
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
File: GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json)
Hash identifier: vVKA28Msgq8xztgkFM7FKq443I8PJCJrN4IDPvUYvRM=
Subject key identifier: 69:15:64:AE:32:BE:A6:D5:2A:58:8E:5C:F9:82:92:39:A7:4A:F0:D5
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
Manifest number: 78
Signing time: Wed 25 Mar 2026 07:03:44 +0000
Manifest this update: Wed 25 Mar 2026 07:03:43 +0000
Manifest next update: Wed 01 Apr 2026 07:03:43 +0000
Files and hashes: 1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: Q9g7+1ZLCwXs68JdH+3nsh969g4aFNYgnQqdCRjVyvU=)
2: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: FRx1ILrXRk/D6NM37DgKlOP8QzRDUYGOaHdxxmU119o=)
3: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: RJ2sx6p2KIpfuzWkhVi9i2Tb6z+LWx+fgMZmXi47440=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Validity
Not Before: Mar 25 07:03:43 2026 GMT
Not After : Apr 1 07:03:43 2026 GMT
Subject: CN=69c388d0-c086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:db:f0:b6:a1:4f:9f:c6:0a:06:18:a6:5f:
33:69:9d:f8:9d:4a:0b:86:7e:33:94:6e:76:8b:e1:
a4:8f:87:f5:7b:54:04:46:94:fa:c3:92:55:db:a3:
5e:58:20:89:73:67:18:ef:66:8a:49:b5:31:5b:8d:
12:dd:c8:47:6f:d4:0e:e8:0c:10:d8:a8:7b:91:6a:
52:4b:9c:9e:0b:d5:23:45:ae:68:35:9f:b7:cd:8f:
54:e4:5b:19:24:61:21:71:18:bf:d3:a1:d7:0d:ff:
25:85:21:6c:fb:b2:d1:a8:2b:3a:ca:00:e5:68:2a:
f1:bd:67:16:ec:6b:af:9b:22:73:aa:b6:9b:f8:a5:
b7:48:a1:53:36:b9:a0:b8:4c:a6:18:70:9d:b0:a0:
e0:01:36:fa:57:9b:6c:ad:9b:48:dc:a0:82:f0:cc:
4e:fd:75:eb:80:6e:5d:39:49:9f:f7:22:bb:69:85:
68:cd:47:9e:25:cb:bf:bb:fd:1a:57:8e:9a:4d:cb:
59:3e:0a:99:16:ed:d7:5a:84:00:dd:d3:86:ad:04:
ed:e6:ec:8b:3b:b9:03:17:d8:9f:b4:12:ed:0b:26:
ce:da:cb:fa:af:ef:c0:01:a1:2d:1b:8c:a3:71:d6:
46:f6:2c:c1:60:80:fe:a7:e5:50:55:ba:c1:05:37:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:64:AE:32:BE:A6:D5:2A:58:8E:5C:F9:82:92:39:A7:4A:F0:D5
X509v3 Authority Key Identifier:
keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:15:b4:e7:e8:e9:09:94:65:a0:37:ca:db:3d:cb:a7:ec:7c:
a4:99:a5:36:12:63:57:09:80:11:44:f5:b4:32:74:7f:ca:d4:
7a:78:64:f3:17:91:42:41:09:d8:fa:7a:05:d9:0c:47:bd:0a:
05:77:4a:a1:e2:f2:f1:5d:18:76:cc:d0:f4:02:5c:cb:44:c8:
63:3c:22:43:ba:05:33:1f:b0:3e:83:ce:d9:7d:19:ed:79:7f:
2d:e3:db:01:38:46:3b:dc:ff:13:12:8b:5b:91:e3:2b:e0:6e:
d1:c6:1c:9c:4e:17:f1:29:aa:46:bd:da:1a:64:89:8c:62:da:
43:e9:a4:db:5b:9a:2e:e0:4f:7a:ff:31:e1:40:75:4a:85:67:
b2:6a:0f:85:06:ce:10:91:c9:73:f2:be:91:fd:10:fb:b4:97:
51:4d:c0:b1:ad:12:1c:8d:de:81:92:a3:de:5e:2a:d3:96:16:
4a:d8:21:46:bf:73:3e:f4:a3:73:36:31:00:8b:dc:be:d5:84:
ab:18:34:e6:12:d4:5b:ef:3f:07:73:7e:54:93:9d:f3:90:42:
02:81:c0:95:10:42:e2:36:8b:ec:90:0e:51:3f:28:33:ee:38:
2c:70:1c:dd:ea:be:59:ec:cb:d8:68:35:83:a7:5f:ea:4d:0e:
04:ee:3d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:20 2026 by rpki-client