
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
File: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft (raw, json)
Hash identifier: j56Fg85FxGnyyI024d88fKDlj+SCEzNJJZesbnCPdjM=
Subject key identifier: CE:AB:04:D2:A2:A1:A8:98:28:FC:9C:5F:7A:40:02:01:71:62:73:EC
Authority key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
Certificate issuer: /CN=A9134A42/serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
Manifest number: E2
Signing time: Fri 17 Apr 2026 06:18:27 +0000
Manifest this update: Fri 17 Apr 2026 06:18:27 +0000
Manifest next update: Fri 24 Apr 2026 06:18:27 +0000
Files and hashes: 1: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl (hash: bz4fxrhmpYe54dHTAS9MRZtJuYkRR+fgtxcC3s68u6k=)
2: 89040F5A341011F0808A991DC4F9AE02.roa (hash: XSbMI+UlBWNVtMWApI1sBzS25fpV5xmpW9pr9KdQiGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl
rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134A42, serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
Validity
Not Before: Apr 17 06:18:27 2026 GMT
Not After : Apr 24 06:18:27 2026 GMT
Subject: CN=69e1d0b3-2367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:fa:6d:be:fb:40:e0:42:8d:b6:16:43:67:
b1:fb:63:f4:00:84:df:ae:9c:8b:64:ae:73:bd:94:
94:9e:7e:90:e9:31:17:6c:05:30:e0:85:86:2e:75:
d2:c5:f2:73:f6:47:1b:3a:07:2e:75:9d:97:28:5f:
be:ac:50:fb:51:31:21:a0:93:97:cf:48:11:db:d9:
8b:e7:f5:0c:10:ba:c2:e9:68:24:22:f1:58:aa:25:
88:1e:59:fe:40:04:ee:95:cd:96:cd:2c:99:8e:4d:
b8:4e:92:35:ed:dc:14:f6:03:22:41:38:ea:49:a8:
a8:a1:ae:3f:fc:d4:62:c2:8f:9b:c5:ed:27:03:70:
6a:06:8d:56:90:31:1d:5a:f8:2c:4d:9c:14:8b:58:
24:64:88:d6:e8:5a:c0:ac:a8:13:59:a8:42:7e:65:
ca:9b:77:80:11:ac:04:3c:1d:7b:c0:37:5d:2d:0f:
72:e8:f1:14:81:99:1a:17:c9:44:79:39:df:e4:28:
da:05:0b:38:a0:45:89:43:13:ae:f4:c2:43:8b:eb:
26:dd:39:be:88:51:de:0d:ef:4e:98:c6:74:79:78:
c5:ae:96:d4:65:51:ef:1a:fe:27:b3:3a:bc:bc:c6:
ab:48:e5:33:6d:0f:e9:28:23:a0:6b:c6:d3:72:e3:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AB:04:D2:A2:A1:A8:98:28:FC:9C:5F:7A:40:02:01:71:62:73:EC
X509v3 Authority Key Identifier:
keyid:80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4a:2e:8b:ed:6d:e3:3b:d0:fb:b3:e0:f4:c5:8c:8b:56:5f:
01:9f:54:c7:fc:94:8a:33:ec:38:cf:3f:a8:82:3a:22:a9:b7:
b3:bb:35:f2:8e:16:2d:31:f2:3a:c6:87:2b:21:f3:07:48:19:
31:01:40:33:73:b0:f5:0f:0d:3d:b4:24:f5:c1:7f:fa:55:aa:
9a:70:3c:0a:1d:67:d5:ae:0c:a1:ad:94:e1:1a:3a:2e:f3:50:
bc:98:eb:ed:7c:7e:48:08:99:04:8c:af:b2:3b:db:a5:ac:6f:
ea:ee:68:ec:31:69:66:5e:76:7a:da:1c:5e:da:ff:44:87:88:
74:e5:6e:4c:fc:e5:40:15:ee:ca:53:0d:57:7d:90:87:8f:5d:
2f:ff:38:d4:a3:a0:d7:60:97:0e:8b:bf:b3:dc:a9:2f:1d:7b:
38:0b:23:2e:ee:d5:67:4b:96:e3:e8:c8:d0:39:5a:9c:63:07:
84:2c:ca:ff:23:2b:7f:b2:0b:71:00:6f:85:38:25:3e:94:45:
cd:e9:13:21:d8:88:f8:d4:af:9b:0b:20:cb:b9:8f:88:7a:80:
44:25:1e:e0:57:a2:73:8c:5b:5c:4f:f4:0f:bd:18:8c:fe:bb:
97:ec:c3:b4:a0:61:4b:dd:9f:5a:9b:cf:d0:5d:92:fc:c0:7c:
2b:2a:7b:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRBNDIxMTAvBgNVBAUTKDgwQjE4QjgxRDQ3QjYxNzcxMzA0RTBGNzYxMEQxMUE3
QzM0MDYxMjMwHhcNMjYwNDE3MDYxODI3WhcNMjYwNDI0MDYxODI3WjAYMRYwFAYD
VQQDEw02OWUxZDBiMy0yMzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsnT6bb77QOBCjbYWQ2ex+2P0AITfrpyLZK5zvZSUnn6Q6TEXbAUw4IWGLnXS
xfJz9kcbOgcudZ2XKF++rFD7UTEhoJOXz0gR29mL5/UMELrC6WgkIvFYqiWIHln+
QATulc2WzSyZjk24TpI17dwU9gMiQTjqSaiooa4//NRiwo+bxe0nA3BqBo1WkDEd
WvgsTZwUi1gkZIjW6FrArKgTWahCfmXKm3eAEawEPB17wDddLQ9y6PEUgZkaF8lE
eTnf5CjaBQs4oEWJQxOu9MJDi+sm3Tm+iFHeDe9OmMZ0eXjFrpbUZVHvGv4nszq8
vMarSOUzbQ/pKCOga8bTcuOJGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6rBNKi
oaiYKPycX3pAAgFxYnPsMB8GA1UdIwQYMBaAFICxi4HUe2F3EwTg92ENEafDQGEj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEE0Mi8xRkIwRjY3NkVB
OEMxMUVGODhDOTA4NUFDNEY5QUUwMi9nTEdMZ2RSN1lYY1RCT0QzWVEwUnA4TkFZ
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dMR0xnZFI3WVhjVEJPRDNZUTBScDhOQVlTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEE0Mi8xRkIwRjY3NkVBOEMxMUVGODhDOTA4NUFDNEY5QUUwMi9nTEdMZ2RSN1lY
Y1RCT0QzWVEwUnA4TkFZU00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALkoui+1t4zvQ+7Pg9MWMi1ZfAZ9Ux/yUijPsOM8/qII6Iqm3s7s18o4WLTHy
OsaHKyHzB0gZMQFAM3Ow9Q8NPbQk9cF/+lWqmnA8Ch1n1a4Moa2U4Ro6LvNQvJjr
7Xx+SAiZBIyvsjvbpaxv6u5o7DFpZl52etocXtr/RIeIdOVuTPzlQBXuylMNV32Q
h49dL/841KOg12CXDou/s9ypLx17OAsjLu7VZ0uW4+jI0DlanGMHhCzK/yMrf7IL
cQBvhTglPpRFzekTIdiI+NSvmwsgy7mPiHqARCUe4Feic4xbXE/0D70YjP67l+zD
tKBhS92fWpvP0F2S/MB8Kyp70g==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:30 2026 by rpki-client