
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.mft
File: g5QfcUHW2cwg3DLw_lc4OMWkdo0.mft (raw, json)
Hash identifier: Kdt3W/7GSvBUOwR6RaP9hnVtZEXeypwoMb8f+XuY5Tk=
Subject key identifier: B6:3D:EB:17:B6:8E:38:46:B8:FC:FC:5C:3B:21:10:32:29:FF:CC:87
Authority key identifier: 83:94:1F:71:41:D6:D9:CC:20:DC:32:F0:FE:57:38:38:C5:A4:76:8D
Certificate issuer: /CN=A9138A44/serialNumber=83941F7141D6D9CC20DC32F0FE573838C5A4768D
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g5QfcUHW2cwg3DLw_lc4OMWkdo0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.mft
Manifest number: 24
Signing time: Thu 29 Oct 2026 09:39:40 +0000
Manifest this update: Thu 29 Oct 2026 09:39:39 +0000
Manifest next update: Thu 05 Nov 2026 09:39:39 +0000
Files and hashes: 1: g5QfcUHW2cwg3DLw_lc4OMWkdo0.crl (hash: UVL6/XfGva45B/Km8PZOE0Cvgaegpw7fUNOeu/p6nfY=)
2: 547E78ACA11911F1AA6D5C983C11F970.roa (hash: uSyq8GtigHdGR1YUbl2ZFJ4spXwNSbS2qhInIUnXVGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.crl
rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g5QfcUHW2cwg3DLw_lc4OMWkdo0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 09:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A44, serialNumber=83941F7141D6D9CC20DC32F0FE573838C5A4768D
Validity
Not Before: Oct 29 09:39:39 2026 GMT
Not After : Nov 5 09:39:39 2026 GMT
Subject: CN=6ae3145c-0978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:38:3f:0d:8e:a5:ad:af:7b:f1:77:d0:d2:
46:c9:d4:3e:14:69:c3:47:b5:3f:65:db:06:d1:6d:
98:69:d5:a6:62:cf:aa:97:8c:22:12:ec:17:67:c2:
5a:2b:7c:09:98:be:fb:ba:01:e3:2e:ad:51:60:75:
ac:5e:f8:99:b9:4c:a1:66:4f:87:19:52:ba:c9:ae:
d4:63:a3:b0:26:d2:c0:fe:4e:4b:47:0b:d0:0a:af:
1c:b3:54:25:3b:64:4d:01:ef:d1:7f:16:86:0a:cd:
5b:4c:6a:3d:c6:c9:aa:68:89:f9:20:ac:b1:0a:c2:
4d:b9:1a:5e:8d:64:ab:0b:09:2d:5d:fd:19:26:45:
77:8c:df:14:d7:8d:4d:91:2c:00:11:ac:fe:d3:9e:
af:43:5d:71:4b:bc:2a:35:42:f0:57:a2:cf:f7:be:
3c:89:1c:f5:d3:a0:e7:83:7b:2a:25:08:74:7d:1a:
36:b4:f8:56:cb:25:8f:16:6e:b7:b3:75:7f:ac:c4:
65:b0:85:8a:46:db:30:0c:0f:10:33:ca:a6:17:6e:
f7:9d:b1:75:76:6d:e5:cd:11:99:7f:29:3a:fb:32:
8a:d0:3f:2c:55:47:ab:70:50:ef:14:d7:3d:7e:7f:
46:e6:92:67:3f:e1:47:3d:2f:60:bc:b1:d0:95:7d:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3D:EB:17:B6:8E:38:46:B8:FC:FC:5C:3B:21:10:32:29:FF:CC:87
X509v3 Authority Key Identifier:
keyid:83:94:1F:71:41:D6:D9:CC:20:DC:32:F0:FE:57:38:38:C5:A4:76:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g5QfcUHW2cwg3DLw_lc4OMWkdo0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e3:4a:8b:bd:f9:11:18:7d:c2:d1:68:12:94:18:37:26:07:
60:4f:6c:6e:0a:3c:23:e0:f7:41:95:7c:22:a1:dd:12:7d:98:
7e:94:c2:1b:6a:6e:80:5d:e5:86:26:38:9f:dd:52:87:f8:03:
a7:bc:24:fc:6d:75:e7:72:40:e5:e6:6b:2b:06:11:ea:8e:60:
a9:3d:82:83:1a:6b:07:34:41:87:d7:4e:cb:4f:18:e1:e5:4c:
ce:17:55:13:e3:3b:ed:0b:df:f6:88:13:cf:54:4d:eb:77:e0:
8f:92:60:dc:13:89:81:34:96:96:59:4f:76:b3:51:8c:1e:89:
fc:f8:b4:c3:4e:a5:56:11:c3:23:bf:d0:cb:f4:b2:2f:09:f1:
54:d6:c2:92:2d:a4:e7:da:50:68:42:42:05:34:36:7b:ce:5e:
40:2d:ca:4d:81:94:49:2c:0d:32:14:36:f2:47:79:42:bc:f0:
c3:f9:6b:f7:f8:2b:73:9e:1b:f8:96:c3:4b:bd:20:43:5f:25:
9e:e1:22:df:b7:89:82:ac:e6:bc:5c:b7:71:bd:3d:e2:4d:bb:
fb:67:8d:e8:c1:e7:d2:6e:75:1d:c5:09:1e:15:28:d0:99:ff:
ff:ed:fa:6b:7f:21:bd:3f:a1:87:90:ea:e2:f1:90:73:02:10:
ad:87:3b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:24:44 2026 by rpki-client