
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
File: gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft (raw, json)
Hash identifier: 9m7TGoYJtd9MNAp9Cui9VIa9WTuKPZF3+0LgIyCW/NA=
Subject key identifier: B0:F2:D6:B2:FE:98:14:1A:CA:9E:16:0E:5B:E4:1C:0D:F4:66:03:98
Authority key identifier: 83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22
Certificate issuer: /CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22
Certificate serial: 0A05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
Manifest number: 09F7
Signing time: Tue 22 Sep 2026 19:38:49 +0000
Manifest this update: Tue 22 Sep 2026 19:38:49 +0000
Manifest next update: Tue 29 Sep 2026 19:38:49 +0000
Files and hashes: 1: gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl (hash: dNy+20SpIXsw46FdwQvHsQc9H700BTVsc8iqB6EHXvc=)
2: B0071914AAE811EA8412810FC4F9AE02.roa (hash: gqN4+0x/iPERujmuiwnxSyaP8QLNa37HtTvPV2wxA2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl
rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2565 (0xa05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C005, serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22
Validity
Not Before: Sep 22 19:38:49 2026 GMT
Not After : Sep 29 19:38:49 2026 GMT
Subject: CN=6ab2d949-5e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:f7:cb:2e:3e:fc:92:62:65:d9:17:66:eb:
a4:ad:f6:8b:b7:d7:f7:5d:4e:6c:54:76:c6:ac:13:
86:84:01:75:e7:20:e3:9f:4e:52:65:f8:c4:8e:8f:
38:f9:61:a2:b6:d0:a2:96:d3:74:1f:3c:7c:34:ed:
5b:83:fb:55:be:34:76:9c:cc:fc:46:b2:f1:63:17:
b6:d0:ad:77:22:30:5c:fd:bd:60:e0:5d:ab:30:c1:
77:00:db:89:c0:7f:5e:70:fb:a5:6a:23:15:31:9e:
ac:5b:be:02:7b:6a:a2:2b:bb:2b:fa:bf:1a:65:5d:
67:57:c5:67:15:33:9c:52:c5:55:27:18:67:4f:31:
02:a2:12:a5:13:a3:9d:0d:f4:a8:3c:f2:5e:6b:77:
01:39:c1:ca:a3:32:0c:19:11:b7:9e:c1:42:44:0b:
e2:a8:18:3c:18:b0:ae:19:06:b9:a3:f6:f2:33:81:
24:6d:ab:c3:e3:9a:e8:c2:a2:58:fa:be:6d:b8:24:
f1:42:13:ae:4d:83:0c:d4:de:7a:74:7f:f4:91:2a:
4a:af:5d:6d:4d:dc:12:c5:7b:18:79:d7:15:97:75:
f5:31:e8:c7:db:77:98:f3:79:07:d1:e5:84:f8:9f:
f6:a9:b6:dd:06:35:fa:fa:62:fa:d2:93:a7:3f:74:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F2:D6:B2:FE:98:14:1A:CA:9E:16:0E:5B:E4:1C:0D:F4:66:03:98
X509v3 Authority Key Identifier:
keyid:83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:7e:6a:f4:d1:17:1e:e0:1f:90:5e:5c:24:1a:88:29:99:ff:
ee:49:a6:a4:cd:dc:b6:6c:5a:50:8c:7a:37:4e:ae:8e:9f:e8:
e7:69:ce:e4:a9:b3:40:5f:dc:2e:4b:f3:9a:5b:be:82:14:ab:
39:c1:4d:04:ef:34:f0:06:e1:96:51:8e:57:0e:89:8b:da:a6:
f9:a7:57:1a:d4:1e:62:f0:a5:a7:26:cf:af:10:17:99:07:92:
8c:6b:b4:8a:e6:b7:6d:4e:a6:36:5c:1d:cf:ee:ea:bd:4e:f8:
25:92:d2:bd:8e:d7:32:d3:00:37:47:16:e7:ce:42:2c:da:bb:
22:4b:cc:18:26:1b:77:1f:42:b9:f8:42:cd:81:b0:20:f7:45:
d3:43:f4:a1:ad:91:c0:5c:b1:59:0e:26:9f:f5:97:3a:10:73:
f3:f8:e9:a5:3a:d8:92:be:fb:6d:67:78:16:0c:00:4a:86:ad:
c5:a2:e2:de:6b:67:f8:a6:e4:1a:c9:80:56:bf:dd:80:ed:9d:
3a:00:be:ae:d5:ef:19:94:23:bf:5a:17:df:36:03:2f:ca:a8:
74:b0:35:9f:b5:a9:a3:1c:ae:86:80:3d:f4:99:0f:66:bd:97:
76:b9:55:4b:e6:3e:d6:64:9f:ed:68:73:11:d3:28:c0:93:a9:
97:f0:7e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:34:42 2026 by rpki-client