
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
File: gg9wML6sbUnxCbqOwlplvyNprS8.mft (raw, json)
Hash identifier: oF6z6Hu1OwjZENSeJcDi2nEA4TqLyk60zmtnK+sLeJ4=
Subject key identifier: A3:7A:78:41:90:CC:6A:8F:92:D1:32:F3:AF:0A:13:EE:88:CC:89:BD
Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F
Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F
Certificate serial: 0284
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
Manifest number: 027D
Signing time: Mon 27 Jul 2026 03:20:47 +0000
Manifest this update: Mon 27 Jul 2026 03:20:46 +0000
Manifest next update: Mon 03 Aug 2026 03:20:46 +0000
Files and hashes: 1: gg9wML6sbUnxCbqOwlplvyNprS8.crl (hash: SXdH5CdnfD7zpOOAhR9qcZXOaxZtJoX3qKSErjO/HMY=)
2: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (hash: vZAj9NjXjOPeL5GQysAVibay7KYfqb17AZh26Rch2sk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl
rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146DAA, serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F
Validity
Not Before: Jul 27 03:20:46 2026 GMT
Not After : Aug 3 03:20:46 2026 GMT
Subject: CN=6a66ce8f-0814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:66:fa:59:d9:0d:c9:a4:12:ee:55:59:40:
19:7a:80:8b:62:01:d3:7d:73:46:f4:6c:d2:60:4f:
72:2f:7b:19:fe:bb:0a:b0:40:ac:69:f8:cf:27:4f:
ab:fa:7a:fa:04:c7:d1:3f:8c:e8:75:75:9f:1d:34:
98:cb:4d:6a:e5:91:7b:52:d2:6e:de:e3:b3:37:06:
2e:7d:63:62:9f:bc:dc:cd:31:5b:ac:78:08:a3:2b:
71:9a:9a:e6:73:80:ab:fc:af:ea:57:5b:a6:e5:59:
3d:a8:e3:ed:6d:b8:6d:63:f4:ea:37:56:02:d7:62:
fd:f1:37:51:3e:e7:c3:17:d9:3c:85:94:b0:95:5d:
dc:74:2b:de:45:ec:71:9b:5e:68:b5:af:73:61:48:
9e:62:93:1c:bd:e0:36:30:38:69:7a:f0:07:91:64:
82:2f:08:da:a2:ec:60:b5:72:32:03:20:6c:1d:d7:
7e:f9:60:aa:28:d5:bb:c0:77:96:b5:e7:86:1c:e9:
94:5c:8f:52:70:ca:0c:1c:2a:fc:5f:a7:e7:f8:3c:
5d:b2:b0:c6:73:25:16:e4:da:67:48:97:8b:b5:b7:
c2:92:b5:c6:73:00:d5:5b:aa:31:78:dc:f8:f3:3b:
24:10:60:4f:b1:b5:d8:fc:64:23:3b:01:0a:de:e2:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7A:78:41:90:CC:6A:8F:92:D1:32:F3:AF:0A:13:EE:88:CC:89:BD
X509v3 Authority Key Identifier:
keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f1:7b:f8:f6:1a:1b:18:83:7c:0a:43:7a:a5:54:6f:69:55:
8b:1e:c4:68:61:96:8f:72:09:64:42:f2:93:0d:de:b3:36:30:
62:c1:08:b3:26:62:4d:c5:3b:fd:9a:cc:0b:fb:ba:bc:b6:ef:
86:c1:e5:a1:a6:ae:73:e1:64:50:1d:67:fc:cd:58:cf:13:11:
ac:c1:da:c7:5c:3b:60:8d:bd:23:42:48:e7:36:f9:ca:59:9e:
93:bf:83:79:8c:f1:b5:db:1d:97:f6:c4:23:46:d5:d2:e3:3b:
98:01:cc:9e:45:e1:2b:a9:05:04:f9:39:48:5b:e8:24:7d:0c:
32:28:1a:5d:b7:78:02:fb:b8:8b:31:ca:58:a8:8b:34:5b:57:
43:60:d1:ed:c8:72:bf:94:bd:25:af:94:b7:be:7e:bd:10:f4:
e0:a9:91:04:52:67:5b:b9:fc:25:4d:82:e8:bb:a3:df:d5:a8:
94:46:42:99:bc:f8:a4:8b:f5:5c:d6:5f:09:99:ea:60:81:8b:
21:aa:47:0e:c5:8a:bf:4f:05:a5:eb:29:e6:6d:60:09:80:de:
66:26:d8:3c:0f:ce:96:d5:35:e6:ce:6e:5d:f4:0c:5e:de:b7:
33:87:62:0f:24:32:0e:28:0e:ce:33:68:53:0a:00:6a:f2:2c:
e4:e1:77:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZEQUExMTAvBgNVBAUTKDgyMEY3MDMwQkVBQzZENDlGMTA5QkE4RUMyNUE2NUJG
MjM2OUFEMkYwHhcNMjYwNzI3MDMyMDQ2WhcNMjYwODAzMDMyMDQ2WjAYMRYwFAYD
VQQDEw02YTY2Y2U4Zi0wODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA04Rm+lnZDcmkEu5VWUAZeoCLYgHTfXNG9GzSYE9yL3sZ/rsKsECsafjPJ0+r
+nr6BMfRP4zodXWfHTSYy01q5ZF7UtJu3uOzNwYufWNin7zczTFbrHgIoytxmprm
c4Cr/K/qV1um5Vk9qOPtbbhtY/TqN1YC12L98TdRPufDF9k8hZSwlV3cdCveRexx
m15ota9zYUieYpMcveA2MDhpevAHkWSCLwjaouxgtXIyAyBsHdd++WCqKNW7wHeW
teeGHOmUXI9ScMoMHCr8X6fn+DxdsrDGcyUW5NpnSJeLtbfCkrXGcwDVW6oxeNz4
8zskEGBPsbXY/GQjOwEK3uKLpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKN6eEGQ
zGqPktEy868KE+6IzIm9MB8GA1UdIwQYMBaAFIIPcDC+rG1J8Qm6jsJaZb8jaa0v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkRBQS83MUVCN0M1QUMx
OTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JVbnhDYnFPd2xwbHZ5TnBy
UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dnOXdNTDZzYlVueENicU93bHBsdnlOcHJTOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkRBQS83MUVCN0M1QUMxOTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JV
bnhDYnFPd2xwbHZ5TnByUzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0PF7+PYaGxiDfApDeqVUb2lVix7EaGGWj3IJZELykw3eszYwYsEIsyZiTcU7
/ZrMC/u6vLbvhsHloaauc+FkUB1n/M1YzxMRrMHax1w7YI29I0JI5zb5ylmek7+D
eYzxtdsdl/bEI0bV0uM7mAHMnkXhK6kFBPk5SFvoJH0MMigaXbd4Avu4izHKWKiL
NFtXQ2DR7chyv5S9Ja+Ut75+vRD04KmRBFJnW7n8JU2C6Luj39WolEZCmbz4pIv1
XNZfCZnqYIGLIapHDsWKv08Fpesp5m1gCYDeZibYPA/OltU15s5uXfQMXt63M4di
DyQyDigOzjNoUwoAavIs5OF3jQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:30 2026 by rpki-client