
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/GUw4di_Z15T624MI9SucTxmD6hw.mft
File: GUw4di_Z15T624MI9SucTxmD6hw.mft (raw, json)
Hash identifier: D/qz4muKnBLKSrRhLleKSdx7+guC3fCQKXvjQnOtQ9E=
Subject key identifier: 65:22:FC:A5:7F:BF:D0:70:EE:F5:B8:92:AC:0C:64:E2:C9:FB:38:78
Authority key identifier: 19:4C:38:76:2F:D9:D7:94:FA:DB:83:08:F5:2B:9C:4F:19:83:EA:1C
Certificate issuer: /CN=A9181292/serialNumber=194C38762FD9D794FADB8308F52B9C4F1983EA1C
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GUw4di_Z15T624MI9SucTxmD6hw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/GUw4di_Z15T624MI9SucTxmD6hw.mft
Manifest number: 25
Signing time: Thu 01 Oct 2026 10:16:33 +0000
Manifest this update: Thu 01 Oct 2026 10:16:33 +0000
Manifest next update: Thu 08 Oct 2026 10:16:33 +0000
Files and hashes: 1: GUw4di_Z15T624MI9SucTxmD6hw.crl (hash: 4kpgnNJoFwICS30CDd2a4LVEL8ZmJ2nuiVq4V7GpVlo=)
2: C6AA8F5A8B4911F197B84AD94811F970.roa (hash: 6f9AemjvikwIDiSVjQqJdYW43pPx37pnnb/gCf4hzkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/GUw4di_Z15T624MI9SucTxmD6hw.crl
rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/GUw4di_Z15T624MI9SucTxmD6hw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GUw4di_Z15T624MI9SucTxmD6hw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 10:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181292, serialNumber=194C38762FD9D794FADB8308F52B9C4F1983EA1C
Validity
Not Before: Oct 1 10:16:33 2026 GMT
Not After : Oct 8 10:16:33 2026 GMT
Subject: CN=6abe3301-bf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:79:ee:e5:b3:16:18:f2:d1:98:dd:61:cd:
84:9f:60:a1:1d:59:85:ba:ff:02:fb:61:cd:1f:6d:
bb:63:b6:ea:22:c8:37:61:64:22:7b:d6:68:62:c2:
2c:07:bb:0e:50:a3:e4:1f:c1:37:9f:4c:c3:e0:9d:
0c:4f:5d:4f:b0:72:69:01:62:66:69:60:12:13:ca:
e2:b4:04:54:56:1c:5e:a2:1b:70:a8:1d:93:48:19:
84:19:93:50:03:56:04:b4:84:f3:30:bf:46:1e:da:
a8:fd:43:05:f5:88:68:58:8e:76:b4:44:89:0e:48:
e1:ec:54:2e:99:51:61:88:a9:d5:5a:9d:91:7f:16:
78:cf:c9:c9:4f:f9:82:0d:b6:58:4b:ba:2e:2b:b3:
ce:c0:3b:a8:46:b8:12:38:4e:89:b6:66:2d:2e:c3:
ac:63:cb:ad:73:49:8d:88:f6:ef:0a:69:ba:af:26:
25:3a:15:94:99:b9:e9:6c:26:77:b9:f2:1c:6d:5d:
36:d5:22:27:5d:b5:95:7d:a8:e9:0f:5e:bd:c7:97:
0c:d0:f7:a3:c5:e5:75:9f:0b:37:be:ba:e3:46:59:
44:b9:69:00:34:1b:26:4b:30:e6:b1:aa:35:06:ab:
5b:7a:80:1b:5d:01:d2:57:1b:64:da:1c:74:5c:98:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:22:FC:A5:7F:BF:D0:70:EE:F5:B8:92:AC:0C:64:E2:C9:FB:38:78
X509v3 Authority Key Identifier:
keyid:19:4C:38:76:2F:D9:D7:94:FA:DB:83:08:F5:2B:9C:4F:19:83:EA:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/GUw4di_Z15T624MI9SucTxmD6hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GUw4di_Z15T624MI9SucTxmD6hw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/GUw4di_Z15T624MI9SucTxmD6hw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:87:9c:0b:27:13:16:80:cf:4a:df:6a:f4:43:57:01:10:c8:
ed:2f:c9:80:66:8f:d9:86:da:87:e1:48:0d:ec:f5:20:89:6b:
cd:e1:3d:36:62:e8:dd:33:ba:45:75:3e:ea:dd:ec:bf:d4:17:
d7:19:16:fb:8f:6c:d6:1f:7a:28:47:19:a1:66:e5:50:d4:c4:
3d:0b:c1:98:74:29:67:46:7b:71:00:02:c9:db:ea:b7:ed:67:
39:34:8a:fb:4a:65:08:88:1e:68:53:00:1b:2e:89:5c:ba:c5:
2f:44:7b:97:fb:d1:53:58:a6:4e:c8:35:0c:32:98:61:7e:3f:
ee:7b:f7:13:ed:d7:67:d4:18:17:21:3a:36:5c:0a:c1:0b:a7:
04:2c:16:23:77:eb:ed:5a:ac:82:40:49:9e:17:71:94:45:c2:
cc:3c:d5:8b:e4:4c:4d:d7:14:8f:1a:ec:61:ce:c6:a9:27:29:
09:be:1f:c1:e5:aa:bd:57:08:04:bc:f0:bc:a7:98:57:88:9f:
47:0d:00:90:b9:5a:62:b5:85:44:78:85:fa:15:9a:72:e4:2e:
eb:60:86:7f:8e:00:18:40:ba:8a:8a:77:e4:22:50:2b:df:69:
6d:4d:27:ac:21:0e:7e:1e:4f:09:bd:a2:1e:e5:b9:f0:63:77:
fc:8e:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:29:40 2026 by rpki-client