
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
File: gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft (raw, json)
Hash identifier: 121199lYyHjT0GPQ/advpq9OXwwxiW3lT2mW08mOB74=
Subject key identifier: F3:75:AB:4A:83:0E:A9:9D:E5:F4:B0:43:C0:C3:3F:9B:22:14:6E:03
Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
Certificate issuer: /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
Manifest number: C3
Signing time: Wed 25 Mar 2026 06:06:30 +0000
Manifest this update: Wed 25 Mar 2026 06:06:30 +0000
Manifest next update: Wed 01 Apr 2026 06:06:30 +0000
Files and hashes: 1: gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl (hash: ii+CIc2kHgyIjYFqYVFwjLnVkaMmaVve0RJi5hmv2l8=)
2: 691B3B36FCC611EF8337B652C4F9AE02.roa (hash: jlFq8W0TEfP30zBzD3sq1sL3Smdtyl0F/scGjOLmEEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Validity
Not Before: Mar 25 06:06:30 2026 GMT
Not After : Apr 1 06:06:30 2026 GMT
Subject: CN=69c37b66-6036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:d2:f3:1c:b2:37:91:50:9d:bd:5e:3d:8c:
e0:e1:d9:4e:c6:91:8f:1f:eb:b9:79:c1:02:9e:00:
a7:db:61:7d:7d:13:6e:3c:6c:18:6a:22:c7:3f:6f:
48:c5:11:41:e1:7b:20:42:cb:ea:a7:f0:9e:1a:ba:
27:b7:b1:f9:82:a7:92:3f:70:9a:52:6d:0f:dc:f8:
20:93:6c:4b:49:d8:c3:d7:0f:e1:3e:ea:ed:47:50:
24:1f:94:f2:0b:33:d6:91:e6:81:0e:ce:34:a0:be:
db:ea:0d:98:73:91:f7:06:08:0a:8d:04:e4:91:68:
75:a4:1d:7b:39:06:8d:d7:fb:ad:7e:4a:ce:7d:d4:
b9:38:6f:f1:48:12:a3:e7:6e:bb:6b:5a:df:b6:10:
31:01:05:aa:f5:67:fc:aa:05:e2:1b:a5:de:93:16:
c4:66:91:8d:ef:71:07:ef:9c:83:f7:e6:be:a3:66:
a4:43:d4:99:ac:c7:f6:a1:2d:e3:1c:a6:d2:3f:9c:
7b:ee:6a:4c:02:41:a7:17:c8:a8:10:0f:b1:0e:c8:
ed:95:ec:89:fd:9d:60:30:48:26:9a:f4:32:99:77:
03:22:62:20:7c:64:2e:88:a6:58:4c:f2:b0:a4:be:
2d:df:f8:67:aa:40:a3:c2:34:5c:22:08:ee:c9:e5:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:75:AB:4A:83:0E:A9:9D:E5:F4:B0:43:C0:C3:3F:9B:22:14:6E:03
X509v3 Authority Key Identifier:
keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:fb:ba:39:11:7b:af:26:4b:db:60:b4:30:ab:07:28:42:3e:
ae:39:e0:78:ef:49:c3:d8:c2:e8:42:8a:2a:f4:1c:a1:14:7d:
ba:79:88:0b:b5:d5:84:99:11:1a:06:e0:cb:ba:3f:97:a8:04:
5f:ef:67:83:3a:cb:73:07:97:50:93:72:c8:2b:1c:8b:2e:0f:
a0:2d:cb:dd:58:a6:6e:6f:30:c0:40:da:95:d7:d3:c8:9a:5f:
6f:f1:f7:d0:6d:e6:2a:42:83:c5:db:f1:6f:18:81:76:f5:78:
36:bd:0a:0d:5a:0e:38:fb:aa:85:28:49:65:45:40:15:90:00:
d1:ba:19:4b:e8:20:67:4a:24:a8:09:51:45:d4:38:e9:3b:de:
ce:44:af:c3:aa:8d:f6:14:25:b9:2a:fb:f9:ea:5c:15:81:33:
88:35:16:4f:af:03:bb:c1:0e:e6:4e:09:4b:69:5c:cc:6e:17:
00:a8:5f:78:cf:23:2d:80:9d:99:49:a7:a0:f9:44:e6:98:6d:
90:3a:9d:a2:7f:26:0d:14:c1:75:c4:b3:b3:dc:18:90:93:6f:
8f:d3:09:cd:db:55:4a:94:aa:34:70:0e:3e:71:6a:9e:d5:3e:
a6:1a:fd:e4:b3:e2:23:b1:6d:5f:d3:2a:79:fc:9a:07:b3:0f:
16:31:13:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:20:26 2026 by rpki-client