
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json)
Hash identifier: BZivZNopJY8We4iHd3rCwL7bhvpSzl8ilGdtlWSe1Ug=
Subject key identifier: 9F:6D:F1:C4:74:BB:A4:86:43:67:BF:22:17:E0:9E:61:11:33:7E:4A
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial: 0244
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
Manifest number: 0238
Signing time: Thu 23 Jul 2026 03:53:05 +0000
Manifest this update: Thu 23 Jul 2026 03:53:04 +0000
Manifest next update: Thu 30 Jul 2026 03:53:04 +0000
Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: PN3k0/vxxpPRPNnDTfGdeooyiwbXluZiwreMK7mEej8=)
2: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: ZKyMMeDidw2RZBoa1Uac9hxWkhYX6qMAN6CuYcH5VgI=)
3: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: wfqgmiYwhfm3vauQpeYyEZQnrqn5J3zQJQ5nfR04nk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Validity
Not Before: Jul 23 03:53:04 2026 GMT
Not After : Jul 30 03:53:04 2026 GMT
Subject: CN=6a619020-be89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bb:dd:9a:f3:ce:65:e6:67:4c:61:a3:32:69:
c5:08:41:88:10:18:45:1a:54:e5:e2:1e:90:bd:ef:
cb:1d:20:57:ee:4d:18:e7:c8:ac:b9:33:21:cc:32:
97:6c:27:ec:9f:17:75:ea:0e:d1:2f:00:1b:f8:e8:
63:f1:d8:8f:a1:5e:eb:1f:0f:b8:2b:6a:25:a2:8f:
0b:9c:8b:13:9a:42:c9:d3:b6:d9:09:9d:98:76:c5:
2e:2f:d5:75:20:30:cb:e3:57:a7:2d:c8:27:d6:92:
92:af:4a:b7:a7:04:4c:41:fd:4f:5c:eb:05:57:d0:
1c:d0:81:79:3b:6c:ff:98:e6:7e:69:b4:f3:f7:5d:
cb:40:1a:46:cb:d9:96:e7:ce:02:bb:2e:d7:67:ec:
37:10:91:62:a4:18:0e:69:0c:08:d8:39:b2:4b:48:
74:41:48:1c:fb:0f:17:aa:42:c7:15:1a:1a:37:7e:
1f:06:6a:5e:d9:2c:14:17:69:14:bf:ab:25:10:8f:
87:6e:e6:ac:dd:be:b7:0e:d2:95:f1:f7:8c:67:5f:
3b:00:09:9b:e0:b6:12:18:73:9e:3b:6d:28:c0:23:
d8:6b:5d:bd:91:79:02:26:c8:50:01:f2:90:58:83:
7b:b0:05:d7:a0:ca:22:18:08:a2:ca:f7:47:25:56:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6D:F1:C4:74:BB:A4:86:43:67:BF:22:17:E0:9E:61:11:33:7E:4A
X509v3 Authority Key Identifier:
keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ed:c1:5d:5f:b8:7b:fb:0b:8e:48:af:b6:74:cc:08:55:85:
4b:3e:af:06:d6:61:b1:28:84:40:16:b2:91:15:84:e7:fa:49:
76:06:04:85:2f:cd:0b:ad:e7:0e:aa:5e:08:2f:65:4b:96:df:
7e:e6:a7:bb:7c:83:f2:db:0d:ea:a5:42:e4:70:e1:18:03:b1:
f2:22:cf:2e:4b:c3:c5:f5:d4:d7:73:6c:47:e8:af:14:12:62:
56:d8:61:2c:c1:3b:98:1f:1d:5f:9f:a2:20:93:99:fe:5b:2d:
90:0f:15:b2:3c:f6:51:57:1c:46:07:37:42:3a:2a:8d:d0:2c:
9a:01:d2:bd:94:35:44:15:7a:ae:ea:4e:cf:9e:bb:20:bf:b9:
61:31:f7:1b:aa:e6:71:e1:45:ef:b1:69:2d:36:b0:e9:4b:b5:
fc:55:90:7d:b9:25:6a:1c:a3:54:18:96:58:a9:fe:9c:5a:d5:
d5:7e:ba:fd:c7:f8:ad:12:35:c1:17:8b:2a:43:30:ba:76:14:
72:c8:9a:85:d4:4c:53:a2:ba:12:de:88:3b:92:de:ef:94:10:
b3:14:8f:15:9c:2e:b6:ed:dc:b7:e9:37:00:0d:fa:e2:76:4f:
7c:92:86:1d:6f:0a:55:9a:74:cb:3f:49:da:14:be:c1:be:e5:
25:dd:3c:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdCRjExMTAvBgNVBAUTKDgwOUYwM0YzRDE1Mzc3OTY0ODUyMDkxMjk5RkFGOERC
Q0MyNzQ3N0MwHhcNMjYwNzIzMDM1MzA0WhcNMjYwNzMwMDM1MzA0WjAYMRYwFAYD
VQQDEw02YTYxOTAyMC1iZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA47vdmvPOZeZnTGGjMmnFCEGIEBhFGlTl4h6Qve/LHSBX7k0Y58isuTMhzDKX
bCfsnxd16g7RLwAb+Ohj8diPoV7rHw+4K2oloo8LnIsTmkLJ07bZCZ2YdsUuL9V1
IDDL41enLcgn1pKSr0q3pwRMQf1PXOsFV9Ac0IF5O2z/mOZ+abTz913LQBpGy9mW
584Cuy7XZ+w3EJFipBgOaQwI2DmyS0h0QUgc+w8XqkLHFRoaN34fBmpe2SwUF2kU
v6slEI+Hbuas3b63DtKV8feMZ187AAmb4LYSGHOeO20owCPYa129kXkCJshQAfKQ
WIN7sAXXoMoiGAiiyvdHJVZl5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9t8cR0
u6SGQ2e/IhfgnmERM35KMB8GA1UdIwQYMBaAFICfA/PRU3eWSFIJEpn6+NvMJ0d8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0JGMS8zMEQ0ODYzNDMx
NEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1WklVZ2tTbWZyNDI4d25S
M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dKOEQ4OUZUZDVaSVVna1NtZnI0Mjh3blIzdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0JGMS8zMEQ0ODYzNDMxNEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1
WklVZ2tTbWZyNDI4d25SM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAju3BXV+4e/sLjkivtnTMCFWFSz6vBtZhsSiEQBaykRWE5/pJdgYEhS/NC63n
DqpeCC9lS5bffuanu3yD8tsN6qVC5HDhGAOx8iLPLkvDxfXU13NsR+ivFBJiVthh
LME7mB8dX5+iIJOZ/lstkA8Vsjz2UVccRgc3QjoqjdAsmgHSvZQ1RBV6rupOz567
IL+5YTH3G6rmceFF77FpLTaw6Uu1/FWQfbklahyjVBiWWKn+nFrV1X66/cf4rRI1
wReLKkMwunYUcsiahdRMU6K6Et6IO5Le75QQsxSPFZwutu3ct+k3AA364nZPfJKG
HW8KVZp0yz9J2hS+wb7lJd086g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:46:42 2026 by rpki-client