
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json)
Hash identifier: d/lpahTvDU0lYpXuRe4G+n8cvsDhEo4BKQjTrKI/+bw=
Subject key identifier: 4E:47:45:EA:C7:51:E4:9B:03:92:0E:1A:94:C3:F7:48:52:5C:4B:9F
Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Certificate serial: 0713
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
Manifest number: 070B
Signing time: Tue 22 Sep 2026 21:50:19 +0000
Manifest this update: Tue 22 Sep 2026 21:50:19 +0000
Manifest next update: Tue 29 Sep 2026 21:50:19 +0000
Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: e5wND+G1otFL2NnE9H+kirPvZOnz9OesV13YN1TUG4M=)
2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: M577gprOgopViMBlM2br8rPqwyVug+teBZ5+ccpEPA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1811 (0x713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Validity
Not Before: Sep 22 21:50:19 2026 GMT
Not After : Sep 29 21:50:19 2026 GMT
Subject: CN=6ab2f81b-bcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:2e:7e:d5:e3:a6:30:d0:eb:ce:40:d5:02:
44:92:e7:df:d0:95:e4:5f:91:bc:06:f1:da:8a:da:
90:2c:a4:2a:d6:6e:12:d1:31:3c:83:e4:60:e3:4c:
3c:6c:9f:b7:7c:7f:e8:df:02:d9:9e:2b:9b:da:46:
3e:58:4a:90:a6:f4:d3:f5:82:3a:8e:56:7f:8b:a8:
1a:45:48:ab:47:c7:e4:b8:d4:eb:b2:f5:0b:87:b1:
53:fd:f8:02:cd:3c:54:88:a1:13:19:e2:02:bb:a1:
c1:d7:80:89:04:c8:e9:3e:8f:3f:b8:6e:b8:83:87:
bb:98:10:78:eb:cc:8c:30:10:aa:75:e9:ea:f4:a0:
a3:a8:2f:67:e7:1e:bc:c0:14:79:db:36:94:36:a3:
cd:41:59:0d:82:1b:9d:c0:fd:59:69:f9:57:83:21:
52:68:04:17:30:a3:2b:60:b9:57:4c:d2:78:99:79:
d4:ae:3c:71:95:23:60:f9:0c:6e:b2:1a:28:16:ca:
d3:e5:a5:47:86:91:24:89:a6:32:93:d1:d9:40:db:
0e:cd:b8:15:83:82:03:b5:2d:f4:a6:e9:b2:c1:81:
94:04:7d:09:2a:d4:fa:13:b5:b0:2e:65:46:4b:70:
3c:15:d9:71:74:0e:14:ca:a6:be:f5:48:26:1c:1a:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:47:45:EA:C7:51:E4:9B:03:92:0E:1A:94:C3:F7:48:52:5C:4B:9F
X509v3 Authority Key Identifier:
keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:b3:8f:b1:c0:a9:ef:0f:f1:50:f5:9c:25:3b:4d:34:49:2d:
26:11:a4:09:f8:d0:f7:95:48:40:8a:31:8b:ce:1f:db:8c:78:
ae:19:a8:77:0c:26:e2:5b:ed:d0:b9:c4:78:6c:c7:b5:65:5d:
78:1c:9c:a8:dc:db:97:68:6b:15:24:33:39:bc:c6:ea:79:92:
5e:2a:68:21:92:c9:bb:98:9b:dd:12:b3:c7:af:2a:52:27:ab:
27:14:18:3a:32:6b:52:62:05:94:7c:56:ee:ec:f0:7d:13:b4:
b6:58:cd:aa:1c:75:fc:ff:b1:3d:08:cd:11:07:fe:8c:82:b1:
b8:32:c1:12:08:63:16:4d:06:5a:99:35:b3:eb:da:fb:d1:ed:
44:c9:1f:db:2c:06:a8:45:2d:db:c2:ce:ac:b4:8b:fd:3d:6d:
72:1b:f8:5c:dd:8c:13:7f:87:d8:25:e2:58:2c:60:6a:57:e6:
82:39:0a:f1:7c:7a:f0:19:cc:00:8d:02:b6:75:53:db:25:3c:
4f:f2:eb:9b:75:a6:ba:92:ee:89:d5:b8:27:a8:1b:df:e2:b5:
08:8b:c6:b3:21:ea:2d:6c:52:64:23:bc:1b:b6:09:05:76:ba:
56:46:39:aa:16:01:22:e9:e2:90:26:7f:9e:e5:75:60:54:63:
c7:1b:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:14:42 2026 by rpki-client