
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json)
Hash identifier: TCfkHO9UENmAQtA2x8dcHFGSeOo0qY/UE33aORGQXuk=
Subject key identifier: 28:63:6A:8D:B2:25:C4:3B:B0:29:1F:C6:AF:B0:77:67:82:0F:5B:87
Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Certificate serial: 0726
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
Manifest number: 071D
Signing time: Sat 24 Oct 2026 22:04:23 +0000
Manifest this update: Sat 24 Oct 2026 22:04:22 +0000
Manifest next update: Sat 31 Oct 2026 22:04:22 +0000
Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: kjldBEOuOVsv0/PeisOicunK/xvt7WMhNWJK2oWcJfM=)
2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: ACAY/xzMAwRsaI6amyIZeaQ0gMp5jylI2sZ6rmvu9eo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 22:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830 (0x726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Validity
Not Before: Oct 24 22:04:22 2026 GMT
Not After : Oct 31 22:04:22 2026 GMT
Subject: CN=6add2b67-5716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:c7:33:2d:46:b0:a9:d6:3a:98:66:49:10:
5d:c4:d2:fa:08:e0:1a:34:57:07:7d:91:d0:1d:a8:
47:cf:00:5b:98:e1:11:96:40:1f:5b:60:31:cd:24:
d5:20:50:05:74:ac:ed:70:52:a0:b3:9f:88:32:45:
e0:f9:1e:e9:2f:51:8c:2e:08:b5:e2:db:92:d5:94:
76:63:ef:8a:19:73:53:d8:6d:cc:8a:43:95:e0:3f:
71:fb:17:a4:06:8d:52:55:84:75:0c:49:98:04:11:
4b:00:02:05:01:30:eb:14:ed:52:af:61:35:52:a4:
2e:a0:ac:5e:f8:12:61:a8:de:55:a3:7a:33:58:5b:
d9:bb:28:bb:70:58:0c:1a:f0:12:05:ca:96:d5:8e:
e3:aa:69:b2:d6:b6:21:10:6c:e3:d4:25:fc:3e:09:
c4:f2:a4:5e:3c:a2:2a:eb:c4:58:10:ca:ca:9c:c1:
6d:05:3e:b7:85:00:7c:e2:a2:72:84:7c:80:ae:25:
f6:e9:9e:5f:04:fa:db:99:ba:ef:6f:32:1a:f8:fc:
3b:d7:ab:24:b7:88:db:17:d1:8b:2b:1e:36:9b:ff:
ed:8a:73:3f:08:26:60:e0:d7:63:5b:e9:40:50:a7:
4d:ee:f6:32:31:35:6b:60:7b:ce:c8:10:27:8e:e1:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:63:6A:8D:B2:25:C4:3B:B0:29:1F:C6:AF:B0:77:67:82:0F:5B:87
X509v3 Authority Key Identifier:
keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:ba:f4:3f:66:ee:94:a3:8c:b3:d8:b8:64:22:2d:87:c0:1d:
25:7c:58:60:33:3e:06:cc:04:b2:8b:5f:03:82:7c:bd:73:c3:
81:1b:4e:44:db:36:69:da:0f:ea:44:66:c2:8d:33:3e:fe:02:
a0:a8:e4:b8:72:8d:f8:f5:1c:fb:8a:77:24:90:4b:6e:f7:7a:
cb:61:ec:c8:e7:66:09:19:ea:dd:75:bf:1e:c2:9e:74:8d:f2:
a1:d9:96:23:12:dd:db:83:52:01:8d:e0:8d:6a:dd:14:42:ae:
c3:37:a5:d9:73:b1:42:8f:85:97:04:1c:64:63:54:28:fc:44:
a2:f3:61:61:64:5a:cc:41:b7:7f:19:b1:92:7e:de:b5:05:a7:
bc:03:ee:88:30:ce:68:24:97:1a:30:e2:fb:9d:4a:87:5c:0b:
b2:f8:fe:30:83:59:fc:64:68:95:f1:1a:f5:6b:a3:1f:ce:31:
f0:15:d0:f0:04:04:24:8f:4c:6f:3d:6e:63:f4:02:5e:a6:da:
84:06:f3:4c:3f:f9:2f:e5:f9:a3:03:bb:4c:b4:80:a3:22:8a:
a8:0d:45:2c:22:7e:8d:39:77:35:f9:5d:2c:7c:3c:ea:04:4d:
88:ee:02:30:12:ee:c9:f8:d9:4b:ff:e1:bb:e8:8d:45:85:5c:
82:3a:0a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:37:14 2026 by rpki-client