
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
File: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft (raw, json)
Hash identifier: XlQrzMgJxQORAV3AO8/AZgeNsvJvyQeZC8KMOzjgTsc=
Subject key identifier: 2F:CA:CA:B9:FA:9F:65:DF:50:4D:28:EE:D6:FD:E5:D3:D5:CF:30:1E
Authority key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
Certificate issuer: /CN=A9134A42/serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
Manifest number: 0146
Signing time: Sun 01 Nov 2026 06:32:31 +0000
Manifest this update: Sun 01 Nov 2026 06:32:30 +0000
Manifest next update: Sun 08 Nov 2026 06:32:30 +0000
Files and hashes: 1: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl (hash: 0cK+1iKmOPSeLIoOdCCMeHKtSezCjc3yfk24YOExWc0=)
2: 89040F5A341011F0808A991DC4F9AE02.roa (hash: XSbMI+UlBWNVtMWApI1sBzS25fpV5xmpW9pr9KdQiGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl
rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 06:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134A42, serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
Validity
Not Before: Nov 1 06:32:30 2026 GMT
Not After : Nov 8 06:32:30 2026 GMT
Subject: CN=6ae6dcff-dbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:58:9f:11:bb:bd:9f:f5:53:85:17:e0:bd:
d7:5b:21:9e:79:2c:f2:be:bc:83:88:9d:00:10:fa:
ca:d9:f1:4c:e6:f6:c7:40:ff:12:ed:a7:37:06:0e:
a3:93:37:06:13:0b:f8:64:eb:e8:55:45:cf:bc:fe:
ed:c0:08:2e:c0:56:2a:2a:44:c9:12:8d:dd:f9:26:
22:51:f9:5c:8e:0c:26:41:68:fb:2c:eb:0b:3f:fd:
c9:3a:7a:5a:d3:4d:12:32:1e:9b:16:c4:fd:4e:f1:
fb:c5:b4:07:2c:c4:8b:ea:ee:e1:e8:e9:09:cf:7b:
7b:5f:b3:91:ed:7e:5c:d8:16:f9:cb:9b:a2:93:9d:
fb:f0:0c:26:f3:87:17:9d:5d:85:27:4a:9d:ba:ea:
87:63:76:cb:1f:b5:17:81:5c:36:e0:8a:38:a3:24:
37:29:88:b4:98:af:ea:d9:7c:7c:2b:19:95:bc:78:
53:42:2e:74:80:59:7f:cf:f8:2f:59:53:ad:b5:8b:
e8:42:32:60:c9:95:ad:18:37:26:f0:a9:e9:a9:42:
c0:e6:88:b1:df:fe:c0:b7:a6:42:0d:3e:ce:04:05:
9c:5b:bb:1b:ec:47:db:8a:e1:cb:ee:4a:38:c5:4b:
66:a8:17:dc:55:9a:f6:99:4d:24:6e:40:be:6a:dd:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CA:CA:B9:FA:9F:65:DF:50:4D:28:EE:D6:FD:E5:D3:D5:CF:30:1E
X509v3 Authority Key Identifier:
keyid:80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:72:62:b3:70:cb:b8:5e:e7:b7:d7:43:3e:89:69:74:56:b0:
9a:39:5f:a7:f3:84:b7:91:ff:76:f6:cf:db:cf:60:46:ab:cb:
be:05:18:77:51:e6:20:9d:36:3f:d1:cc:b3:13:0d:96:b2:39:
33:11:38:db:36:14:1b:6f:b5:5c:eb:43:c4:cd:fb:05:1f:43:
5a:6c:7e:29:a1:a7:b8:e0:77:77:ec:b9:b7:d7:5c:77:0f:4e:
0f:4a:04:b3:ac:3c:f8:1b:1c:88:85:d5:1f:8f:b6:df:f6:7f:
79:01:7b:f6:d2:d9:40:e6:f8:e1:53:38:3e:30:d6:dd:b3:5e:
95:b4:3a:09:28:5e:a8:f0:7c:a6:68:c4:f2:db:59:38:c9:e8:
63:84:ab:39:9a:39:f5:d2:c7:4f:f6:60:93:e5:a2:09:6e:67:
4a:7a:eb:7a:86:c1:5b:e3:f2:85:a3:9f:f1:61:a8:b2:c9:9e:
0e:52:ea:e8:fb:fc:c9:23:e2:0e:91:31:ac:8b:39:5c:1c:95:
56:13:c9:68:af:49:04:a2:fe:81:1e:6c:cc:a8:c9:a9:be:58:
64:7a:24:95:c9:c4:a7:82:e0:a5:34:54:c8:f9:24:1f:4c:b8:
9b:14:c0:91:1c:93:91:f8:92:ff:c3:b9:e8:28:fb:be:b6:94:
9d:26:69:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:39:33 2026 by rpki-client