
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
File: gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft (raw, json)
Hash identifier: Yh6Exm0Dno+pT6O16dwHTI4DiSUGz+cbuMEWYzAI1Hk=
Subject key identifier: 76:BD:ED:08:22:ED:A4:B2:CB:A7:9A:DA:F1:6C:72:27:18:D7:E2:CC
Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
Certificate issuer: /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
Manifest number: DD
Signing time: Mon 11 May 2026 06:44:13 +0000
Manifest this update: Mon 11 May 2026 06:44:13 +0000
Manifest next update: Mon 18 May 2026 06:44:13 +0000
Files and hashes: 1: gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl (hash: 7tcX5G61GunDZaX3YLZsR8IanS7Cbslzn2Tlb+samrI=)
2: 691B3B36FCC611EF8337B652C4F9AE02.roa (hash: +9yjB6RtDViIzqiypLm/pOP2CEfuylarRjWsBGXeOv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Validity
Not Before: May 11 06:44:13 2026 GMT
Not After : May 18 06:44:13 2026 GMT
Subject: CN=6a017abd-c0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:90:82:a5:0f:1e:be:6c:63:76:6d:02:b8:
d7:7e:38:58:db:2c:1f:ed:b5:13:fe:d7:2c:c7:58:
a3:f4:34:38:18:61:f9:cc:37:ab:01:cf:29:35:c8:
17:ec:b3:6e:7e:1b:2a:6d:18:f2:e9:90:17:09:bd:
cc:47:49:9c:30:f9:f2:d6:5d:59:77:8e:28:78:79:
be:ff:47:d9:d0:29:b1:2e:fc:8d:f8:bb:b9:0e:61:
cd:17:a9:90:1f:b9:8e:df:b6:60:a9:8c:c5:02:2a:
79:a8:d8:d0:70:b2:68:08:35:4b:ee:9e:d0:05:96:
cf:2f:10:c0:30:6c:4c:53:6d:c5:97:6f:ad:ad:5d:
4b:0f:39:2a:c6:bd:b6:fa:36:4e:62:68:ff:81:3a:
df:d2:af:c9:7c:b4:4a:8f:c2:42:11:00:e3:a3:34:
bd:d5:7a:91:51:98:c2:ce:f1:94:3b:87:f0:f4:ec:
68:ef:2d:0a:92:02:00:1c:8c:f4:9a:5a:93:78:f7:
22:8d:cc:0f:74:6f:a6:61:aa:9f:21:29:8c:5d:57:
de:00:1d:72:5e:93:a9:4b:5e:65:c5:5e:29:0c:37:
22:f8:b7:dc:df:19:62:84:75:6b:84:df:5e:99:f2:
38:c1:a8:63:62:1a:d8:c6:e6:ea:08:4e:84:51:86:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BD:ED:08:22:ED:A4:B2:CB:A7:9A:DA:F1:6C:72:27:18:D7:E2:CC
X509v3 Authority Key Identifier:
keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:29:a2:d0:1c:37:1c:32:88:22:08:dd:94:58:83:e9:86:22:
95:5f:b7:c6:69:ec:a1:64:2c:0f:76:ad:e5:7b:bc:52:ab:38:
d0:39:dc:a6:b0:10:c0:7d:33:7a:fd:35:c8:32:e4:01:88:50:
53:af:f5:b0:ae:02:82:3b:63:12:18:47:ad:86:c0:ba:f8:e9:
72:17:f0:62:a8:68:1b:24:9e:1d:17:82:11:10:4d:94:16:01:
03:93:ef:74:ca:49:de:57:b5:b5:5c:0f:32:2f:fe:92:63:36:
7e:b3:d8:ba:54:47:33:b5:f1:74:3e:20:9b:55:81:26:1c:c8:
68:48:42:47:96:a9:0b:96:7d:3c:af:b1:04:9e:2e:2d:a8:ca:
2b:1d:90:0b:80:8f:7c:ac:a0:19:ec:39:4c:e7:d2:c9:53:8c:
b5:19:f2:fa:ab:81:72:83:df:88:0e:21:c2:cf:25:ac:a4:a9:
91:fa:fd:a0:8d:5b:55:78:82:85:b8:d6:26:49:40:87:ee:89:
fd:05:72:1b:11:96:30:46:97:88:aa:16:37:5d:f3:f7:d4:65:
b2:f0:e3:ed:15:13:ec:aa:cb:6e:3c:a7:25:ef:90:7e:c5:bc:
54:d3:77:96:78:57:17:c4:1b:e7:aa:5a:6d:6d:5d:24:ce:cf:
61:75:89:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTRGRDgxMTAvBgNVBAUTKDgwNDYzMDc0RDgzRjVFODAzNTREMTk3MDU4NkY1NEE4
OTY1RTE4RDIwHhcNMjYwNTExMDY0NDEzWhcNMjYwNTE4MDY0NDEzWjAYMRYwFAYD
VQQDEw02YTAxN2FiZC1jMGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1TaQgqUPHr5sY3ZtArjXfjhY2ywf7bUT/tcsx1ij9DQ4GGH5zDerAc8pNcgX
7LNufhsqbRjy6ZAXCb3MR0mcMPny1l1Zd44oeHm+/0fZ0CmxLvyN+Lu5DmHNF6mQ
H7mO37ZgqYzFAip5qNjQcLJoCDVL7p7QBZbPLxDAMGxMU23Fl2+trV1LDzkqxr22
+jZOYmj/gTrf0q/JfLRKj8JCEQDjozS91XqRUZjCzvGUO4fw9Oxo7y0KkgIAHIz0
mlqTePcijcwPdG+mYaqfISmMXVfeAB1yXpOpS15lxV4pDDci+Lfc3xlihHVrhN9e
mfI4wahjYhrYxubqCE6EUYYJ+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHa97Qgi
7aSyy6ea2vFscicY1+LMMB8GA1UdIwQYMBaAFIBGMHTYP16ANU0ZcFhvVKiWXhjS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZEOC9GMzUxMkEwQUZD
QzUxMUVGQTkwOTA4NTJDNEY5QUUwMi9nRVl3ZE5nX1hvQTFUUmx3V0c5VXFKWmVH
TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dFWXdkTmdfWG9BMVRSbHdXRzlVcUpaZUdOSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEZEOC9GMzUxMkEwQUZDQzUxMUVGQTkwOTA4NTJDNEY5QUUwMi9nRVl3ZE5nX1hv
QTFUUmx3V0c5VXFKWmVHTkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaimi0Bw3HDKIIgjdlFiD6YYilV+3xmnsoWQsD3at5Xu8Uqs40DncprAQwH0z
ev01yDLkAYhQU6/1sK4CgjtjEhhHrYbAuvjpchfwYqhoGySeHReCERBNlBYBA5Pv
dMpJ3le1tVwPMi/+kmM2frPYulRHM7XxdD4gm1WBJhzIaEhCR5apC5Z9PK+xBJ4u
LajKKx2QC4CPfKygGew5TOfSyVOMtRny+quBcoPfiA4hws8lrKSpkfr9oI1bVXiC
hbjWJklAh+6J/QVyGxGWMEaXiKoWN13z99RlsvDj7RUT7KrLbjynJe+QfsW8VNN3
lnhXF8Qb56pabW1dJM7PYXWJ+A==
-----END CERTIFICATE-----
Generated at Wed May 13 08:44:05 2026 by rpki-client