
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
File: GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json)
Hash identifier: hGdVbIDvwCMDlCr65OvTAeIP4hAWQR6np6kHHvOC7HU=
Subject key identifier: 70:1D:DA:46:0B:74:0A:D9:09:29:5A:B8:C4:91:DB:8F:B3:C3:50:F2
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
Manifest number: 69
Signing time: Sun 01 Mar 2026 09:28:47 +0000
Manifest this update: Sun 01 Mar 2026 09:28:46 +0000
Manifest next update: Sun 08 Mar 2026 09:28:46 +0000
Files and hashes: 1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: QfvV4X2JxfL4Q2FVu1DAxQLteCZt2ZxJt8Lo9j8QD5M=)
2: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: m7DMA83ij3acsruvbXtzUZGixQ9Vi2li8uh9A40WUy8=)
3: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: WDN6o1C7BNEEOXc9CMw75qAL/XttPv0hwWgMm1mcCYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Validity
Not Before: Mar 1 09:28:46 2026 GMT
Not After : Mar 8 09:28:46 2026 GMT
Subject: CN=69a406cf-fc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:3c:32:f0:18:2c:a5:5e:72:4b:84:06:c4:
45:9e:e3:7c:2d:0c:b2:1e:26:e3:bc:90:88:e5:6d:
02:a8:74:46:8d:f5:c9:ff:76:cd:66:79:b9:11:a7:
59:47:47:4f:e4:83:7e:10:fb:9b:ed:81:20:bd:e2:
c0:6f:73:55:0d:f9:97:d7:9d:2b:bd:b4:cc:ee:c3:
b7:cb:7a:6c:54:0b:a1:23:ea:dd:e2:60:16:cd:00:
6f:74:38:63:85:17:34:bb:4d:d1:f3:2c:16:b4:ac:
73:96:30:e8:b8:33:08:37:b9:75:d8:d0:45:70:0b:
14:7f:3f:55:4e:37:db:a5:bd:ef:bd:23:c6:2d:27:
f2:84:6e:7b:3f:ee:43:f0:de:f1:17:ec:fc:7f:65:
12:e3:ce:4e:08:60:72:79:f9:6f:15:51:b9:a8:cb:
e7:d2:79:28:57:c1:71:89:6a:9c:93:25:f1:30:71:
19:72:a8:cc:f3:45:4c:67:7c:53:c7:a9:3d:7d:49:
9f:f4:16:bd:d4:5f:15:37:a6:0d:bd:ec:27:7c:dc:
d8:2f:2b:30:0c:52:78:9c:75:fa:34:a1:c3:48:bd:
4d:e0:33:60:81:7a:3b:96:c7:6f:12:68:2f:e0:74:
0d:dd:e1:4b:21:c5:54:98:ec:ed:92:a5:e9:25:d6:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1D:DA:46:0B:74:0A:D9:09:29:5A:B8:C4:91:DB:8F:B3:C3:50:F2
X509v3 Authority Key Identifier:
keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7b:df:4f:36:93:e7:78:75:27:c2:a3:9c:8a:89:fb:1e:22:
da:5a:25:a1:2d:35:50:cd:c3:fb:8f:45:42:f5:90:d6:90:3e:
ae:3c:39:5c:47:39:07:99:39:05:1d:70:be:4c:ea:98:85:87:
87:96:9d:a9:9d:3d:44:86:89:45:99:9c:a9:08:c2:80:b5:96:
45:9d:a5:c6:de:e9:ea:d9:41:03:31:3a:70:67:10:56:71:16:
58:63:49:96:e1:68:45:7b:06:85:49:35:e8:39:02:1a:62:93:
a8:01:3c:02:13:bd:b2:24:1d:19:93:67:bc:c2:c7:49:7e:52:
95:49:16:f5:24:02:be:09:a0:23:b7:e4:58:d1:00:5c:52:ca:
76:b1:0d:56:71:32:0e:e0:b3:10:93:89:16:66:fd:ec:fb:9b:
3c:52:56:94:80:1b:e6:01:84:ba:c6:72:b2:66:5e:90:08:e7:
20:1c:cc:0b:1b:31:68:59:95:a2:ea:72:cf:8f:2c:5d:6d:f8:
9d:46:93:80:c5:ff:66:73:7a:f9:9c:d8:97:14:5d:47:5a:0c:
7a:3c:82:84:1c:ee:16:b7:c5:84:07:25:74:a8:b3:5c:c6:26:
d5:e3:20:9a:f6:86:b0:76:8b:f0:d8:83:71:88:7d:49:8b:8e:
17:50:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:48 2026 by rpki-client