
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
File: GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json)
Hash identifier: q7DT9EQFzgmiXFM2a1EivZ3cNz/lFoIr0FvkV0fVE+U=
Subject key identifier: F8:16:AE:01:0E:AE:E0:47:65:13:3E:FB:9A:18:40:12:87:6B:6C:F9
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
Manifest number: D3
Signing time: Mon 21 Sep 2026 06:44:07 +0000
Manifest this update: Mon 21 Sep 2026 06:44:06 +0000
Manifest next update: Mon 28 Sep 2026 06:44:06 +0000
Files and hashes: 1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: A2ydQzbDVpn6GUkxpD73/ZgkWklFiEWJ5+7bHMUCxc4=)
2: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: FRx1ILrXRk/D6NM37DgKlOP8QzRDUYGOaHdxxmU119o=)
3: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: RJ2sx6p2KIpfuzWkhVi9i2Tb6z+LWx+fgMZmXi47440=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Validity
Not Before: Sep 21 06:44:06 2026 GMT
Not After : Sep 28 06:44:06 2026 GMT
Subject: CN=6ab0d236-19eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:9b:63:06:bb:5b:56:10:5b:14:59:29:73:
ae:46:96:f1:11:02:ce:c4:e8:71:51:5d:fa:ac:d8:
dc:c0:06:2d:df:8d:ac:81:b6:e3:a7:58:f9:2a:53:
96:81:4f:14:49:0c:1c:9b:8b:71:c9:c1:cd:33:09:
7b:03:a8:33:1d:5e:8a:d8:60:af:e3:a4:98:16:eb:
d6:21:48:9c:bb:e0:9d:af:80:70:89:e6:a4:7f:f1:
09:27:fd:c6:d9:ae:44:3e:55:5b:28:74:88:7c:43:
8b:e7:30:45:3c:2d:3a:cb:54:5e:ab:d8:0c:62:bd:
50:43:73:dc:08:d8:a4:94:c8:1d:7e:0b:39:b7:3b:
36:e1:57:23:6e:58:ad:3a:88:ba:ff:02:3d:54:99:
d0:22:56:20:89:a0:0d:67:10:e1:f6:4e:b6:41:f2:
42:74:9b:23:b8:33:ec:94:4f:a1:24:36:59:3a:9f:
61:fa:bc:32:b3:62:9c:9d:0c:43:ea:a7:81:10:38:
6f:f7:ba:2e:8a:13:3f:71:8d:93:94:38:ec:02:79:
26:32:98:33:16:38:44:bb:6d:fc:2c:ce:40:ca:11:
02:fb:50:f4:a3:a0:34:7a:c6:e3:9a:b9:76:fb:2a:
64:c8:3e:b1:6f:74:6d:3d:41:7b:f5:3e:95:67:b1:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:16:AE:01:0E:AE:E0:47:65:13:3E:FB:9A:18:40:12:87:6B:6C:F9
X509v3 Authority Key Identifier:
keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:5c:62:c4:85:8a:29:1a:10:8d:09:51:d8:39:8e:03:cc:12:
e7:11:53:0d:8f:a0:ad:9f:08:2d:04:74:73:5e:df:88:55:a3:
ee:0d:7d:fc:2c:89:a1:f8:3d:b3:e4:30:f0:4c:96:7f:aa:e5:
7c:18:b7:6b:06:12:8c:eb:19:b4:30:07:bc:d7:6b:6f:9b:5a:
4a:1c:6f:af:06:7f:24:9e:c9:e3:61:9e:fe:7d:c4:9e:09:1b:
24:5f:4a:b0:a7:5e:67:12:7e:d0:a7:ba:87:30:9d:af:d8:9e:
6a:54:94:57:8e:75:83:07:8b:34:d9:fc:ed:53:3d:0a:0c:23:
99:79:b8:9c:0b:7c:66:3a:d6:72:23:65:72:9e:d1:75:a2:c8:
e1:29:5b:eb:ce:d8:4b:ad:3e:7e:ea:1b:7f:c1:f3:3d:14:57:
44:41:07:f5:c9:e1:53:a9:a5:eb:9a:6e:23:95:bb:8a:25:4e:
78:10:8e:18:40:ad:3e:e5:8e:ac:d7:22:29:2c:b3:7c:9b:95:
dd:98:1b:83:ef:81:9d:ba:fd:48:df:20:ad:da:1f:6f:62:13:
c3:08:ad:4d:29:b8:93:a6:d2:54:99:23:89:47:8d:57:9d:d4:
51:f5:e0:d1:1d:1d:5a:be:a2:99:7a:5d:34:2b:8d:ef:7c:2d:
f7:af:5d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:28:53 2026 by rpki-client