
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140E74/C3E729CE947F11F19B37D94E6111F970/gD0J1geOp-9jkpg64HG4dX0qp40.mft
File: gD0J1geOp-9jkpg64HG4dX0qp40.mft (raw, json)
Hash identifier: vgOVi5bPgZsZGlichx3YDQbo1ne0vYlKSJGAniPFOso=
Subject key identifier: 64:EA:F8:CD:FA:53:3E:53:99:93:41:59:9B:EA:23:E8:61:23:FA:1D
Authority key identifier: 80:3D:09:D6:07:8E:A7:EF:63:92:98:3A:E0:71:B8:75:7D:2A:A7:8D
Certificate issuer: /CN=A9140E74/serialNumber=803D09D6078EA7EF6392983AE071B8757D2AA78D
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gD0J1geOp-9jkpg64HG4dX0qp40.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140E74/C3E729CE947F11F19B37D94E6111F970/gD0J1geOp-9jkpg64HG4dX0qp40.mft
Manifest number: 1C
Signing time: Fri 25 Sep 2026 09:07:25 +0000
Manifest this update: Fri 25 Sep 2026 09:07:24 +0000
Manifest next update: Fri 02 Oct 2026 09:07:24 +0000
Files and hashes: 1: gD0J1geOp-9jkpg64HG4dX0qp40.crl (hash: LJG52Cpn3qfwZ3Tz2AvEHU+Ho/7Bifypf0QRHPMbrB8=)
2: 1CF1B6D8948011F1975C376A6111F970.roa (hash: 8IpHaph/KPVXES/9dvHuSAE44rYlWD7gCU6nrOwmVoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140E74/C3E729CE947F11F19B37D94E6111F970/gD0J1geOp-9jkpg64HG4dX0qp40.crl
rsync://rpki.apnic.net/member_repository/A9140E74/C3E729CE947F11F19B37D94E6111F970/gD0J1geOp-9jkpg64HG4dX0qp40.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gD0J1geOp-9jkpg64HG4dX0qp40.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 09:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140E74, serialNumber=803D09D6078EA7EF6392983AE071B8757D2AA78D
Validity
Not Before: Sep 25 09:07:24 2026 GMT
Not After : Oct 2 09:07:24 2026 GMT
Subject: CN=6ab639cd-bd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:90:c6:71:be:56:6f:c6:64:99:6a:67:53:
d0:72:74:db:f9:6a:4f:b4:a3:f4:e2:1a:d3:11:ff:
bc:13:7f:5d:5b:09:5a:91:46:08:e3:8b:d1:41:65:
fa:df:7a:30:32:94:7f:96:2d:40:07:8c:54:72:a5:
5a:0a:ba:b9:e3:a3:c0:db:28:3b:04:50:66:ef:3c:
74:5e:ff:7e:56:ef:77:5e:ef:17:15:fc:ed:a8:cc:
ff:e8:f9:55:35:06:5a:c9:ab:82:3f:ab:fb:9e:a9:
ed:96:ea:00:21:f7:bd:20:38:de:14:7f:cf:f7:46:
b1:2b:34:dd:61:04:e4:b4:9e:56:9f:90:b1:27:44:
48:83:4b:ba:86:27:71:2f:e0:bb:5b:6f:f6:c9:7d:
69:47:5c:76:c8:0c:cf:24:13:5b:0e:b0:10:d6:a7:
7a:ac:e7:ad:d0:39:35:42:c9:f1:2d:40:0a:90:02:
05:ae:c4:fa:ac:d7:9a:5b:4c:79:4d:11:4d:95:e1:
fb:81:40:e1:06:93:25:d9:57:5d:23:49:d8:ff:9c:
e4:39:37:ef:26:f7:d9:f3:c5:62:cd:5f:d1:30:ff:
1b:41:af:94:ea:43:6d:1a:98:b9:d6:b7:a1:36:4f:
8a:77:99:52:23:5d:fb:22:50:16:37:3d:5a:71:78:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EA:F8:CD:FA:53:3E:53:99:93:41:59:9B:EA:23:E8:61:23:FA:1D
X509v3 Authority Key Identifier:
keyid:80:3D:09:D6:07:8E:A7:EF:63:92:98:3A:E0:71:B8:75:7D:2A:A7:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140E74/C3E729CE947F11F19B37D94E6111F970/gD0J1geOp-9jkpg64HG4dX0qp40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gD0J1geOp-9jkpg64HG4dX0qp40.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E74/C3E729CE947F11F19B37D94E6111F970/gD0J1geOp-9jkpg64HG4dX0qp40.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:b6:01:f8:4b:00:8f:f6:9c:10:51:f1:df:a6:3f:15:59:38:
a5:26:12:b2:ee:f9:4b:e3:b9:ec:75:41:f4:16:e0:4b:00:52:
09:d0:0d:c9:09:70:e4:11:7a:f8:8a:46:25:ef:cc:36:a6:7c:
d3:9d:6a:bd:d8:62:e1:50:69:8b:46:f1:6f:bd:21:b2:e9:d8:
ab:44:3a:ea:b4:37:6a:ec:69:9d:9d:c4:ed:83:19:ea:9d:07:
05:79:36:8c:59:51:b5:fd:8b:61:a7:1c:ed:2c:d1:8a:68:72:
a4:0b:ed:20:7f:ba:09:2e:fd:71:5c:20:0f:55:96:d8:de:31:
1a:cc:d4:dd:27:47:60:26:af:e1:b5:75:21:9f:43:27:4b:c0:
cd:04:6e:a9:a2:3b:20:9b:63:46:c6:e5:7d:8c:01:c6:8a:80:
d2:d4:87:26:0b:73:87:3b:b0:68:93:4b:17:f3:b5:19:e1:07:
c0:87:cc:5c:31:87:01:2b:95:d0:46:b3:55:40:cf:52:90:e5:
30:af:73:4e:4e:6e:ba:51:e2:df:21:e9:86:8c:80:57:a8:43:
40:44:d5:a5:1a:48:de:41:89:aa:ea:c5:36:e3:b6:b7:b5:ac:
3b:74:a8:76:a6:ba:44:6e:f5:28:1c:fb:cd:96:2d:1d:d5:a0:
66:d8:60:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:09:26 2026 by rpki-client