
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
File: GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json)
Hash identifier: kx2kk4q8EPgRuK5riFKEsVXHHcx4Pm4bqMKmO0mHQZs=
Subject key identifier: BC:C6:8A:6C:DA:68:8C:1E:D4:CB:64:05:25:85:C3:BE:E7:D1:E4:60
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
Manifest number: B3
Signing time: Tue 21 Jul 2026 08:53:12 +0000
Manifest this update: Tue 21 Jul 2026 08:53:11 +0000
Manifest next update: Tue 28 Jul 2026 08:53:11 +0000
Files and hashes: 1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: jWbX0nJV1ZnAB6/cAIOPjrNsgLd65CXnIc1w10Vd+Ak=)
2: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: FRx1ILrXRk/D6NM37DgKlOP8QzRDUYGOaHdxxmU119o=)
3: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: RJ2sx6p2KIpfuzWkhVi9i2Tb6z+LWx+fgMZmXi47440=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Validity
Not Before: Jul 21 08:53:11 2026 GMT
Not After : Jul 28 08:53:11 2026 GMT
Subject: CN=6a5f3378-be2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:31:33:a7:46:89:2d:a8:55:e6:a0:e8:c1:
50:fd:8e:56:50:76:15:b0:dd:11:f5:23:c4:ae:b8:
2a:1f:69:a7:6f:cc:de:65:72:19:86:89:5c:ea:9e:
f1:10:db:56:c7:f9:f6:d8:ed:12:9f:9f:a7:65:c3:
48:c7:44:af:ea:b2:ce:9f:4b:a4:17:88:b0:21:b4:
8a:e7:ba:17:a7:4f:a2:3b:7e:26:77:87:99:2d:00:
eb:a5:05:f0:66:8a:24:10:ee:63:d5:6c:11:ac:00:
60:18:e2:c9:97:ac:8b:48:41:8c:fc:e5:93:fe:ac:
90:dc:35:52:3a:b4:d6:11:3a:e4:38:a0:8c:8a:7d:
8c:fd:8c:b6:20:d3:38:2f:be:be:86:5e:af:82:7d:
b2:95:d2:3e:90:80:db:db:91:b6:bf:da:09:86:15:
cc:b9:4d:4b:00:d3:a0:bd:8d:ce:6f:c2:e8:be:f7:
e8:67:e6:cb:d7:97:8f:e6:c4:4d:da:b7:0e:6c:8d:
b6:40:1e:bb:7d:96:cd:fc:30:18:2c:64:c2:db:74:
e5:38:b7:a7:64:61:50:d4:ff:27:e8:e4:49:14:44:
78:a8:43:12:b7:fd:0d:2c:38:bc:39:f5:5c:1f:85:
73:96:36:c7:79:1f:8c:86:ef:3c:1a:9f:6d:e0:6b:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C6:8A:6C:DA:68:8C:1E:D4:CB:64:05:25:85:C3:BE:E7:D1:E4:60
X509v3 Authority Key Identifier:
keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:8a:8b:0f:1d:91:b1:ef:77:2d:26:75:d0:bc:96:f1:47:ce:
56:34:d4:86:7e:aa:0e:b3:d4:a1:69:f8:ac:38:4f:eb:ad:8b:
44:90:b5:57:49:0a:ec:02:92:d1:de:9a:11:f9:00:26:2e:20:
6b:30:31:8d:36:41:e0:b8:8d:0c:19:8c:4e:6d:3e:16:3e:12:
3d:22:5e:bd:c8:b6:a6:98:fc:2f:53:9d:26:34:a4:56:fe:63:
40:2f:24:f4:d4:0d:ce:49:08:88:de:67:dc:b4:90:63:c2:e0:
0a:bb:e8:c2:7b:f9:e0:f2:61:f5:a7:62:88:09:35:6a:1b:b4:
8e:ba:4c:c7:ef:aa:4b:f3:66:f0:0b:6b:df:c9:3c:c0:01:c7:
ce:7f:a5:e7:5b:e1:a3:14:70:bb:08:df:3f:05:fe:a5:07:0f:
72:ca:f2:f0:bd:64:b3:7c:9a:ac:28:e6:9e:98:8e:d0:b1:48:
19:88:70:0c:61:ce:14:ce:31:59:78:61:d2:a2:9f:ac:9b:fd:
75:04:d4:3d:99:bb:60:6e:a0:ca:f0:ef:77:86:c6:a8:63:db:
ae:8f:28:de:5c:bf:f3:ef:34:2e:6b:e0:ec:0f:b5:74:7c:ad:
1e:a6:b0:71:04:25:da:f7:44:18:78:c6:24:86:5e:50:8b:8c:
11:09:00:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:05:39 2026 by rpki-client