
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json)
Hash identifier: JDczCxbCw6pdqv5lsa7iS27oo88zCCBVPpWIKas+CAA=
Subject key identifier: 0F:69:3D:31:93:42:7F:8E:81:31:BC:7B:3C:2B:DC:4D:18:3D:9B:82
Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Certificate serial: 3559
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
Manifest number: 3559
Signing time: Tue 12 May 2026 14:22:25 +0000
Manifest this update: Tue 12 May 2026 14:22:24 +0000
Manifest next update: Tue 19 May 2026 14:22:24 +0000
Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: RutJE2O9SQvjG1CiijCKQoUa5aybyMCYyk89k75D0xM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13657 (0x3559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Validity
Not Before: May 12 14:22:24 2026 GMT
Not After : May 19 14:22:24 2026 GMT
Subject: CN=6a0337a1-9f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:e5:92:f5:c0:f5:38:ce:e5:bc:41:79:c6:
21:cd:84:e0:13:a6:4f:12:b8:21:ec:1f:08:98:b3:
6a:e8:f2:1d:00:8c:2b:5e:be:6c:b6:66:20:93:de:
03:26:b0:f8:de:d9:9c:78:e6:20:81:b2:1e:f7:a8:
b5:07:d5:2d:7f:1d:c9:d4:b3:b8:92:58:d1:68:aa:
34:8f:3e:cb:7c:6c:9b:16:00:8b:60:16:a0:71:8b:
e7:cd:8e:af:3b:36:21:bf:bf:57:e5:14:44:a1:f9:
6f:5f:ed:08:a8:bb:b7:0c:15:78:e6:df:ea:7c:9e:
02:32:d0:4b:68:66:93:ea:f3:1f:d9:a9:7f:44:16:
8c:12:67:ec:30:7b:d1:ce:93:d1:8f:28:e5:db:2f:
d7:c4:55:ce:d3:c5:81:e4:4d:7c:ea:74:f3:a7:8a:
00:21:26:f9:67:c2:5c:7e:8f:f6:b1:1c:dc:c7:a4:
dc:a9:3b:3f:3c:16:8e:f2:80:13:d2:f1:44:b4:78:
42:f7:b5:43:b5:ec:fe:4b:e4:af:4f:cd:15:06:16:
00:e0:01:a9:87:5f:89:d2:1d:08:d1:ef:92:61:3b:
b8:3c:2b:56:e6:de:e9:f6:25:be:94:9a:14:9a:9b:
eb:2a:ff:59:85:dd:7b:7d:6d:33:02:73:6b:91:31:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:69:3D:31:93:42:7F:8E:81:31:BC:7B:3C:2B:DC:4D:18:3D:9B:82
X509v3 Authority Key Identifier:
keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:2f:9a:93:74:39:a4:b4:ab:87:21:e7:f4:de:bf:f3:7c:
13:3b:59:0d:f1:1c:d5:f1:0a:e3:9a:b7:be:8c:6e:41:b4:1b:
df:3f:03:07:41:51:10:8c:0f:0e:05:0f:4e:09:62:1e:6f:9d:
47:4b:61:79:9a:48:f1:59:c1:dd:e7:14:c8:c0:31:d4:dc:90:
01:6a:ab:e6:ec:17:fc:ea:10:f3:19:bf:07:da:41:f9:eb:88:
f1:3f:da:99:5f:26:92:4a:19:9f:21:fa:11:84:da:0d:8a:54:
b4:a4:4f:1f:71:cf:9b:04:1f:02:e8:4b:65:98:af:0c:76:e7:
9a:64:a4:8a:a4:a0:b5:73:dc:80:54:4e:f0:e2:db:61:97:82:
6f:0d:49:f2:50:f4:2a:08:52:81:8d:33:4b:b0:53:d9:e6:88:
1c:5d:cf:66:2d:0b:02:46:42:95:c8:7a:77:55:5e:1a:4e:87:
bb:0f:e3:87:ef:4b:75:48:bc:4e:78:a6:67:e0:bf:87:9d:5f:
58:7e:66:02:a5:c8:e7:79:97:d8:2a:26:47:12:d2:7b:57:2d:
dc:b1:bb:fa:f9:32:71:01:b6:aa:b3:5a:63:ab:73:c6:2a:dc:
1f:18:7d:b1:db:07:28:cf:5b:1c:6b:73:b3:88:c2:6f:a8:05:
a4:54:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:36:19 2026 by rpki-client