
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json)
Hash identifier: J+2aHg+lzC2f4Jp+sdwnXH9wzccNGcvyKoZvC3k/xUQ=
Subject key identifier: C8:16:AC:5A:09:CD:D5:F3:B0:A2:82:89:F1:E6:93:7B:68:53:9C:EA
Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Certificate serial: 35BB
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
Manifest number: 35BB
Signing time: Wed 04 Nov 2026 14:22:36 +0000
Manifest this update: Wed 04 Nov 2026 14:22:36 +0000
Manifest next update: Wed 11 Nov 2026 14:22:36 +0000
Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: gf78isDSuJtmanrKv56DB5RU7B7A8XKRrnIsysfzC7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 14:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13755 (0x35bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Validity
Not Before: Nov 4 14:22:36 2026 GMT
Not After : Nov 11 14:22:36 2026 GMT
Subject: CN=6aeb3fac-58d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:36:7b:41:8a:17:ab:b2:ab:6c:f9:1e:ed:
d5:04:8f:d9:ea:2e:33:27:53:d9:44:eb:63:64:e3:
62:53:26:52:61:11:fc:95:a1:5c:45:c6:c0:65:1c:
ac:8d:20:85:16:fc:02:d2:cf:6d:85:13:9a:9b:3c:
e0:a5:cc:e2:f0:7f:0f:ba:20:ac:ca:50:f2:22:c9:
1d:bb:56:54:2f:51:6f:06:ac:45:4a:bc:a0:c7:ca:
d6:52:8e:d6:b3:a4:96:51:d4:22:b4:9f:46:a1:bc:
1d:ca:91:39:a2:bf:32:57:f8:01:34:c9:43:a3:a1:
51:72:f7:48:bb:08:92:d6:de:e0:35:ae:ee:f0:5d:
8b:74:13:2b:a5:0d:48:c9:70:02:88:27:aa:26:55:
cf:e4:f3:36:5b:1e:d5:4f:5b:01:7f:bc:d6:e8:8f:
2f:83:44:76:99:59:23:05:a2:dd:fa:95:55:ff:18:
f3:26:d5:91:91:d2:ff:39:d8:f0:cc:03:e0:3e:cc:
46:34:84:94:2e:dd:55:04:5b:46:a9:59:64:7a:31:
78:79:5e:e8:0a:17:c9:10:35:57:e2:62:8a:b4:40:
64:18:45:44:97:f0:13:96:46:3f:73:fb:c3:13:a4:
e9:aa:9c:91:1f:ae:f0:7d:e3:cc:b3:e0:be:e0:de:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:16:AC:5A:09:CD:D5:F3:B0:A2:82:89:F1:E6:93:7B:68:53:9C:EA
X509v3 Authority Key Identifier:
keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:fd:50:7e:c5:50:e3:b4:48:23:da:93:ba:66:ff:34:78:6b:
a4:00:b3:1d:02:f4:4a:a3:e0:70:7e:56:08:b8:61:16:eb:fb:
ea:29:11:67:cf:ce:ff:66:f6:85:8a:85:52:e2:10:4e:91:c5:
f2:d3:0a:8b:0f:94:f3:aa:8b:b3:78:90:31:6f:ee:9d:08:ba:
e1:52:d2:39:ba:4f:73:06:a1:51:af:d6:4d:dc:b1:b2:1d:22:
60:e1:03:ce:f9:5b:f5:59:49:91:18:ba:30:b8:0d:56:ed:9c:
ed:e9:18:18:1f:63:9a:24:f0:ef:38:5d:38:7e:cd:de:d0:7b:
6e:ae:93:ef:ab:f1:ec:0f:d8:51:7d:7d:6f:be:67:3d:5a:6d:
23:81:9d:48:7c:8d:c6:41:c2:da:86:2c:f6:50:b2:fc:e0:93:
cc:f8:77:60:ad:02:b6:c2:ae:7b:a8:9f:15:42:45:9f:a1:dd:
9f:27:17:d3:91:e0:fd:c1:23:09:8c:0d:ed:a5:5e:91:a3:d8:
68:5a:ad:55:75:15:a4:94:d2:51:2d:ba:9f:a2:e6:c9:00:a4:
19:50:24:37:23:61:b0:6e:78:b8:9d:b0:a4:a1:2f:2d:e3:83:
8a:9c:fc:4e:c6:1e:8e:ee:85:a5:34:0b:ff:d1:bf:4b:5f:0f:
10:fc:56:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2
MTExRDBGRkEwHhcNMjYxMTA0MTQyMjM2WhcNMjYxMTExMTQyMjM2WjAYMRYwFAYD
VQQDEw02YWViM2ZhYy01OGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqfU2e0GKF6uyq2z5Hu3VBI/Z6i4zJ1PZROtjZONiUyZSYRH8laFcRcbAZRys
jSCFFvwC0s9thROamzzgpczi8H8PuiCsylDyIskdu1ZUL1FvBqxFSrygx8rWUo7W
s6SWUdQitJ9GobwdypE5or8yV/gBNMlDo6FRcvdIuwiS1t7gNa7u8F2LdBMrpQ1I
yXACiCeqJlXP5PM2Wx7VT1sBf7zW6I8vg0R2mVkjBaLd+pVV/xjzJtWRkdL/Odjw
zAPgPsxGNISULt1VBFtGqVlkejF4eV7oChfJEDVX4mKKtEBkGEVEl/ATlkY/c/vD
E6TpqpyRH67wfePMs+C+4N6PJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMgWrFoJ
zdXzsKKCifHmk3toU5zqMB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl
QXRwcWdfS2dIeEZoRWREX28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEv1QfsVQ47RII9qTumb/NHhrpACzHQL0SqPgcH5WCLhhFuv76ikRZ8/O/2b2
hYqFUuIQTpHF8tMKiw+U86qLs3iQMW/unQi64VLSObpPcwahUa/WTdyxsh0iYOED
zvlb9VlJkRi6MLgNVu2c7ekYGB9jmiTw7zhdOH7N3tB7bq6T76vx7A/YUX19b75n
PVptI4GdSHyNxkHC2oYs9lCy/OCTzPh3YK0CtsKue6ifFUJFn6HdnycX05Hg/cEj
CYwN7aVekaPYaFqtVXUVpJTSUS26n6LmyQCkGVAkNyNhsG54uJ2wpKEvLeODipz8
TsYeju6FpTQL/9G/S18PEPxWvA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 03:43:07 2026 by rpki-client