
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
File: gg9wML6sbUnxCbqOwlplvyNprS8.mft (raw, json)
Hash identifier: LR6CcA9tZxTB+gLeBl+CQezC8qYd2GOC7yrQXKJiVyE=
Subject key identifier: 7A:89:03:E4:67:9E:7F:CE:20:89:87:EA:2D:B0:7C:18:75:2D:E2:16
Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F
Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F
Certificate serial: 0237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
Manifest number: 0231
Signing time: Sun 01 Mar 2026 22:57:31 +0000
Manifest this update: Sun 01 Mar 2026 22:57:31 +0000
Manifest next update: Sun 08 Mar 2026 22:57:31 +0000
Files and hashes: 1: gg9wML6sbUnxCbqOwlplvyNprS8.crl (hash: rsqyNkodxKPd4/g6zrv1uXnnO1lakzHH9TZwV/deO0s=)
2: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (hash: y+Wimi0nOKR+CCaPEyUVlyF7NSoOO3qXylD3M4nU6+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl
rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146DAA, serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F
Validity
Not Before: Mar 1 22:57:31 2026 GMT
Not After : Mar 8 22:57:31 2026 GMT
Subject: CN=69a4c45b-e524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:05:3b:51:17:26:9c:06:f1:65:43:33:5f:
a6:da:f7:f1:92:27:2b:8f:13:f8:33:9d:8e:58:5e:
22:86:34:02:f0:da:a4:0c:ff:f1:a1:23:95:b0:77:
b7:0c:f4:1a:d1:e2:97:f2:04:da:3a:05:25:80:b2:
20:70:88:d8:3c:f5:fb:32:fd:6e:55:75:24:80:0e:
ed:5a:2d:59:11:75:45:9f:eb:e7:e7:20:29:37:46:
e6:31:6e:10:8c:9d:c0:a9:41:86:83:24:a4:6e:28:
34:99:35:08:59:02:4a:35:7a:3d:d4:e8:c2:bf:da:
ea:2c:df:f6:70:77:b8:82:9d:8a:4b:f8:97:2b:c7:
fe:65:3a:ff:2b:fc:d6:7d:0c:f7:b7:b5:75:5a:a4:
26:49:dc:08:51:06:0b:ef:3e:03:ee:e6:63:13:d1:
51:b9:5f:4d:db:e0:34:af:f2:6e:0c:28:6c:d6:0b:
7c:82:3c:99:fd:e7:c6:bb:35:69:da:c4:16:01:79:
a1:da:87:cb:1c:8f:6f:2d:e9:9f:a7:d0:43:2f:be:
b9:bb:05:91:96:47:5a:18:d5:b2:94:f4:81:06:4a:
d5:af:5f:a2:4d:e0:7a:77:10:3e:58:a5:28:6e:b9:
6d:7b:ea:e3:0a:65:69:4b:c3:8f:fd:af:66:87:3f:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:89:03:E4:67:9E:7F:CE:20:89:87:EA:2D:B0:7C:18:75:2D:E2:16
X509v3 Authority Key Identifier:
keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:e4:b7:c5:e9:14:a1:c3:9f:9b:34:f7:f0:89:33:d3:c7:37:
4f:42:a6:b2:4c:fe:c3:23:2c:c5:9b:f4:8f:60:d0:0b:ad:ff:
c9:47:59:14:bb:c8:a0:f4:81:6c:95:ec:b9:fa:f8:5d:c8:a0:
a7:2c:3b:00:0e:75:71:2e:50:35:23:5a:25:dd:74:e0:6a:c7:
8f:f5:8e:b5:65:b2:ef:70:a4:d7:d6:60:09:d6:c3:65:d8:cb:
c9:7b:fc:e6:39:30:55:78:f5:4d:18:b5:ac:f0:17:62:f1:1f:
8f:71:72:e7:a7:4c:bb:98:84:b0:52:8a:10:9e:0b:f9:b4:7c:
37:cf:d3:8c:90:6f:96:35:0a:1c:f9:45:96:71:0e:c9:ec:89:
a5:9e:4c:00:2e:6e:52:9d:3a:fd:14:50:6b:0b:39:02:fe:cd:
7c:d6:65:a1:e1:0a:45:bd:82:90:9f:80:1e:2e:9a:93:ed:de:
a0:a2:fd:58:f2:d0:8c:46:2e:6e:73:78:64:69:f6:47:de:e0:
c9:ce:23:bd:65:9c:2f:63:ca:3e:55:21:9a:ad:39:50:31:58:
34:49:00:33:60:71:1f:37:24:32:df:2e:32:86:09:13:97:da:
12:cf:03:d4:9a:79:9e:4c:1e:b4:6f:f3:ca:96:28:93:9b:4f:
65:f9:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:06 2026 by rpki-client