
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
File: GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json)
Hash identifier: bLfGnqcCZ4N/NMM4qlK9ox2Amt8lh7gpZnUhE9jBD3M=
Subject key identifier: C4:5B:A9:2F:F8:27:4F:B4:32:72:EA:DF:CA:2B:5D:92:E9:6F:08:10
Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5
Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5
Certificate serial: 094D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
Manifest number: 0944
Signing time: Wed 04 Nov 2026 20:22:51 +0000
Manifest this update: Wed 04 Nov 2026 20:22:51 +0000
Manifest next update: Wed 11 Nov 2026 20:22:51 +0000
Files and hashes: 1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: aElYJYPLqBw7qKzBsnVuKteAKiPbqZ47zbPAl4sN6s4=)
2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: k0slGk6THhklii8X86eyYXN7YTIBN/mn56HfkDFdmb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl
rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 20:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381 (0x94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158635, serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5
Validity
Not Before: Nov 4 20:22:51 2026 GMT
Not After : Nov 11 20:22:51 2026 GMT
Subject: CN=6aeb941b-ccf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:25:0f:6e:e2:35:15:fb:2a:a1:e0:5b:e2:
1d:93:e1:66:be:ba:44:5d:0e:94:2c:ba:4b:fa:f4:
e0:79:f9:5c:d0:a6:13:55:7c:fe:29:27:9d:61:56:
dc:7d:a5:26:da:01:16:dd:54:cf:96:0f:c6:ac:36:
43:80:7d:0e:8c:5d:62:69:67:a2:97:25:a7:41:c3:
17:e4:7a:10:55:3b:94:15:92:29:37:08:e9:0f:7d:
67:b6:4a:51:00:81:93:05:80:9d:62:b0:b0:7f:30:
7e:0b:99:cc:12:55:69:33:58:5c:ad:07:4f:1d:db:
26:fd:0f:d1:92:63:e1:46:f4:0d:7f:89:a2:7f:d3:
df:fa:f4:55:f2:e8:ff:30:40:a6:54:f2:8a:3e:68:
31:51:13:83:1d:35:56:d8:87:ce:c7:2a:93:55:bb:
b9:b6:d7:3d:ed:d9:b9:df:47:09:e1:e9:3b:8e:3c:
14:1f:35:e7:35:6c:e5:0c:f9:62:50:71:60:ba:27:
f4:30:1a:33:76:be:45:70:59:64:20:79:a0:96:f6:
d0:87:ab:46:31:78:da:6e:a2:6e:ec:b5:ca:a7:41:
84:fa:a4:37:2a:18:8a:0e:f7:96:41:3b:48:74:aa:
c0:1a:52:fc:61:f2:a2:3a:1e:c3:7d:f7:eb:3f:4e:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5B:A9:2F:F8:27:4F:B4:32:72:EA:DF:CA:2B:5D:92:E9:6F:08:10
X509v3 Authority Key Identifier:
keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:a6:39:45:18:c7:20:9b:28:8e:e3:84:76:4d:97:d5:d2:48:
c3:ed:d5:0a:2a:67:08:e3:d2:d3:f7:5a:b2:f0:dd:a5:dd:66:
42:45:ad:6c:99:d1:85:77:e1:fe:5e:cb:fb:df:90:0a:1a:7c:
3b:94:41:a5:e4:32:3f:f4:6a:ad:29:f1:7d:61:9a:7e:cb:91:
65:fa:3c:76:fa:25:6d:c6:57:25:a0:db:42:60:98:8c:73:f4:
c4:6b:1d:76:e7:fb:96:cf:07:1a:17:3a:01:5f:dd:9f:e9:04:
79:92:21:6a:44:4e:d8:cb:24:35:7a:25:a3:3d:f9:d2:5f:95:
8b:9f:4d:ad:5d:9c:ab:42:66:ae:eb:41:2b:48:82:fc:8a:3a:
74:02:d7:0b:06:0b:e0:d0:9d:9f:59:8c:6f:c0:60:63:ea:5b:
47:27:4a:59:11:20:b9:d0:00:d7:e6:07:5d:32:2c:23:8b:da:
b3:62:00:d9:05:a5:57:70:d6:b4:fc:4c:cf:2b:ac:60:0a:30:
74:6b:6d:b5:b9:84:8a:74:62:0f:3a:0f:ed:28:c5:63:6c:2e:
64:0f:52:21:5d:ab:1c:b0:55:3a:60:a9:04:85:49:33:d9:9c:
7e:ff:5b:62:c7:62:e6:7c:4d:b4:0e:94:c5:1c:a9:86:cd:e6:
ee:94:a4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:46:32 2026 by rpki-client