
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json)
Hash identifier: VyRAwmxj6P4C9yS5HKvITMJSAMIrAGZSipC1TeeXh4M=
Subject key identifier: 65:1F:D4:9C:B0:48:11:A9:B9:B6:2A:BD:8D:5B:1D:32:ED:AD:F0:EC
Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Certificate serial: 0CD1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
Manifest number: 0CB4
Signing time: Wed 22 Jul 2026 18:49:49 +0000
Manifest this update: Wed 22 Jul 2026 18:49:48 +0000
Manifest next update: Wed 29 Jul 2026 18:49:48 +0000
Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: 97bv9ynSWaiYL7fZNGadAKdOD8efl/BniuXKbxX5JPw=)
2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: aM0okos6HP2lmuHFZTzsM6czS1dLwWW/PzQ8J/OHsFE=)
3: FE677A947F3611F1AEABD9D88FA30FBC.roa (hash: xXKNP1utbvVSzFEm+p/CVGumail8NouJOePObgsIKAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3281 (0xcd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Validity
Not Before: Jul 22 18:49:48 2026 GMT
Not After : Jul 29 18:49:48 2026 GMT
Subject: CN=6a6110cc-0cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:43:cd:fb:40:ed:fc:06:c1:b3:c2:27:ae:
50:02:d0:2c:8a:25:33:c0:ce:14:e2:d7:9d:18:e7:
5a:85:98:68:ea:0b:36:19:bf:e5:9c:f3:93:1c:41:
14:81:fe:43:de:5c:df:8e:a7:64:3e:47:72:88:7e:
a2:a7:33:98:74:8f:1e:28:5d:1a:fd:88:6a:c9:af:
1e:dc:c3:0f:c1:74:5c:20:b4:b1:a4:db:c0:05:42:
9e:92:e5:3f:ce:0c:f5:ee:0d:f2:1d:2a:29:e6:33:
ff:6d:e9:fd:8a:f8:4c:39:06:73:29:cd:b2:18:00:
1e:14:30:69:ff:d2:e5:b3:37:75:e6:45:25:6d:ba:
13:d6:66:9d:c0:8a:ff:fc:59:b2:e2:e1:4d:fc:72:
79:a6:6f:e5:f8:b9:af:da:81:45:a7:96:67:ae:6f:
b9:8e:b4:01:b7:60:f0:e2:8b:6e:44:0e:56:98:c1:
04:ae:a4:68:ad:d6:2c:cd:b3:6b:d1:19:3a:5d:6c:
ce:f3:08:1d:80:6f:f5:18:dc:f9:0c:d9:38:ad:f1:
d3:1b:d7:c2:78:a1:a8:5d:c6:e0:25:ec:32:2d:b9:
89:a6:10:79:be:d6:6a:10:b6:0a:b5:89:89:28:41:
a9:07:08:47:47:52:43:9a:12:d5:53:cf:d0:23:c4:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1F:D4:9C:B0:48:11:A9:B9:B6:2A:BD:8D:5B:1D:32:ED:AD:F0:EC
X509v3 Authority Key Identifier:
keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5d:49:82:66:e6:af:b7:46:82:9f:ee:17:18:a5:05:50:0f:
77:87:2f:e7:8e:5d:06:f6:6a:cf:b6:80:08:b3:ae:2b:e3:e2:
ce:ba:b5:7f:3a:ac:53:76:96:3e:da:c2:be:00:1b:b7:48:ce:
de:94:0e:63:31:59:6e:70:08:66:b8:8c:8f:7b:b5:c0:1a:32:
bf:a0:17:4e:27:20:12:3d:98:01:54:e2:98:a5:fa:b4:0f:ec:
46:b4:48:90:41:ce:07:67:20:45:d6:c9:87:cb:58:ae:da:dc:
17:db:90:9e:d6:27:b3:50:4f:53:13:b8:62:d4:28:b1:06:ed:
6c:77:05:cd:64:b2:42:d9:b7:85:a9:5a:51:75:cf:8f:81:6d:
d2:a9:53:3c:31:6d:b4:50:b4:a5:1f:ba:1c:cb:b4:e3:dd:db:
82:01:8b:fa:f7:49:e0:31:2f:00:c4:f2:96:46:70:b4:38:0c:
56:00:2d:bd:c0:3c:63:67:f1:8c:04:91:d8:ca:48:ca:4f:da:
e3:54:e3:b3:95:64:d3:93:14:33:a7:76:a8:6b:38:fa:e8:d0:
16:52:78:cc:f1:83:6c:52:ad:43:7f:3d:33:5c:dc:e2:f5:5b:
0b:58:38:00:c3:e2:6a:23:e2:7b:03:e6:3e:35:1b:b1:2a:02:
59:a6:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:24 2026 by rpki-client