
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json)
Hash identifier: m24KPMXJrPHR4r6smDmH9KO/sQM/IsSvYy3f7PJg2Gk=
Subject key identifier: 0D:B5:9E:1F:7F:A1:EA:62:BA:9D:CE:3D:B0:07:66:02:B6:BE:95:25
Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Certificate serial: 0D00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
Manifest number: 0CE3
Signing time: Thu 22 Oct 2026 18:33:39 +0000
Manifest this update: Thu 22 Oct 2026 18:33:38 +0000
Manifest next update: Thu 29 Oct 2026 18:33:38 +0000
Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: bExIe7zG0nhYj5xzl47g8w/tqW1Xsc/GZq1A1vCuwu0=)
2: FE677A947F3611F1AEABD9D88FA30FBC.roa (hash: xXKNP1utbvVSzFEm+p/CVGumail8NouJOePObgsIKAg=)
3: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: aM0okos6HP2lmuHFZTzsM6czS1dLwWW/PzQ8J/OHsFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 18:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3328 (0xd00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Validity
Not Before: Oct 22 18:33:38 2026 GMT
Not After : Oct 29 18:33:38 2026 GMT
Subject: CN=6ada5703-60e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:42:21:57:75:08:6a:cc:ee:8f:07:af:fb:
b0:58:97:32:fe:05:5f:f4:ab:32:05:30:0c:c1:42:
b0:1e:47:fc:00:05:85:e4:8c:3f:cf:57:9a:94:49:
f9:2c:33:ac:fe:cc:9f:5b:3a:9f:c2:72:4d:c4:83:
ca:60:8a:80:fe:11:2e:07:91:a7:29:96:c1:7c:e8:
fc:e9:fc:38:4e:d5:aa:23:2f:88:36:6f:3f:43:0f:
c7:98:2d:d4:92:b8:42:4d:77:07:9e:6b:36:a9:ef:
9f:11:69:c7:5d:9a:d3:53:b8:8d:81:04:95:dd:37:
33:36:b9:c3:dd:d2:fd:50:fe:b2:4a:f0:2b:79:aa:
17:a8:c9:e5:d1:5f:88:71:05:09:b6:26:66:c6:6b:
f4:8e:6f:97:16:20:5b:e7:23:fd:93:ca:33:6b:43:
49:67:4b:a0:45:c2:58:af:22:42:f3:4c:d8:34:28:
0c:ad:1d:fd:44:3a:f3:c5:93:76:ff:ae:47:83:88:
7b:c0:d1:51:21:18:aa:84:f5:13:c2:0b:a3:68:05:
bb:7b:4c:1e:53:15:dd:03:58:d8:1b:45:84:0f:d4:
8d:ec:cb:0f:58:5f:fe:b3:02:9f:0c:14:ac:ad:11:
ed:b7:a6:90:08:1b:e9:ca:9f:e9:bd:a0:8b:4d:25:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B5:9E:1F:7F:A1:EA:62:BA:9D:CE:3D:B0:07:66:02:B6:BE:95:25
X509v3 Authority Key Identifier:
keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:6d:01:ff:d9:ed:cb:4d:81:af:f4:3e:78:9d:6d:82:1d:27:
34:e4:a0:28:6c:8e:a0:a5:71:45:21:73:9e:d6:24:d9:8a:b8:
97:8f:a3:74:c8:2e:be:e0:53:6f:0b:81:ce:3a:46:9e:47:bf:
cf:21:84:06:5c:32:62:e0:38:83:26:43:35:0b:0c:fb:ca:55:
2d:f1:27:87:4d:84:e6:ab:9f:3b:f5:df:98:29:cc:2f:fb:c1:
05:18:b3:09:9c:bd:7c:d5:c2:8b:d3:12:2c:bc:50:29:cf:e7:
fd:ef:da:34:fb:02:ee:67:61:4b:88:cc:52:b9:4c:16:0a:c0:
5e:8c:16:cd:d5:cf:ce:2a:64:ff:c9:20:ee:85:cb:75:fe:10:
77:3e:e2:52:07:4c:5d:f3:f8:d9:02:2c:87:09:da:27:3a:be:
ea:81:49:71:08:00:6b:42:95:76:43:b7:52:3b:71:ef:f7:b6:
df:99:a2:15:12:4f:72:61:08:24:53:48:d5:ed:de:dc:8b:4c:
0e:62:43:43:e9:f4:04:6f:74:9f:26:64:d7:ff:27:bf:4c:ed:
71:37:0d:35:bf:79:49:cd:54:55:6e:de:ca:9f:e1:68:2b:95:
9c:13:5e:97:de:fe:2d:27:14:84:ab:6f:dd:03:c0:8a:ac:74:
be:2b:9e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:38 2026 by rpki-client