
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json)
Hash identifier: wjRx1cbABe5ke7SHCACunbFceFAQlrleUOeeQfX0TUk=
Subject key identifier: 9B:4A:62:DD:85:14:C4:42:0E:EF:26:E4:4E:E5:8A:AE:A9:5F:BF:03
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
Manifest number: 0222
Signing time: Sat 13 Jun 2026 02:51:43 +0000
Manifest this update: Sat 13 Jun 2026 02:51:43 +0000
Manifest next update: Sat 20 Jun 2026 02:51:43 +0000
Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: U8EcFOP9hMV27mLwfjurjQYxXBxjIS1qACOMv68n//E=)
2: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: QCegcRYs57pRsPyT5X8JuUVRIwN6pDaNJngx1VkdWBE=)
3: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: nm71mjp1wKJMnw5o4H2CqL1YYBqldzh5Oha2XaIb+4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Validity
Not Before: Jun 13 02:51:43 2026 GMT
Not After : Jun 20 02:51:43 2026 GMT
Subject: CN=6a2cc5bf-6bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:85:92:3f:00:aa:84:e4:d8:55:65:98:02:
da:73:4b:af:46:d3:45:f8:65:ab:18:3f:79:de:bb:
e4:f7:04:c3:a0:6e:cf:2a:96:03:06:8e:7f:da:b4:
a9:03:ac:70:bc:1e:29:18:1d:d2:52:de:3c:1a:df:
e9:54:67:54:76:1d:4f:c2:94:c0:ec:d9:ba:0f:62:
cf:fb:49:bf:9f:58:b3:72:9b:57:d4:0e:d3:99:08:
85:8a:36:68:3b:5f:4a:7d:01:c3:ba:f5:94:0b:b4:
e1:58:85:34:3a:f8:c7:b6:c4:cc:79:ac:51:56:a4:
73:b1:59:2f:7b:ec:9d:47:e8:09:31:9c:5b:bb:7d:
21:ec:0b:fe:28:a7:62:f0:83:c9:5b:db:70:63:31:
5d:a6:13:4e:93:c3:17:b5:b4:51:07:56:e4:76:ce:
f0:96:ef:ba:88:3a:30:b7:a1:4c:21:cb:83:40:e5:
de:41:32:fe:79:50:89:8e:12:ef:f5:b9:41:56:27:
d4:20:dd:17:96:48:ce:99:58:0d:77:e6:09:b0:18:
5d:f8:6d:25:a8:b7:e1:66:df:7e:f0:f5:56:39:b7:
b8:ce:c5:ad:3b:09:ac:65:e3:e4:00:94:30:4b:a4:
61:2c:3d:ee:7e:78:36:6b:16:b6:54:91:b3:6d:be:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4A:62:DD:85:14:C4:42:0E:EF:26:E4:4E:E5:8A:AE:A9:5F:BF:03
X509v3 Authority Key Identifier:
keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f4:69:27:1f:eb:89:46:b4:b1:1b:cf:d2:c5:ff:1f:5b:35:
9c:28:01:ac:05:73:d3:d6:ac:d9:81:cf:9a:ef:db:35:7b:bb:
53:ad:f1:53:50:bb:62:68:68:4f:f1:32:c5:88:f2:2d:3f:09:
83:2c:47:51:83:93:db:18:a0:d4:c5:7d:d7:bf:40:30:1f:59:
94:2d:51:21:a6:53:0d:40:94:3e:e7:5d:3d:f3:ea:7d:67:f6:
cf:f0:a5:07:4a:0d:76:fc:8d:95:24:b3:54:4d:fb:79:5f:cd:
19:77:1e:a5:b0:90:66:95:30:95:5b:31:6f:86:26:4f:7c:e2:
44:0d:32:41:e2:bd:4c:5b:5f:ec:55:e5:30:dd:bc:f5:d8:ba:
b8:58:e3:ac:f8:ee:2a:85:60:6c:b0:85:90:57:f2:dd:2d:0f:
b9:7d:9f:56:3d:f7:70:82:47:3d:fb:a4:1e:77:bc:c7:6a:d0:
d5:f1:a4:9b:cb:1b:9c:be:f9:71:f0:21:8b:29:69:3f:e0:fa:
29:c2:1d:81:cd:ff:f9:a4:7c:0c:d2:b1:92:d2:95:eb:3e:6f:
cd:f1:72:4f:a8:21:7a:ae:e2:d0:51:60:a6:f3:23:14:28:d7:
ba:10:d7:94:4b:0c:ac:95:e8:3e:92:8a:c7:80:0b:a6:72:83:
d8:58:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:41:07 2026 by rpki-client