
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json)
Hash identifier: oBG6tNovWUQ3mLHKQfupFx4bK5FQoHjYi/XcjWX/oJs=
Subject key identifier: 38:9F:3A:7F:DB:DC:4B:4C:B5:4A:17:28:0E:17:46:69:6E:C5:AF:D0
Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Certificate serial: 0CB4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
Manifest number: 0C9B
Signing time: Fri 12 Jun 2026 18:34:56 +0000
Manifest this update: Fri 12 Jun 2026 18:34:56 +0000
Manifest next update: Fri 19 Jun 2026 18:34:56 +0000
Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: g2LH5ePdDF5JOTU+WHHScnSRAkrG0HMaLl6oM9OMcec=)
2: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: HsO9P79p+Dz9d/F54R7UspGL8AUMT0cv4Reo5e0BZX4=)
3: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: d0N0+ozuWdpcxDDoPKaBdN3Mx94MvRgN2nEEP72M5AU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3252 (0xcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Validity
Not Before: Jun 12 18:34:56 2026 GMT
Not After : Jun 19 18:34:56 2026 GMT
Subject: CN=6a2c5150-b870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:f2:4e:f2:9d:97:2a:bc:fb:d4:b8:ac:23:
59:bf:a0:24:78:27:86:90:45:cd:de:4b:e3:cf:0e:
50:4a:8b:89:4b:3a:d3:f8:0e:54:26:3f:5d:c2:d7:
71:ca:63:73:df:ba:7d:7d:68:0c:92:97:45:56:89:
93:ec:09:69:91:6b:9c:e3:72:89:75:f4:c8:81:25:
cc:d9:ef:52:70:2e:19:99:51:bc:0c:43:3d:a8:ee:
f4:99:15:e7:df:38:43:89:d2:d9:35:53:64:2d:ae:
15:ea:2c:e6:73:f3:09:dd:b5:f9:1f:3c:6d:15:98:
19:fb:4d:c8:df:44:a5:de:ce:a1:30:23:03:84:06:
01:3f:da:13:1e:f8:15:ee:c7:0e:64:73:1d:6e:1f:
b4:d0:4d:a4:e7:3a:a8:f7:2a:59:87:49:c4:4f:79:
ad:0d:4d:c0:fe:e7:02:84:74:d5:bd:a6:22:ac:aa:
cc:ad:e3:b4:04:cc:0d:2d:27:ed:b3:fe:fd:e6:64:
99:d7:d8:d4:c3:43:f7:e4:3e:45:0a:29:56:0e:ad:
62:7e:4d:c3:5c:81:c1:87:37:dc:ac:1d:e6:a9:b4:
00:bd:bc:f7:95:36:dc:41:e3:75:11:e1:81:10:05:
b7:41:01:73:58:b3:63:fa:51:25:9d:a9:f6:2e:90:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9F:3A:7F:DB:DC:4B:4C:B5:4A:17:28:0E:17:46:69:6E:C5:AF:D0
X509v3 Authority Key Identifier:
keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:30:54:8d:38:d0:0e:5a:37:ab:55:da:fa:33:c4:4d:99:e6:
e7:88:84:78:a2:0b:a4:d0:77:87:af:e5:e0:3b:ae:6c:a8:43:
8d:0f:03:f6:8d:75:59:3e:23:77:74:fb:d0:72:02:4d:20:b0:
5b:e5:fc:bd:93:55:c6:15:27:e1:c2:a7:09:e2:82:db:e9:1a:
d6:b2:cc:33:f6:44:2a:b8:32:01:a4:6d:4c:4e:9e:f2:a6:45:
83:9d:d0:7e:74:c1:16:48:fd:30:92:25:03:76:ed:1a:2f:c6:
13:6a:eb:a0:f1:ef:cc:78:f2:3e:c5:3d:73:eb:16:a4:1c:87:
7b:0a:22:1c:25:20:c1:ef:d9:b4:f3:ce:c5:2f:00:0b:62:05:
c8:fd:23:fc:31:ce:74:2a:ef:de:26:de:2a:a2:36:6f:51:94:
93:7f:4a:8e:9d:2d:85:c2:89:95:f1:94:c1:19:9f:58:f9:cd:
b1:00:d4:93:49:3c:8a:0e:49:d7:36:de:d3:75:20:8a:6f:7e:
48:1e:13:00:59:e2:4b:c2:bc:b0:93:37:b5:f4:4a:01:fb:5a:
6e:f2:92:2d:98:07:f7:c1:f9:f7:c2:ff:33:4d:73:3c:12:34:
65:59:6d:ed:80:10:cd:18:26:87:c6:66:25:5e:f5:4d:d9:35:
73:1f:25:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:58 2026 by rpki-client