
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
File: GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft (raw, json)
Hash identifier: kmgp7+j8E/Gr35fqprfBu8VKjC1ro2bAhY4r+wBD4Fo=
Subject key identifier: 79:C8:69:B9:0B:55:9F:4E:CA:1D:8A:2E:FF:AD:11:7A:16:CA:B0:86
Authority key identifier: 18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F
Certificate issuer: /CN=A9126BDE/serialNumber=1899AA6415670533224938FAA6655296183E438F
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
Manifest number: 53
Signing time: Mon 11 May 2026 08:24:24 +0000
Manifest this update: Mon 11 May 2026 08:24:24 +0000
Manifest next update: Mon 18 May 2026 08:24:24 +0000
Files and hashes: 1: GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl (hash: lGgmwxeiO9Qz8UD8QzO7RTPzrOi5DIx+fdfI8uZuO6U=)
2: 5325F364D3FF11F09B7E5281C4F9AE02.roa (hash: 0DoVxQ7M0n3cZaqCMc5G8GkmP8gnmF47PhLipr8RTHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl
rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126BDE, serialNumber=1899AA6415670533224938FAA6655296183E438F
Validity
Not Before: May 11 08:24:24 2026 GMT
Not After : May 18 08:24:24 2026 GMT
Subject: CN=6a019238-4e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:31:b6:60:ed:d8:0a:c4:f9:a2:5d:e7:ec:
b4:6c:66:d0:11:f8:9c:69:4e:03:58:8c:45:e4:7f:
7f:ad:e2:5b:9e:c6:b6:89:36:dd:e0:eb:a4:4a:dd:
e2:1f:8d:29:4c:02:25:48:06:3a:fe:a9:61:8b:20:
17:84:1d:05:e1:3a:cd:e3:ac:9c:bc:62:e4:b2:01:
07:b6:27:24:b1:03:7b:8d:f2:54:29:25:ae:cb:f7:
df:b2:5f:c4:86:44:64:02:db:5d:4d:4d:45:1e:af:
e5:ff:6d:89:2c:58:d4:9e:1c:ad:a8:a4:2f:b1:d7:
2e:66:39:32:72:4b:c7:a5:fd:0d:dc:be:c8:c5:12:
85:e7:bf:ae:cf:4a:4f:64:0f:83:33:27:f9:39:5e:
7c:99:f5:dd:a8:7d:4a:c6:76:50:c5:1c:40:91:0a:
51:a6:18:30:88:2a:43:c8:aa:ff:57:a7:70:41:8f:
35:50:02:1b:5a:80:3b:e1:94:52:e4:be:bf:27:60:
2e:7d:df:2a:3d:a3:d8:5b:fa:73:e6:1d:10:87:f0:
08:49:7d:b9:02:61:10:34:4a:e0:13:45:18:15:42:
77:c3:46:4e:02:e0:1f:75:c4:e9:13:bd:88:39:27:
65:37:65:d1:be:68:10:21:71:ce:f3:91:10:e7:5b:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C8:69:B9:0B:55:9F:4E:CA:1D:8A:2E:FF:AD:11:7A:16:CA:B0:86
X509v3 Authority Key Identifier:
keyid:18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:33:18:24:8c:5d:b6:e0:0e:3d:db:c1:5a:c5:45:c4:37:e8:
0c:b8:47:cc:d9:3b:97:9b:68:5f:75:70:00:8e:7f:18:5e:ef:
bc:16:84:fa:e1:0d:7d:30:73:0d:c3:d5:2e:a6:30:56:14:cd:
eb:75:17:ae:78:ab:9a:87:d6:06:96:e8:e5:22:39:db:93:12:
c7:29:82:59:b8:4d:d6:32:a1:93:aa:ca:1d:91:10:12:bf:b1:
bf:d0:62:6b:f8:c2:5c:1c:57:f1:8c:1b:d6:fe:b3:32:92:03:
dc:85:26:92:19:d2:7b:34:37:eb:2d:ef:b9:48:14:17:6d:8a:
da:63:57:2e:76:bc:73:ca:c2:4d:86:45:0b:86:ef:a6:af:23:
2e:67:4b:53:68:be:60:93:ed:b8:dc:64:5d:6c:e0:a5:f4:db:
2b:7a:55:50:a3:64:cb:6d:02:5b:15:25:70:10:0b:01:6e:11:
b7:7d:9e:44:47:c4:b0:62:c3:38:19:7a:26:16:c7:e6:60:44:
54:e3:cd:ec:72:ef:d0:bd:24:6c:0e:f3:bf:42:a4:99:75:7a:
f5:7f:69:9a:38:1d:47:23:e9:6a:fe:d9:70:40:57:f4:7d:50:
f3:ee:8c:7e:19:ab:5e:6f:3d:89:8e:78:b8:97:1b:26:eb:64:
ab:15:a6:a0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NkJERTExMC8GA1UEBRMoMTg5OUFBNjQxNTY3MDUzMzIyNDkzOEZBQTY2NTUyOTYx
ODNFNDM4RjAeFw0yNjA1MTEwODI0MjRaFw0yNjA1MTgwODI0MjRaMBgxFjAUBgNV
BAMTDTZhMDE5MjM4LTRlMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4MzG2YO3YCsT5ol3n7LRsZtAR+JxpTgNYjEXkf3+t4luexraJNt3g66RK3eIf
jSlMAiVIBjr+qWGLIBeEHQXhOs3jrJy8YuSyAQe2JySxA3uN8lQpJa7L99+yX8SG
RGQC211NTUUer+X/bYksWNSeHK2opC+x1y5mOTJyS8el/Q3cvsjFEoXnv67PSk9k
D4MzJ/k5XnyZ9d2ofUrGdlDFHECRClGmGDCIKkPIqv9Xp3BBjzVQAhtagDvhlFLk
vr8nYC593yo9o9hb+nPmHRCH8AhJfbkCYRA0SuATRRgVQnfDRk4C4B91xOkTvYg5
J2U3ZdG+aBAhcc7zkRDnW8jTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUechpuQtV
n07KHYou/60RehbKsIYwHwYDVR0jBBgwFoAUGJmqZBVnBTMiSTj6pmVSlhg+Q48w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QkRFLzM5QkMwNDk4RDNG
QzExRjBBNzBENjQzMkM0RjlBRTAyL0dKbXFaQlZuQlRNaVNUajZwbVZTbGhnLVE0
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR0ptcVpCVm5CVE1pU1RqNnBtVlNsaGctUTQ4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2
QkRFLzM5QkMwNDk4RDNGQzExRjBBNzBENjQzMkM0RjlBRTAyL0dKbXFaQlZuQlRN
aVNUajZwbVZTbGhnLVE0OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC7MxgkjF224A4928FaxUXEN+gMuEfM2TuXm2hfdXAAjn8YXu+8FoT64Q19MHMN
w9UupjBWFM3rdReueKuah9YGlujlIjnbkxLHKYJZuE3WMqGTqsodkRASv7G/0GJr
+MJcHFfxjBvW/rMykgPchSaSGdJ7NDfrLe+5SBQXbYraY1cudrxzysJNhkULhu+m
ryMuZ0tTaL5gk+243GRdbOCl9NsrelVQo2TLbQJbFSVwEAsBbhG3fZ5ER8SwYsM4
GXomFsfmYERU483scu/QvSRsDvO/QqSZdXr1f2maOB1HI+lq/tlwQFf0fVDz7ox+
Gatebz2Jjni4lxsm62SrFaag
-----END CERTIFICATE-----
Generated at Wed May 13 07:12:37 2026 by rpki-client