
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
File: gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft (raw, json)
Hash identifier: plM8gXFYi21IkC4cTdwAMBRawsAwJ4Kplf6oIm63Df4=
Subject key identifier: 0A:D8:B4:CB:AB:63:4B:8C:5F:DF:4A:49:6A:E2:84:43:F7:D5:AB:EE
Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
Certificate issuer: /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
Manifest number: 012C
Signing time: Fri 09 Oct 2026 06:22:56 +0000
Manifest this update: Fri 09 Oct 2026 06:22:55 +0000
Manifest next update: Fri 16 Oct 2026 06:22:55 +0000
Files and hashes: 1: gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl (hash: YAs6XfVCDVJLsaXDA/CibDXdMlT50QlaR/lnv6Zw8eQ=)
2: 691B3B36FCC611EF8337B652C4F9AE02.roa (hash: 4RVRUZFMjrHSHp+QVOflneRKf1QSznuKsw3ALAxUkIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Validity
Not Before: Oct 9 06:22:55 2026 GMT
Not After : Oct 16 06:22:55 2026 GMT
Subject: CN=6ac8883f-2d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:0b:ab:61:d5:92:14:1d:c2:02:10:07:80:
dc:92:c0:4b:a9:b2:3e:8c:a6:c1:44:16:c2:1c:eb:
9b:31:f8:8e:d8:e5:de:fe:f8:19:eb:09:46:72:3e:
ee:8a:18:ba:f9:19:52:ae:4a:7f:77:fc:83:3c:02:
ae:10:8f:84:6e:dd:2e:5a:5c:fa:b5:07:6b:56:c3:
0b:6f:b0:c3:6d:b8:88:6c:d5:68:9a:72:d0:23:82:
b6:69:18:0d:f3:fb:27:e0:aa:0c:93:81:c3:28:d9:
ae:8d:e3:94:fe:f5:0e:d3:26:7b:94:b0:2c:5a:67:
9d:f7:ba:a1:b9:3e:65:ed:8d:18:89:84:b7:a5:3f:
37:4f:6f:e0:ca:09:f3:b2:71:64:f9:c3:ba:87:fc:
f5:73:9b:a0:b4:0d:83:c0:10:27:76:9f:34:1b:19:
94:af:28:91:d4:a6:66:d0:f5:e5:1e:81:cd:35:d3:
ac:f5:73:15:1c:9a:5d:5c:81:92:1b:31:19:68:0a:
a6:f5:b2:9a:a2:f4:04:fd:fc:d2:dd:31:ec:fe:7f:
32:18:81:30:4e:19:5c:eb:db:f4:e1:c5:d7:a1:bb:
30:61:ba:e8:c3:b1:6e:c6:6b:98:ee:6b:43:72:13:
9c:03:08:f9:b2:d9:3d:26:34:08:2f:98:51:26:58:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D8:B4:CB:AB:63:4B:8C:5F:DF:4A:49:6A:E2:84:43:F7:D5:AB:EE
X509v3 Authority Key Identifier:
keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:db:42:ee:01:62:7a:af:36:66:4c:9f:28:d2:e0:66:16:
ee:18:73:41:98:8a:5e:3c:1c:09:68:57:2e:f2:d9:e4:59:a0:
e5:22:0a:2a:66:53:50:cf:c8:5d:86:56:a5:54:52:78:42:2b:
21:f0:39:fe:ea:25:ff:f8:0c:97:7e:65:7d:b9:ee:31:e2:eb:
4d:f3:29:f3:3c:81:44:83:fc:7a:41:51:d1:7c:93:76:a2:b5:
1b:dd:ff:0b:2d:64:ee:43:46:e8:a9:5a:60:6f:e6:92:9d:b6:
43:79:79:59:bc:6e:86:09:fc:b9:3c:34:a6:8b:17:b2:03:fe:
dd:bb:52:11:97:73:a9:1d:8c:8f:3a:9a:8a:ea:4e:03:56:e0:
99:99:d3:90:a2:c9:77:ea:46:e8:23:68:51:e7:2f:ec:6b:ef:
f5:56:4a:e7:50:b7:7c:8b:16:4a:14:88:65:b6:af:fa:d9:63:
b1:ef:f7:31:1e:50:06:54:b8:a2:fb:6a:33:41:57:22:e4:a2:
1b:e6:21:bc:a2:d8:26:1f:7b:84:e4:1f:0e:04:59:f1:51:fc:
ef:3d:ff:64:4b:04:3d:a7:aa:4f:e1:51:11:b6:b3:b3:9f:32:
bc:00:37:0d:36:2d:c6:46:79:df:21:0f:91:2f:74:9e:aa:5a:
1d:3a:4a:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTRGRDgxMTAvBgNVBAUTKDgwNDYzMDc0RDgzRjVFODAzNTREMTk3MDU4NkY1NEE4
OTY1RTE4RDIwHhcNMjYxMDA5MDYyMjU1WhcNMjYxMDE2MDYyMjU1WjAYMRYwFAYD
VQQDEw02YWM4ODgzZi0yZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ZULq2HVkhQdwgIQB4DcksBLqbI+jKbBRBbCHOubMfiO2OXe/vgZ6wlGcj7u
ihi6+RlSrkp/d/yDPAKuEI+Ebt0uWlz6tQdrVsMLb7DDbbiIbNVomnLQI4K2aRgN
8/sn4KoMk4HDKNmujeOU/vUO0yZ7lLAsWmed97qhuT5l7Y0YiYS3pT83T2/gygnz
snFk+cO6h/z1c5ugtA2DwBAndp80GxmUryiR1KZm0PXlHoHNNdOs9XMVHJpdXIGS
GzEZaAqm9bKaovQE/fzS3THs/n8yGIEwThlc69v04cXXobswYbrow7FuxmuY7mtD
chOcAwj5stk9JjQIL5hRJljDgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArYtMur
Y0uMX99KSWrihEP31avuMB8GA1UdIwQYMBaAFIBGMHTYP16ANU0ZcFhvVKiWXhjS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZEOC9GMzUxMkEwQUZD
QzUxMUVGQTkwOTA4NTJDNEY5QUUwMi9nRVl3ZE5nX1hvQTFUUmx3V0c5VXFKWmVH
TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dFWXdkTmdfWG9BMVRSbHdXRzlVcUpaZUdOSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEZEOC9GMzUxMkEwQUZDQzUxMUVGQTkwOTA4NTJDNEY5QUUwMi9nRVl3ZE5nX1hv
QTFUUmx3V0c5VXFKWmVHTkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU4LbQu4BYnqvNmZMnyjS4GYW7hhzQZiKXjwcCWhXLvLZ5Fmg5SIKKmZTUM/I
XYZWpVRSeEIrIfA5/uol//gMl35lfbnuMeLrTfMp8zyBRIP8ekFR0XyTdqK1G93/
Cy1k7kNG6KlaYG/mkp22Q3l5Wbxuhgn8uTw0posXsgP+3btSEZdzqR2MjzqaiupO
A1bgmZnTkKLJd+pG6CNoUecv7Gvv9VZK51C3fIsWShSIZbav+tljse/3MR5QBlS4
ovtqM0FXIuSiG+YhvKLYJh97hOQfDgRZ8VH87z3/ZEsEPaeqT+FREbazs58yvAA3
DTYtxkZ53yEPkS90nqpaHTpKOg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:12:51 2026 by rpki-client