
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
File: GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json)
Hash identifier: 0gpBaNYaWes8IPicjlkJKimiBKjxF3YaIBqchuMweY4=
Subject key identifier: 63:39:3F:0F:68:4F:AD:2C:3A:D8:B0:27:E0:ED:5D:51:6D:A0:C2:76
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
Manifest number: D5
Signing time: Fri 25 Sep 2026 06:49:28 +0000
Manifest this update: Fri 25 Sep 2026 06:49:28 +0000
Manifest next update: Fri 02 Oct 2026 06:49:28 +0000
Files and hashes: 1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: 4U3n1GtZib2acEY8TtsgMt1tjvqH/pzN7d5ip7Pp3Ik=)
2: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: RJ2sx6p2KIpfuzWkhVi9i2Tb6z+LWx+fgMZmXi47440=)
3: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: FRx1ILrXRk/D6NM37DgKlOP8QzRDUYGOaHdxxmU119o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Validity
Not Before: Sep 25 06:49:28 2026 GMT
Not After : Oct 2 06:49:28 2026 GMT
Subject: CN=6ab61978-8335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2e:2e:58:63:66:7c:3e:58:94:c8:bc:7c:56:
c5:a4:9b:20:0a:4a:85:ba:54:06:85:42:9e:81:ac:
f4:9c:e5:2c:73:0d:e4:e1:e5:5a:56:ee:7a:70:09:
7c:60:60:f3:94:1b:6a:68:1f:dc:f4:0d:90:dd:d9:
b2:4a:69:7c:e9:84:a8:fd:71:64:7d:84:26:6e:e9:
3c:25:57:6a:c8:bc:f4:88:be:06:da:11:2a:41:68:
60:ce:8b:aa:96:6e:b0:9a:ff:e5:17:e3:d5:1c:56:
38:fd:ce:cc:e9:f3:17:68:c8:35:04:37:7f:9a:fc:
36:b7:85:bc:69:b0:ec:6d:9d:56:00:5e:c9:e5:19:
34:e0:25:02:8f:83:a9:51:2b:13:55:cf:9c:6f:1e:
72:1b:eb:54:0e:1b:b6:cb:fa:cc:b5:14:91:94:3a:
f5:bb:7d:88:23:cf:03:49:d1:d3:62:ce:b2:bd:3b:
4a:9e:ee:a8:6c:d6:f1:d5:28:d9:87:a6:f9:1f:a9:
f6:b8:b7:59:f9:bb:a5:f1:ba:f4:a1:e8:2e:af:5f:
da:f4:82:b6:f3:00:d2:42:05:47:01:cb:d2:8a:f5:
8a:69:9b:bb:0d:06:8b:96:a1:57:97:35:c1:21:2e:
f2:7d:f7:d3:c7:81:f4:57:a2:c0:ba:13:51:a3:e4:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:39:3F:0F:68:4F:AD:2C:3A:D8:B0:27:E0:ED:5D:51:6D:A0:C2:76
X509v3 Authority Key Identifier:
keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:22:3f:fa:d0:af:aa:8e:f4:c3:ab:c7:f2:64:85:e7:74:97:
3b:00:8e:16:2c:1e:0f:51:7b:4c:7c:97:5d:8f:a2:2c:d6:cf:
4d:d3:14:13:8e:48:b3:a2:4e:2a:d5:1d:e2:52:b3:c9:12:1f:
28:57:1e:48:2e:22:f1:4e:b2:97:df:21:84:ea:ba:08:61:23:
a9:5c:0f:59:14:43:90:fb:29:4d:5d:67:14:02:30:8d:ea:f1:
6d:5e:c4:ce:ca:c2:19:c0:43:aa:ff:ce:f6:f8:02:7e:b5:d5:
7b:5b:73:3e:11:6b:b8:8f:e1:81:b9:17:cf:9d:70:0f:97:e2:
0a:1b:9d:f6:00:2c:09:a9:6e:0a:54:2a:fb:5d:74:4a:c9:47:
3d:da:97:38:b8:2a:d9:bd:0b:f2:1d:8a:ef:0a:3a:dd:21:5b:
b3:70:1e:67:01:3a:ce:fd:94:7a:8b:2d:45:dc:15:1e:ff:14:
43:79:9b:fe:c1:3e:19:03:e9:44:fa:e8:82:77:ca:e5:a4:69:
05:22:95:90:ed:d7:7c:1d:7d:12:0d:2e:e2:03:96:a0:0a:6a:
17:34:ad:52:f7:36:e7:5a:e6:73:15:0a:aa:74:54:cc:0f:69:
58:e7:a2:2a:80:3c:18:06:42:8a:d5:59:e4:de:12:28:03:cc:
e6:b4:43:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdENTgxMTAvBgNVBAUTKDE4M0ZBOTBEQzM1NTZDMUQxNjU2OEVCRUJCMThFMkZD
NUE3ODFEOTMwHhcNMjYwOTI1MDY0OTI4WhcNMjYxMDAyMDY0OTI4WjAYMRYwFAYD
VQQDEw02YWI2MTk3OC04MzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7C4uWGNmfD5YlMi8fFbFpJsgCkqFulQGhUKegaz0nOUscw3k4eVaVu56cAl8
YGDzlBtqaB/c9A2Q3dmySml86YSo/XFkfYQmbuk8JVdqyLz0iL4G2hEqQWhgzouq
lm6wmv/lF+PVHFY4/c7M6fMXaMg1BDd/mvw2t4W8abDsbZ1WAF7J5Rk04CUCj4Op
USsTVc+cbx5yG+tUDhu2y/rMtRSRlDr1u32II88DSdHTYs6yvTtKnu6obNbx1SjZ
h6b5H6n2uLdZ+bul8br0oegur1/a9IK28wDSQgVHAcvSivWKaZu7DQaLlqFXlzXB
IS7yfffTx4H0V6LAuhNRo+SdUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGM5Pw9o
T60sOtiwJ+DtXVFtoMJ2MB8GA1UdIwQYMBaAFBg/qQ3DVWwdFlaOvrsY4vxaeB2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0Q1OC81OUQwNkExMjdG
MDYxMUYwOTUyMDU5M0FDNEY5QUUwMi9HRC1wRGNOVmJCMFdWbzYtdXhqaV9GcDRI
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dELXBEY05WYkIwV1ZvNi11eGppX0ZwNEhaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0Q1OC81OUQwNkExMjdGMDYxMUYwOTUyMDU5M0FDNEY5QUUwMi9HRC1wRGNOVmJC
MFdWbzYtdXhqaV9GcDRIWk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlCI/+tCvqo70w6vH8mSF53SXOwCOFiweD1F7THyXXY+iLNbPTdMUE45Is6JO
KtUd4lKzyRIfKFceSC4i8U6yl98hhOq6CGEjqVwPWRRDkPspTV1nFAIwjerxbV7E
zsrCGcBDqv/O9vgCfrXVe1tzPhFruI/hgbkXz51wD5fiChud9gAsCaluClQq+110
SslHPdqXOLgq2b0L8h2K7wo63SFbs3AeZwE6zv2UeostRdwVHv8UQ3mb/sE+GQPp
RPrognfK5aRpBSKVkO3XfB19Eg0u4gOWoApqFzStUvc251rmcxUKqnRUzA9pWOei
KoA8GAZCitVZ5N4SKAPM5rRDLw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:56:41 2026 by rpki-client