
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json)
Hash identifier: AYVOGc/oVV2tyLrRKAP6HDJjZoGP1Z4tcg1/WjdjbnE=
Subject key identifier: 64:4B:BA:1E:18:E4:C7:FD:E7:9C:DC:35:3D:A9:2C:D9:40:A4:04:93
Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Certificate serial: 356D
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
Manifest number: 356D
Signing time: Thu 18 Jun 2026 14:22:09 +0000
Manifest this update: Thu 18 Jun 2026 14:22:09 +0000
Manifest next update: Thu 25 Jun 2026 14:22:09 +0000
Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: 2LgzCSWPhEkEm62Ghk5ASma5KeA5weNFhnqXwMKUD/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 14:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13677 (0x356d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Validity
Not Before: Jun 18 14:22:09 2026 GMT
Not After : Jun 25 14:22:09 2026 GMT
Subject: CN=6a33ff11-198a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:11:e8:6c:94:97:47:fb:61:9d:92:e6:76:
75:66:36:6e:98:a8:20:3f:6c:2a:db:6e:62:4a:76:
38:64:c7:f2:4f:cb:e6:f2:bf:20:7f:63:07:e8:b2:
ab:09:f1:69:51:c5:21:68:fd:c8:e9:7f:82:96:2c:
2f:99:38:bb:d9:e1:02:f1:8a:85:9f:94:7a:49:26:
3a:e1:7b:bb:47:23:2b:b9:70:8f:20:10:cf:6c:20:
1b:d4:d1:6d:73:81:bc:34:66:85:0d:fa:02:a9:60:
2f:29:ea:ea:28:34:ff:8f:a6:a7:18:e1:34:48:52:
96:03:00:7f:9e:b4:47:17:0c:61:3f:e0:ef:e5:6d:
11:83:8b:2e:40:91:51:32:a7:d3:ec:1e:8e:fa:b8:
77:c7:4e:30:27:c2:ad:e4:d4:26:42:f3:87:16:ea:
c7:24:3e:be:2e:b9:45:00:12:25:3c:f4:43:f7:20:
62:aa:6a:5b:36:c3:cc:e3:8e:26:75:4f:53:02:97:
09:0a:7b:80:71:bf:10:3f:f7:75:f3:aa:4b:16:ed:
14:e1:2c:84:f1:8d:89:38:d8:88:51:6a:c0:5b:bd:
e3:69:60:95:46:7e:5a:66:eb:28:16:f0:d3:5a:34:
9b:91:e5:87:cc:2c:8f:2c:43:ed:a1:6c:ac:7e:84:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:BA:1E:18:E4:C7:FD:E7:9C:DC:35:3D:A9:2C:D9:40:A4:04:93
X509v3 Authority Key Identifier:
keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:3d:7f:7f:b7:ce:48:63:f8:c9:78:d1:d8:dd:11:8f:de:4c:
59:71:b2:40:f2:bb:ef:ab:77:43:42:22:0b:ba:84:29:ee:aa:
e7:43:1e:73:76:4a:77:09:f0:b8:cb:88:57:b1:d5:d4:60:3b:
eb:52:4d:11:c2:48:54:fa:84:89:e6:ea:60:1d:c3:7d:ba:46:
d6:b7:52:e6:7b:aa:7a:57:a9:fe:5c:d6:58:0d:a0:16:10:8c:
fa:0e:cb:9a:a7:4b:d8:5e:c2:28:2d:32:93:4c:5c:d1:d4:59:
38:4b:4b:68:78:81:1a:3c:1b:be:8e:96:6b:ad:3b:3c:b6:31:
12:6f:11:10:e7:78:ac:c1:6e:3e:b7:fd:42:b1:82:d5:21:41:
93:7f:c2:a7:de:71:77:cd:92:fb:34:cd:f5:ff:7b:1f:b5:01:
43:9d:e1:2c:40:4b:58:f2:6b:71:01:56:42:b2:7c:0b:12:9d:
3d:43:20:cd:b7:ec:55:a2:b4:84:03:ee:39:36:4a:32:67:11:
e5:d7:50:a1:70:f7:6a:e6:0d:b2:18:eb:3d:34:56:ab:5e:2f:
92:46:58:45:da:be:86:8e:cd:fa:2e:f2:c6:80:6a:0f:2d:c8:
8a:5c:aa:da:89:dd:ef:bc:cb:4c:0b:3e:5f:fd:26:89:2f:ef:
c5:d9:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:36:45 2026 by rpki-client