
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
File: Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json)
Hash identifier: kyJNA72NImt/E7GVPIVlN/4n3GJlYYHlEeVR7oy57/s=
Subject key identifier: 6F:77:3C:11:5E:A4:35:5D:2D:6A:CE:76:7C:16:27:48:00:DC:94:FE
Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
Manifest number: 014B
Signing time: Wed 23 Sep 2026 05:16:41 +0000
Manifest this update: Wed 23 Sep 2026 05:16:40 +0000
Manifest next update: Wed 30 Sep 2026 05:16:40 +0000
Files and hashes: 1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: JBI75eO2F0QNJDNrfXDK2GQzH+kCxuwGkVqZw6oy9S8=)
2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: wJAftg5ZzVLal7S6mz0iDBoMoLtgeIdIo6mgoo0U/U0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Validity
Not Before: Sep 23 05:16:40 2026 GMT
Not After : Sep 30 05:16:40 2026 GMT
Subject: CN=6ab360b9-0156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:37:e4:1f:1f:f8:0c:8f:80:a4:fc:f8:10:2e:
5c:a2:aa:6a:1b:d2:3d:be:e1:dc:bb:2c:8a:8a:5d:
85:79:d3:f4:75:77:35:7c:2f:e8:8f:28:87:83:7a:
af:68:19:3a:c1:43:21:35:11:85:54:66:d6:a7:f0:
ca:a9:a8:13:9a:7c:3b:6d:45:43:72:0c:54:4f:a7:
7f:32:17:5d:69:9d:04:66:94:c1:33:0a:20:62:f8:
6b:f1:9a:73:3a:28:3e:17:d8:3d:11:cc:a7:e7:3c:
58:7e:b4:14:0f:71:de:e9:8b:6e:16:52:25:c0:a1:
67:fe:7d:30:ee:7f:c3:0e:8e:5c:40:57:c3:f1:53:
f3:b0:76:3d:76:59:72:6d:25:77:11:00:ac:44:70:
ae:b4:e0:e4:33:03:69:48:92:9b:e2:62:51:d8:90:
fe:5c:45:3a:bf:84:6f:0b:44:50:fe:9d:3b:ef:6e:
8a:28:4a:4c:f1:9d:a0:8e:68:95:d3:8b:dd:5e:64:
4f:cb:fd:c3:42:72:b1:2e:59:0e:a9:7f:19:7c:84:
d1:c1:aa:23:92:40:5f:db:09:1b:a3:96:3b:13:70:
e4:64:d1:d1:7f:00:a7:fe:26:22:10:11:87:db:df:
ed:f9:dc:40:e2:74:26:c9:77:da:5a:55:8f:fc:98:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:77:3C:11:5E:A4:35:5D:2D:6A:CE:76:7C:16:27:48:00:DC:94:FE
X509v3 Authority Key Identifier:
keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:02:12:79:0d:0b:a0:a2:43:3f:58:4a:45:91:68:29:52:c1:
a2:82:47:bd:34:e5:73:04:52:cd:be:b8:16:ab:a2:f4:ab:45:
69:f0:a9:11:87:21:d9:6a:e6:95:5d:82:54:f7:31:b0:a9:3a:
73:b4:1a:5f:12:3b:cb:00:9a:ff:5a:9b:ad:0f:d3:cf:c4:fe:
fc:f6:a5:c4:9c:dc:12:5c:a2:d9:c9:f4:20:a2:7e:12:cb:c5:
86:cd:11:72:2f:23:98:bc:75:77:de:56:b0:e6:06:f5:54:46:
f1:22:65:91:c8:df:4b:49:0e:18:f9:29:3f:a6:54:f8:df:30:
35:8a:5a:0a:0f:b6:9e:32:2b:85:c3:23:14:45:57:52:9a:f6:
3e:1f:cd:2c:6a:77:b3:7c:71:ff:55:02:9b:dc:5d:7a:1d:2c:
46:48:60:eb:56:2f:83:54:fe:18:0f:3f:87:e5:eb:12:62:05:
c1:45:5a:24:dd:c2:bb:1e:58:f6:d6:f3:4d:ff:7d:e9:16:1e:
6b:e0:56:44:4e:eb:56:0b:27:85:f4:5f:f1:16:0f:7a:5f:93:
02:56:f6:fc:1c:66:73:b5:4e:16:9d:fe:09:84:a0:d3:02:f6:
e1:ca:9a:05:d1:15:b7:d7:69:61:d8:b9:00:af:97:49:f0:98:
48:13:fd:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRBQjgxMTAvBgNVBAUTKDFBNkVCNzVCMkI0NzEzNjBFRDVBOTI1QzM1MUNDNDBD
MTk0MTY4MjcwHhcNMjYwOTIzMDUxNjQwWhcNMjYwOTMwMDUxNjQwWjAYMRYwFAYD
VQQDEw02YWIzNjBiOS0wMTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4DfkHx/4DI+ApPz4EC5coqpqG9I9vuHcuyyKil2FedP0dXc1fC/ojyiHg3qv
aBk6wUMhNRGFVGbWp/DKqagTmnw7bUVDcgxUT6d/MhddaZ0EZpTBMwogYvhr8Zpz
Oig+F9g9Ecyn5zxYfrQUD3He6YtuFlIlwKFn/n0w7n/DDo5cQFfD8VPzsHY9dlly
bSV3EQCsRHCutODkMwNpSJKb4mJR2JD+XEU6v4RvC0RQ/p07726KKEpM8Z2gjmiV
04vdXmRPy/3DQnKxLlkOqX8ZfITRwaojkkBf2wkbo5Y7E3DkZNHRfwCn/iYiEBGH
29/t+dxA4nQmyXfaWlWP/Jh8gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG93PBFe
pDVdLWrOdnwWJ0gA3JT+MB8GA1UdIwQYMBaAFBput1srRxNg7VqSXDUcxAwZQWgn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zMzA5NkVDOEQx
QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9HbTYzV3l0SEUyRHRXcEpjTlJ6RURCbEJh
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dtNjNXeXRIRTJEdFdwSmNOUnpFREJsQmFDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NEFCOC8zMzA5NkVDOEQxQjAxMUVGOEMyMEREMzJDNEY5QUUwMi9HbTYzV3l0SEUy
RHRXcEpjTlJ6RURCbEJhQ2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtwISeQ0LoKJDP1hKRZFoKVLBooJHvTTlcwRSzb64Fqui9KtFafCpEYch2Wrm
lV2CVPcxsKk6c7QaXxI7ywCa/1qbrQ/Tz8T+/PalxJzcElyi2cn0IKJ+EsvFhs0R
ci8jmLx1d95WsOYG9VRG8SJlkcjfS0kOGPkpP6ZU+N8wNYpaCg+2njIrhcMjFEVX
Upr2Ph/NLGp3s3xx/1UCm9xdeh0sRkhg61Yvg1T+GA8/h+XrEmIFwUVaJN3Cux5Y
9tbzTf996RYea+BWRE7rVgsnhfRf8RYPel+TAlb2/Bxmc7VOFp3+CYSg0wL24cqa
BdEVt9dpYdi5AK+XSfCYSBP9Dg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:07:30 2026 by rpki-client