
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
File: gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft (raw, json)
Hash identifier: w/EATVGMgJsV1FBzBxA1i9uDSCsiKmTyyljMoNiCqxE=
Subject key identifier: D7:63:D1:41:57:97:E3:55:7F:08:35:6B:81:EC:03:66:43:92:A2:69
Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
Certificate issuer: /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
Manifest number: 0125
Signing time: Fri 25 Sep 2026 05:52:20 +0000
Manifest this update: Fri 25 Sep 2026 05:52:20 +0000
Manifest next update: Fri 02 Oct 2026 05:52:20 +0000
Files and hashes: 1: gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl (hash: 6dF4bTQ9/M3vBE9rA2mOqfNUwgKrybf7oHziwMYpnxo=)
2: 691B3B36FCC611EF8337B652C4F9AE02.roa (hash: 4RVRUZFMjrHSHp+QVOflneRKf1QSznuKsw3ALAxUkIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Validity
Not Before: Sep 25 05:52:20 2026 GMT
Not After : Oct 2 05:52:20 2026 GMT
Subject: CN=6ab60c14-47d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:cc:c0:61:41:4e:cc:c0:77:b4:9e:66:d5:
0d:e7:fb:25:13:62:b1:56:08:95:fa:b3:e2:f8:85:
80:ec:4f:0c:d1:08:1e:c1:54:f7:3a:fb:aa:77:7d:
2d:08:fa:03:bf:87:4e:c7:e4:1e:b3:eb:b5:0f:06:
94:5f:db:ef:0e:e0:08:88:67:9c:84:36:58:3b:68:
60:ba:1b:fc:5e:1a:67:6d:7a:46:36:9c:3e:99:25:
24:ea:f7:1c:8a:a5:35:0a:49:2c:1b:44:6b:24:63:
3a:ed:fe:ed:65:4f:73:7b:81:e9:86:36:45:23:7b:
87:37:2c:1b:67:1e:52:e3:68:95:be:d9:68:37:f3:
fc:98:5c:a0:42:55:7f:e3:ab:cd:9a:8d:a4:70:93:
2a:ad:c6:b3:5c:d8:f4:94:de:91:4f:f2:2e:91:eb:
1c:18:81:4f:9c:1a:e0:9d:a2:de:91:6d:d8:5c:f0:
e2:fc:68:58:23:7e:bd:19:46:2b:8a:62:77:6c:f4:
c9:fb:c6:e9:da:b6:9a:8d:cf:88:d4:ca:81:35:2a:
65:d3:fd:60:96:f2:fc:69:0b:6d:67:87:52:08:a2:
80:f6:a2:b0:77:a4:b8:10:41:a8:46:9a:f1:5a:77:
3e:42:fa:dc:dd:80:96:92:67:c6:c5:9a:e1:61:e3:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:63:D1:41:57:97:E3:55:7F:08:35:6B:81:EC:03:66:43:92:A2:69
X509v3 Authority Key Identifier:
keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:4e:0b:f9:9e:ce:b7:ed:ec:a8:7e:34:80:2c:3f:1d:ca:4e:
23:e4:8a:45:5d:54:1c:e1:d6:e5:63:50:e4:42:e5:ba:89:08:
6a:dd:6d:6d:9d:4a:88:2d:41:b4:13:ec:42:1d:19:ba:ed:78:
92:3c:e9:73:a6:15:dc:4c:1e:a2:5f:cd:33:06:f6:42:a0:99:
94:33:2c:be:0e:0b:43:81:e6:c6:92:8f:5b:29:c6:8f:2a:76:
6f:cd:c6:b6:dc:24:bb:93:8b:d9:70:f5:ed:29:0b:a5:a4:61:
d5:f4:1c:f4:05:f7:08:1c:a5:42:b5:6c:aa:68:92:4e:ec:40:
c1:cf:7b:47:fc:87:8a:71:1d:90:1a:e4:7c:5a:74:4d:38:27:
6d:f6:fc:1b:ab:61:fa:a9:b9:e8:e1:60:52:9a:b9:2c:64:49:
15:6a:b3:5b:d0:d4:8d:36:3f:44:9a:1f:3e:23:dd:66:00:fe:
36:02:a0:a2:57:8d:0d:d6:25:71:1c:c4:7f:f6:9e:66:f1:05:
4e:d6:0f:27:07:44:b3:5e:5e:73:7b:25:7c:47:0c:27:c0:97:
5d:c0:15:5e:56:c3:7e:54:12:5a:fd:7e:c8:0f:f1:d9:84:3d:
af:cd:ac:6c:d5:45:96:f9:9a:a1:ab:52:d4:99:f8:25:d0:ab:
d8:fb:ff:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTRGRDgxMTAvBgNVBAUTKDgwNDYzMDc0RDgzRjVFODAzNTREMTk3MDU4NkY1NEE4
OTY1RTE4RDIwHhcNMjYwOTI1MDU1MjIwWhcNMjYxMDAyMDU1MjIwWjAYMRYwFAYD
VQQDEw02YWI2MGMxNC00N2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtsTMwGFBTszAd7SeZtUN5/slE2KxVgiV+rPi+IWA7E8M0QgewVT3Ovuqd30t
CPoDv4dOx+Qes+u1DwaUX9vvDuAIiGechDZYO2hguhv8XhpnbXpGNpw+mSUk6vcc
iqU1CkksG0RrJGM67f7tZU9ze4HphjZFI3uHNywbZx5S42iVvtloN/P8mFygQlV/
46vNmo2kcJMqrcazXNj0lN6RT/IukescGIFPnBrgnaLekW3YXPDi/GhYI369GUYr
imJ3bPTJ+8bp2raajc+I1MqBNSpl0/1glvL8aQttZ4dSCKKA9qKwd6S4EEGoRprx
Wnc+Qvrc3YCWkmfGxZrhYeOOzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdj0UFX
l+NVfwg1a4HsA2ZDkqJpMB8GA1UdIwQYMBaAFIBGMHTYP16ANU0ZcFhvVKiWXhjS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZEOC9GMzUxMkEwQUZD
QzUxMUVGQTkwOTA4NTJDNEY5QUUwMi9nRVl3ZE5nX1hvQTFUUmx3V0c5VXFKWmVH
TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dFWXdkTmdfWG9BMVRSbHdXRzlVcUpaZUdOSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEZEOC9GMzUxMkEwQUZDQzUxMUVGQTkwOTA4NTJDNEY5QUUwMi9nRVl3ZE5nX1hv
QTFUUmx3V0c5VXFKWmVHTkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMU4L+Z7Ot+3sqH40gCw/HcpOI+SKRV1UHOHW5WNQ5ELluokIat1tbZ1KiC1B
tBPsQh0Zuu14kjzpc6YV3Eweol/NMwb2QqCZlDMsvg4LQ4HmxpKPWynGjyp2b83G
ttwku5OL2XD17SkLpaRh1fQc9AX3CBylQrVsqmiSTuxAwc97R/yHinEdkBrkfFp0
TTgnbfb8G6th+qm56OFgUpq5LGRJFWqzW9DUjTY/RJofPiPdZgD+NgKgoleNDdYl
cRzEf/aeZvEFTtYPJwdEs15ec3slfEcMJ8CXXcAVXlbDflQSWv1+yA/x2YQ9r82s
bNVFlvmaoatS1Jn4JdCr2Pv/1w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:34:56 2026 by rpki-client