
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json)
Hash identifier: 0YjueTkSUNv189szehLnYy8IQrF3mReMkr8ZPFTGjb4=
Subject key identifier: B8:50:B2:AC:81:98:53:8A:0D:FF:92:29:20:7D:4E:3D:68:01:E6:37
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial: 026E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
Manifest number: 0261
Signing time: Fri 09 Oct 2026 02:45:37 +0000
Manifest this update: Fri 09 Oct 2026 02:45:37 +0000
Manifest next update: Fri 16 Oct 2026 02:45:37 +0000
Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: IDtQnE9J2zONCgrqcDx4Pi1/kORlInBvkyM3JwrTL8k=)
2: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: wfqgmiYwhfm3vauQpeYyEZQnrqn5J3zQJQ5nfR04nk4=)
3: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: ZKyMMeDidw2RZBoa1Uac9hxWkhYX6qMAN6CuYcH5VgI=)
4: 63A2921EB00A11F1BB307FE66811F970.roa (hash: fn1JWv5BqryK+ZEc9d9YgHpP5ZlZf/Pxj6q/K1vvhR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 02:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Validity
Not Before: Oct 9 02:45:37 2026 GMT
Not After : Oct 16 02:45:37 2026 GMT
Subject: CN=6ac85551-9a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:5c:87:50:7c:b8:45:f6:dc:94:ca:c2:b8:
43:a1:cf:29:ed:8b:aa:57:45:fb:d5:8c:dc:f0:ae:
f2:67:59:75:11:f1:fd:28:30:81:ae:34:19:09:f3:
24:f2:00:09:f0:47:a5:9d:01:f1:67:97:7e:e2:dd:
2a:10:6d:08:6b:ba:94:9d:f7:bb:f6:25:07:a7:25:
49:61:ae:dd:c9:d2:1a:1a:27:fd:e3:b5:bb:79:aa:
59:95:6d:fb:57:7b:33:d3:22:78:9f:93:35:92:29:
16:29:31:69:e5:ae:7f:15:86:6c:ae:cf:af:b1:36:
2f:d3:b0:31:90:fa:62:64:be:72:6c:99:db:bf:a8:
ed:13:bc:94:fd:cb:0d:e6:9c:8f:20:b2:b1:35:d4:
e4:d9:61:2d:6b:a8:98:22:a3:70:0d:e1:50:94:0a:
da:fc:d5:9f:05:1d:64:d7:40:f3:a2:71:bd:6b:5f:
2c:28:6f:62:98:8d:82:82:91:ae:1a:3d:f4:64:39:
1b:10:b0:4f:5d:13:3d:4d:83:c0:56:7a:75:a0:c7:
eb:ae:33:6e:05:aa:ba:62:c4:49:1c:e1:03:10:22:
e2:76:c6:59:19:9b:a9:8a:26:7d:d0:02:fd:2b:a5:
61:58:49:c1:2f:ea:bb:91:20:66:16:09:ed:6e:8f:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:50:B2:AC:81:98:53:8A:0D:FF:92:29:20:7D:4E:3D:68:01:E6:37
X509v3 Authority Key Identifier:
keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:f8:17:7a:6f:e4:bb:b2:76:42:72:5b:2b:a8:b7:90:b5:b5:
af:11:7b:2d:56:ec:90:7d:4c:39:31:5f:81:3c:bf:2d:4f:9e:
98:71:3a:a0:38:c9:a7:b8:81:56:11:d3:d8:f5:4e:30:b6:b8:
b9:34:9c:44:c9:ba:7a:61:e9:df:ba:a5:74:eb:44:1a:ab:b4:
81:a4:41:25:d0:65:7b:a5:05:6f:7a:5c:83:a2:1d:be:05:a1:
ab:d5:75:ce:69:6b:79:6a:e5:a1:4d:3b:c3:e6:01:e0:a7:7e:
0e:45:ea:03:ee:06:f4:6f:37:ea:0a:4d:19:96:c5:1c:4c:f8:
17:34:09:c5:da:e9:53:b8:5a:84:0c:47:6f:d1:fa:b2:48:ed:
ce:77:89:e7:fa:86:6c:1d:0e:fb:0f:0b:55:ed:2d:1a:6b:e2:
af:da:10:d0:42:88:1b:35:20:6f:26:06:c7:9d:49:b3:8e:98:
51:c2:7a:69:3f:be:d2:a3:c7:18:fc:1d:41:fe:db:1f:2a:f2:
db:5d:e2:21:3f:f6:32:69:28:89:c4:31:d9:1f:2a:d8:8f:e6:
18:ec:a6:9d:33:dc:8f:d2:22:72:48:8d:e3:23:e0:20:df:be:
9b:1d:6a:ef:d6:c3:7c:93:77:c7:b4:e0:f4:ba:1d:58:0e:c3:
5d:7f:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:53:08 2026 by rpki-client