
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
File: gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft (raw, json)
Hash identifier: DYEkwRS/JQmxwMS6O1r2ZfnZknc0JDAG0rU2IR9CLs4=
Subject key identifier: F1:09:6D:6A:69:B2:D9:B2:EE:56:7A:4A:4D:4E:A5:F7:BE:29:BA:C5
Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
Certificate issuer: /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
Manifest number: E2
Signing time: Thu 21 May 2026 06:38:24 +0000
Manifest this update: Thu 21 May 2026 06:38:23 +0000
Manifest next update: Thu 28 May 2026 06:38:23 +0000
Files and hashes: 1: gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl (hash: Z64bxYG3B/k27u3DXyfQ6Nin8xcFVvsykBOBrycc2c8=)
2: 691B3B36FCC611EF8337B652C4F9AE02.roa (hash: +9yjB6RtDViIzqiypLm/pOP2CEfuylarRjWsBGXeOv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Validity
Not Before: May 21 06:38:23 2026 GMT
Not After : May 28 06:38:23 2026 GMT
Subject: CN=6a0ea860-cdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3e:84:ae:c1:c2:f9:ee:91:a8:8e:0f:af:e3:
9c:b6:51:02:ff:4a:8f:d0:f9:84:9d:9c:a6:8f:3f:
c1:bf:54:b5:d2:cf:d1:94:66:3a:50:54:8d:1d:2e:
72:b5:2e:f9:a9:cd:40:76:72:80:5f:b2:bc:45:a3:
a5:33:46:ba:b0:50:14:33:6f:4d:aa:33:4f:b9:13:
dd:8c:c0:13:57:9c:cd:12:01:cd:f9:51:93:10:67:
24:94:b9:f2:00:ec:4e:a6:00:44:35:56:14:60:28:
09:93:6d:b8:59:0c:6e:f9:fd:fe:c4:e2:99:63:cb:
f5:21:e6:fc:4e:f0:18:03:80:0b:b9:99:ca:20:b4:
a4:33:95:9f:1b:0e:7a:96:42:01:c3:7b:bd:80:cf:
26:c2:86:77:e9:78:82:25:36:91:7b:57:0c:3c:ee:
25:d4:df:12:de:cc:83:ec:a3:c2:dc:4e:16:48:fc:
f3:fb:a5:91:93:30:e8:1a:2b:f0:1e:e0:e1:3e:94:
a0:b4:f9:66:35:36:38:cd:0f:af:94:ce:fb:44:08:
3a:e4:76:9e:e9:c6:d5:66:bc:98:93:0e:a1:eb:c2:
ac:48:45:71:86:2c:2a:25:32:6d:c8:86:91:dc:5a:
95:28:ac:2e:8c:cf:63:23:9a:9a:b5:f4:b0:25:9d:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:09:6D:6A:69:B2:D9:B2:EE:56:7A:4A:4D:4E:A5:F7:BE:29:BA:C5
X509v3 Authority Key Identifier:
keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6c:92:72:3d:2e:43:18:6b:a6:14:85:75:f2:b9:a5:70:53:
fa:6a:34:dc:7c:a7:4e:8e:77:b7:d4:d4:23:e3:45:28:5d:f5:
44:76:8a:97:c2:52:5c:44:47:11:64:bf:cc:85:97:5e:92:cb:
7e:81:5a:4e:da:a0:8b:fc:54:86:cb:28:18:53:08:9a:a5:7d:
58:3e:43:ea:bb:48:b1:e0:d1:9e:92:b7:1f:40:46:24:ba:45:
aa:77:7f:7c:5d:d9:6a:80:72:f5:3b:84:17:00:fb:f5:97:ac:
50:81:34:47:62:82:65:86:eb:32:c6:82:6e:84:b6:3c:df:fc:
97:8b:b2:0c:61:48:09:b9:ec:35:4c:54:b0:9b:02:36:53:7f:
ea:d7:fe:39:6a:b0:da:04:c3:8f:1e:1b:99:25:68:b8:a6:0a:
e8:d7:bc:57:c8:5a:31:2f:81:91:d6:ee:65:df:22:53:48:8d:
9c:56:e8:94:6c:a8:e5:c8:fd:4e:fa:19:89:c7:2d:90:4a:35:
11:aa:ed:c4:e6:20:c8:3a:cd:c9:2e:7c:9f:b1:94:11:cb:ad:
7c:d4:cf:1e:98:f3:46:60:46:41:4e:b5:92:e8:fb:d6:2c:41:
b1:a6:ff:09:a9:0e:4e:a3:82:4b:4b:4c:d7:00:12:2a:3f:47:
ea:85:6a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:39 2026 by rpki-client