
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
File: GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft (raw, json)
Hash identifier: UEEax64UULg8JSHiDeB25yEhmBHHfR327xPsSwkk9ko=
Subject key identifier: B3:0D:BC:11:23:17:DE:63:9F:7C:D7:90:CB:D8:2F:07:9A:2D:6B:8B
Authority key identifier: 18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F
Certificate issuer: /CN=A9126BDE/serialNumber=1899AA6415670533224938FAA6655296183E438F
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
Manifest number: 99
Signing time: Sun 27 Sep 2026 07:56:50 +0000
Manifest this update: Sun 27 Sep 2026 07:56:49 +0000
Manifest next update: Sun 04 Oct 2026 07:56:49 +0000
Files and hashes: 1: GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl (hash: 68q+KirE5fIA1H6Z27chyH7zp9fEvTmOz//G8q2c4BI=)
2: 5325F364D3FF11F09B7E5281C4F9AE02.roa (hash: 0DoVxQ7M0n3cZaqCMc5G8GkmP8gnmF47PhLipr8RTHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl
rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126BDE, serialNumber=1899AA6415670533224938FAA6655296183E438F
Validity
Not Before: Sep 27 07:56:49 2026 GMT
Not After : Oct 4 07:56:49 2026 GMT
Subject: CN=6ab8cc42-b4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:cf:7e:56:37:2f:ac:03:02:da:5b:85:c4:
88:ab:de:b3:c1:7a:75:2d:20:cc:46:cd:2e:2e:b5:
87:76:2d:34:eb:60:ee:76:af:c3:93:40:c0:af:7f:
14:b4:43:a4:c5:08:f2:ee:b3:43:54:80:04:22:66:
94:d7:aa:74:37:f9:b4:01:d2:1d:09:5d:c3:0e:e7:
0b:13:81:a8:6f:6e:cb:9c:6f:be:59:67:4f:9b:3f:
b4:7d:6c:3e:b0:24:e7:10:dd:12:79:92:67:95:da:
39:f0:19:42:87:b8:1f:db:c0:97:43:da:07:71:3e:
15:ff:61:9b:93:cf:52:09:d7:b9:fc:21:76:d8:36:
ba:3a:a3:90:b0:85:23:7a:e4:d9:df:b1:11:90:b5:
39:67:e2:48:5e:5c:1a:58:67:5b:03:bd:5b:02:d8:
0c:5c:2e:ef:91:3a:f0:0f:2b:45:70:4c:96:67:e7:
e0:da:19:86:d8:f7:db:8a:aa:8b:bb:9c:1a:c5:e2:
4d:93:5b:97:1d:fc:92:05:93:be:91:72:b6:1d:d0:
90:f0:53:2b:c5:88:45:53:17:8d:1e:fc:81:91:b8:
de:21:d2:58:5e:cd:9c:7c:00:81:b9:75:44:23:66:
4c:dc:31:1d:e4:54:8e:4e:93:30:df:80:cc:22:96:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0D:BC:11:23:17:DE:63:9F:7C:D7:90:CB:D8:2F:07:9A:2D:6B:8B
X509v3 Authority Key Identifier:
keyid:18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d4:19:fc:fe:e3:c0:3f:7b:2f:e6:fb:15:ac:a8:35:8c:ab:
d4:55:28:f2:44:4b:dd:35:2b:3a:76:7b:c4:7d:bb:bd:ca:04:
63:56:d0:60:2d:d9:d7:45:e6:6a:02:44:3d:31:2e:2c:e2:8e:
f0:3d:3d:42:e1:68:50:d9:fd:4a:66:a3:e0:48:a9:86:f5:8c:
c4:7b:aa:e5:30:0b:ba:80:8e:ef:67:b8:8d:9f:9b:34:47:19:
eb:4c:6c:94:54:42:74:3c:0d:1c:c7:cb:e7:cf:7b:23:de:6d:
dd:48:a9:9a:c2:9e:23:07:ae:ef:34:73:52:5e:09:ce:c1:fb:
77:f2:0a:40:49:35:09:2d:90:c8:84:55:9a:48:01:27:54:0d:
f5:01:0c:5d:88:ce:46:f1:01:fd:14:76:ff:47:43:39:cf:11:
d4:ce:50:3a:f2:48:56:ed:68:0a:9f:57:3f:5f:3e:28:de:42:
d3:64:9a:34:1e:ce:a2:5d:6c:71:9c:3e:e2:ea:28:b7:b6:aa:
0f:3b:11:17:d5:6e:da:24:f1:86:88:7d:2a:95:47:9a:8c:64:
da:fb:d9:18:de:63:a1:e8:1b:9b:78:99:8e:48:0a:83:5d:1b:
69:4d:38:89:cc:32:41:07:6a:28:f5:86:d5:8b:f0:22:59:b0:
81:11:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:50:53 2026 by rpki-client