
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
File: GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json)
Hash identifier: WSk149d0F3PEwjzC0FufkkAo6QqG90ODyfblphCJL5A=
Subject key identifier: F5:AA:FD:45:2D:0D:BB:B5:33:49:A7:7A:9F:27:BB:58:AB:CF:B8:C0
Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE
Certificate issuer: /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
Manifest number: 011B
Signing time: Thu 23 Jul 2026 07:34:00 +0000
Manifest this update: Thu 23 Jul 2026 07:34:00 +0000
Manifest next update: Thu 30 Jul 2026 07:34:00 +0000
Files and hashes: 1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: zARZbd6aaRMAkSgmpktCQ510VnelHUcGC0i+WpWrifk=)
2: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: n/hyIjFqCJzOht5Ju7CI7zedjM3U4KBE15I93wtTvdI=)
3: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: vmkU+Wc2xpDQMgPam/mAe6kA8brCuJz9cHHqu3MmaNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl
rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128576, serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
Validity
Not Before: Jul 23 07:34:00 2026 GMT
Not After : Jul 30 07:34:00 2026 GMT
Subject: CN=6a61c3e8-4e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:27:4f:78:4d:e1:ac:d4:ad:60:cd:50:6a:
90:6e:f5:86:f8:e3:5b:a1:80:7b:c4:b4:be:92:97:
1b:a4:49:ba:93:f2:83:e3:f8:b0:79:b0:b8:ae:e3:
e0:10:8b:2f:f3:87:9a:f4:e2:84:7a:ac:e0:89:4c:
5e:db:95:06:3d:30:d3:97:6f:6f:fd:68:ae:3a:e6:
14:ae:3d:e3:be:8a:78:bb:77:e0:5f:20:56:68:7b:
4f:d9:f3:c8:44:d1:3e:eb:9e:42:f6:b9:75:ae:a2:
c0:10:af:ca:0d:e1:43:1a:ae:be:44:0b:36:16:f5:
eb:14:f3:a2:0d:06:4d:ac:34:d9:78:87:31:cb:18:
6c:22:dd:09:f4:5d:e9:9f:9a:4b:b0:29:e4:35:9d:
24:ed:40:c1:da:79:ea:41:70:3a:2f:4a:e1:fd:26:
87:3c:98:37:18:0d:72:69:28:d9:eb:64:3e:f1:38:
a6:19:e7:f5:0e:84:4b:4d:33:86:91:ec:a2:8f:b2:
d7:8f:77:d4:f4:81:2a:35:aa:46:e1:18:c1:f1:df:
b5:4f:5c:30:15:4d:4b:c9:12:ac:1e:a0:d2:ff:9d:
e6:50:9c:8d:f3:55:c4:1c:a8:93:7d:79:f5:ad:57:
ca:a3:2c:e4:d9:b6:26:33:7b:72:d4:f6:2e:9e:fe:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AA:FD:45:2D:0D:BB:B5:33:49:A7:7A:9F:27:BB:58:AB:CF:B8:C0
X509v3 Authority Key Identifier:
keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:6c:5f:74:4f:1e:20:29:5b:48:6a:7c:05:ad:e6:55:40:0c:
b8:c9:7e:79:2c:be:0b:53:02:d6:8d:22:ae:2d:b1:20:07:f0:
6b:09:54:0e:ab:37:17:a2:4b:14:7c:5c:48:b7:8a:01:b1:14:
ef:a8:46:a5:63:74:4e:67:43:f3:3b:6d:2d:d0:d0:42:49:e1:
0b:7a:c1:db:25:22:c2:c6:d4:c6:8b:65:be:35:b8:b3:b5:06:
c3:41:f4:65:c5:0b:8f:b6:2c:82:8c:6c:05:7b:92:b5:b9:4c:
50:95:11:70:29:6d:03:21:e9:f8:7b:06:1f:8e:e0:62:37:57:
3f:85:88:44:57:ff:e9:27:2f:7d:25:53:ad:b5:e6:09:fe:22:
06:77:76:5a:e0:5e:81:94:6b:5c:19:26:ca:a6:9b:b8:d8:73:
ca:de:81:16:39:d4:af:e7:fe:2d:ab:be:75:20:94:2f:ec:f0:
d3:71:03:06:c5:fb:ef:f0:b7:46:94:d4:ec:78:92:10:6e:2d:
45:0d:5f:3a:82:c2:32:89:af:98:27:f1:3b:09:7f:cb:56:12:
45:d5:1f:38:83:b4:da:ff:aa:dc:6d:78:95:72:b8:d5:67:1d:
51:98:2b:6d:df:17:7b:68:41:9e:1c:67:3f:e2:e2:18:d6:95:
f6:fc:54:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:08 2026 by rpki-client