
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json)
Hash identifier: 212npLwj4luZ/M6qQlTEvp9SBpaKxgzd7qJi8Jd4fGw=
Subject key identifier: C8:37:76:E1:9B:F4:9D:AC:4F:DD:A2:5A:96:B1:3E:CC:DD:B5:44:4B
Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Certificate serial: 0C8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
Manifest number: 0C75
Signing time: Sat 04 Apr 2026 18:27:42 +0000
Manifest this update: Sat 04 Apr 2026 18:27:42 +0000
Manifest next update: Sat 11 Apr 2026 18:27:42 +0000
Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: hcmMVCSFfqnvP+9k9DRJTDBuSCJpDsfSC7kX1ePrZIw=)
2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: zOF4QktWpAoJjg+z+k1IG8J7iOxGbLDrjxqR7aiYkLA=)
3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: HsO9P79p+Dz9d/F54R7UspGL8AUMT0cv4Reo5e0BZX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3212 (0xc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Validity
Not Before: Apr 4 18:27:42 2026 GMT
Not After : Apr 11 18:27:42 2026 GMT
Subject: CN=69d1581e-73e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:51:03:cd:4c:c9:15:3c:f3:d2:33:54:bd:
a9:f5:0c:45:a0:2d:08:d3:5c:e1:29:0c:12:f0:55:
68:74:1b:ef:9d:aa:4f:cd:89:4b:4c:c3:69:7f:26:
1f:c2:f4:d4:5b:b7:ba:90:bc:ff:b2:fe:54:8d:c9:
83:a8:f1:0e:05:b6:29:a3:26:73:48:bc:76:55:c3:
4e:b1:b2:5d:f7:d9:24:5f:88:47:d8:fc:bc:fe:9b:
61:f4:93:8d:64:6e:d8:7e:74:dc:c7:25:74:ac:61:
95:bb:56:26:f2:42:07:81:1b:b3:71:36:7a:81:18:
64:99:03:16:40:c5:89:f7:d6:f2:91:9c:a5:57:6c:
de:4e:6f:75:d5:a5:ed:7b:a5:e0:bf:05:3e:1d:e3:
8b:64:b5:98:bc:1d:c0:81:67:4a:a9:b8:fb:9d:00:
6a:00:26:5c:c2:44:de:cd:6c:fa:b2:2f:24:75:ba:
04:8e:1e:bd:d1:c3:7f:3f:b2:af:f8:22:0c:e7:8f:
82:c1:80:bd:fc:c5:03:63:ce:0c:63:80:ae:68:56:
18:9a:48:29:d9:d0:2a:0e:14:4d:6a:56:36:5d:ec:
44:c9:b5:f1:fd:b7:a8:2d:9f:e7:ee:35:bc:12:3f:
d0:f6:7c:b2:a9:cf:56:01:41:c8:ef:db:c9:2f:86:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:37:76:E1:9B:F4:9D:AC:4F:DD:A2:5A:96:B1:3E:CC:DD:B5:44:4B
X509v3 Authority Key Identifier:
keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:53:f8:90:36:1d:c0:c6:e4:9a:52:f9:12:c1:ce:1b:62:16:
4f:66:44:be:5d:48:bf:62:c4:26:a6:fd:1a:26:cb:78:96:40:
37:b6:e2:82:8f:28:5a:ef:34:2b:32:b0:1e:e6:1c:3e:a8:a6:
d2:d4:ff:ef:df:6e:1c:9e:6c:ff:34:80:33:f8:da:65:23:62:
d3:4e:e6:7f:fd:b2:14:92:51:60:52:e3:7f:36:b7:62:9e:45:
36:25:41:95:ef:10:6f:b8:5c:55:33:ca:25:1c:85:76:89:76:
b7:15:fe:ed:21:94:37:96:2f:b5:2b:02:0b:88:4e:d5:97:df:
d5:05:0c:f9:9b:ee:33:be:32:7d:f3:e5:5d:09:fe:e7:6a:5b:
ed:cb:35:2b:1d:ff:a6:4a:96:87:2c:fc:8f:71:5d:06:77:fb:
f9:e9:2f:c6:32:34:6a:52:22:04:44:a2:96:a0:bc:02:3f:8c:
04:b0:b5:14:da:be:56:03:28:d6:b1:03:8b:4e:f2:b4:9c:23:
8c:8b:a1:6c:76:92:d9:8e:79:b6:0a:87:a2:6d:80:e6:5d:bd:
8a:1d:f8:8f:42:35:cb:d1:9f:7e:49:9d:e4:bc:23:00:3d:c2:
42:1e:42:65:57:52:0a:7e:d3:0c:f7:3a:9f:e7:a8:d9:eb:ee:
d9:7a:27:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:32 2026 by rpki-client