
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
File: GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json)
Hash identifier: 0Dp5NqYq/Izh88MJ3DPbmR7mEYD9jdoHgFyKOR7kmm8=
Subject key identifier: D8:D4:3D:64:A5:D5:4D:86:7F:35:2C:D0:60:B4:00:FC:27:1B:A5:2E
Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE
Certificate issuer: /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
Manifest number: 0108
Signing time: Mon 15 Jun 2026 06:11:01 +0000
Manifest this update: Mon 15 Jun 2026 06:11:00 +0000
Manifest next update: Mon 22 Jun 2026 06:11:00 +0000
Files and hashes: 1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: 4y1/ZoV/NCaSkDalqy3qhWrpmaPAMVQSrkN3kW9hN6o=)
2: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: vmkU+Wc2xpDQMgPam/mAe6kA8brCuJz9cHHqu3MmaNY=)
3: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: n/hyIjFqCJzOht5Ju7CI7zedjM3U4KBE15I93wtTvdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl
rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128576, serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
Validity
Not Before: Jun 15 06:11:00 2026 GMT
Not After : Jun 22 06:11:00 2026 GMT
Subject: CN=6a2f9775-dae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:3b:cc:9e:9b:48:9e:4c:d2:89:3d:56:17:
9a:45:e5:c5:75:95:75:25:5e:14:b7:55:b0:f5:12:
12:82:60:2d:8e:80:78:04:96:f2:5f:cb:a0:0f:b6:
4d:88:9d:be:a0:ef:e3:ef:60:32:7f:ee:74:61:38:
71:f4:1b:b2:03:86:95:d8:46:d6:2c:36:bd:6e:90:
3b:ab:37:60:8f:37:5c:24:c4:a7:ae:5b:7b:07:4d:
b3:2a:28:76:0f:e4:03:e7:35:22:f5:06:f0:2c:7f:
8b:ea:fd:fa:d1:cd:8a:6a:e4:51:e1:37:30:07:e6:
ea:0c:66:02:92:2b:70:f6:f6:c8:af:cd:43:12:28:
fd:91:31:1c:1e:1d:41:70:0f:6f:78:99:8e:04:0e:
a6:11:e4:ca:47:51:aa:3b:02:de:3c:db:32:cf:7f:
c4:1d:ff:bd:61:ea:cb:e7:a2:8c:9c:4f:fe:e7:89:
20:7e:96:f7:33:84:a0:66:aa:5e:ed:00:c7:c3:86:
37:9e:0a:cb:98:5d:55:1c:b0:9a:20:ef:e8:25:18:
c4:a4:6a:cd:22:71:8e:59:87:59:29:33:c8:cc:89:
76:d8:7c:5b:54:46:24:56:c8:11:2f:9a:3c:a0:34:
35:b4:56:e3:4b:fe:33:04:01:2e:e4:85:d8:fb:da:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:3D:64:A5:D5:4D:86:7F:35:2C:D0:60:B4:00:FC:27:1B:A5:2E
X509v3 Authority Key Identifier:
keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:b0:09:4d:98:11:9f:20:09:3d:2f:67:4e:12:b3:ca:5d:26:
e1:3c:81:67:3e:60:d2:ce:47:16:d0:c8:14:e3:31:b0:f2:1c:
1f:05:21:0e:8b:10:01:06:82:cd:8a:ae:72:38:34:84:9b:83:
6e:aa:5e:b6:79:55:2c:69:7d:f0:ba:a4:f5:b5:15:7b:d4:4f:
4f:1e:5f:00:58:ac:c6:0f:f0:8e:04:0c:fe:25:7a:bd:6b:02:
6a:1f:61:0d:de:fb:48:66:66:d5:0b:d9:98:59:2c:b6:c5:4d:
da:d9:01:36:6b:22:ad:40:e5:a1:2a:db:ec:0c:02:01:4e:fc:
bc:58:ee:c4:b1:32:94:8d:f9:bc:8b:28:ae:5f:39:02:bf:2d:
db:be:41:7a:11:a2:16:32:b0:eb:b7:5f:13:e9:fc:61:d3:a3:
73:ca:a3:63:c0:d0:0b:d1:cb:6c:10:fc:79:dd:b9:1b:0c:dc:
44:25:ca:ab:e0:6b:32:bc:fb:6f:6b:d4:1c:0d:90:f9:12:c8:
d7:6d:ab:2c:87:49:da:08:a7:18:76:58:9b:c3:86:3d:0d:06:
fc:59:59:cb:e9:b6:a4:a2:e6:25:ba:79:98:ba:70:67:c9:ed:
6e:4d:53:0c:f9:e1:b4:5e:98:57:f0:df:ff:a8:64:3e:5d:29:
9e:41:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 13:38:19 2026 by rpki-client