:69:d0:a3:74:31:51:d2:dd:73:51:23:c1:71:65:
2c:1d:b0:b8:7e:ad:3b:e6:ce:e0:83:ed:58:97:8c:d5:ff:a0:
48:f8:ff:3c:17:16:5e:26:31:d7:a3:08:5c:fc:51:a6:62:5c:
ee:a1:7d:29:d1:3e:ee:3b:f5:cc:1b:3c:f9:4b:7c:84:5e:7c:
09:a2:86:d4:1c:c1:ed:8c:48:8a:bf:bb:5f:ef:80:2d:23:60:
19:34:1f:52:14:a6:5d:66:49:21:0f:9e:98:4a:bb:c0:86:40:
77:fa:13:29:3d:3c:45:64:83:4b:4e:d8:6c:42:06:86:f8:ed:
6f:48:36:0e:df:e0:39:64:1a:8d:4a:76:25:61:6d:34:3a:a2:
73:1e:76:c6:02:c9:0c:c0:84:c9:fe:28:02:fe:59:d9:98:b7:
3e:2f:1e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:21:50 2026 by rpki-client