
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json)
Hash identifier: dhV1AuekWkXn8hCPLZDJqdszeiDOTIQtMeCn5eHSiwI=
Subject key identifier: 75:7F:2E:EE:C1:B0:61:59:09:8F:10:51:0A:76:C9:4E:82:2C:53:C1
Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41
Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41
Certificate serial: 0BEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
Manifest number: 0BD3
Signing time: Tue 12 May 2026 19:03:04 +0000
Manifest this update: Tue 12 May 2026 19:03:04 +0000
Manifest next update: Tue 19 May 2026 19:03:04 +0000
Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: kjXzrV0E2CTJvKRfXb8yKCUnFTK2UNaiAfmbS67A+MA=)
2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: 6cuRYkKrSNBuAIRhtyOQTmq+Tuxf6pFsDwJm5X0jf/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl
rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3050 (0xbea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41
Validity
Not Before: May 12 19:03:04 2026 GMT
Not After : May 19 19:03:04 2026 GMT
Subject: CN=6a037968-b327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:93:d3:af:48:91:47:1d:9f:2a:2f:c3:c7:
3d:c4:ca:15:6f:e5:bc:4a:55:3c:a4:da:0d:e9:fe:
97:eb:b3:e1:a1:4d:4b:51:ae:63:c9:ac:58:40:c0:
5b:7c:e4:3e:3b:52:f1:32:02:97:17:79:78:a4:ed:
fd:e0:37:a8:b6:ed:bc:81:3f:5b:f7:b7:4d:3f:18:
ad:2f:80:2b:82:01:db:3a:ef:4b:11:c2:2f:81:90:
e7:b9:de:d7:a4:c6:0b:0d:93:23:a1:19:bd:97:cd:
7a:fb:ab:60:5d:ab:8a:04:fc:c1:68:6f:51:40:ee:
88:d0:8f:5f:4d:43:5c:a2:b1:bb:3a:bb:26:1f:43:
a1:bd:42:3f:99:78:c5:9b:b8:77:4c:51:65:9a:b1:
8e:eb:7e:34:58:bb:aa:22:61:2b:b8:d0:b9:72:15:
65:58:2a:68:88:d0:18:a3:e4:dc:d5:48:14:f5:a6:
8b:ec:d1:08:7e:f7:5e:3c:d9:ec:de:c3:75:b1:68:
b1:43:8f:6a:45:13:db:31:3c:3d:e1:dc:5b:a0:57:
b8:29:3a:54:c8:74:45:ae:cf:78:96:36:7d:02:30:
64:17:85:ac:16:b9:90:f3:c2:2d:61:b9:e4:95:93:
9b:31:da:5b:cc:94:99:69:79:4b:65:6b:aa:63:48:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7F:2E:EE:C1:B0:61:59:09:8F:10:51:0A:76:C9:4E:82:2C:53:C1
X509v3 Authority Key Identifier:
keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:52:da:6a:67:c4:a9:4c:14:8b:68:55:5c:99:c2:94:90:51:
7d:77:ef:3c:f7:a8:39:f1:b3:e0:cd:5c:bf:d1:89:96:9e:14:
d0:c3:bc:60:f7:da:2b:d4:df:db:d6:69:0b:ee:94:7c:d8:38:
9b:e8:ce:b8:bf:a2:78:6c:f9:91:68:0b:8d:0f:2f:29:8d:c1:
97:6f:c4:23:6a:64:c9:b3:d7:a9:90:d9:47:e3:9d:35:9e:5f:
2d:96:ce:83:ca:2f:e7:83:26:4e:9e:01:55:27:af:df:c1:59:
c5:70:fe:10:d8:8a:c3:62:a8:d6:83:78:d4:96:1e:9e:6e:4a:
e2:2b:89:7f:07:6e:ab:7b:50:a9:24:64:79:35:15:3f:c1:02:
c4:75:5e:e2:cf:d9:a2:2a:74:e2:44:14:9a:3c:5d:ec:7d:79:
9e:b7:3b:39:32:f2:da:2a:72:69:29:12:43:38:39:23:fc:4d:
c3:1c:f2:1f:e4:61:a1:4f:ad:32:30:bf:c5:1b:75:9b:7e:07:
00:67:92:66:46:15:dd:45:fa:00:9b:5b:bb:ab:a2:c4:8e:e9:
8b:a2:01:df:d4:98:9f:89:58:60:80:89:7f:3f:f1:83:03:43:
60:97:4b:c3:eb:6d:1f:0a:87:6c:35:4f:3c:db:58:97:d3:24:
64:04:46:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5
QzAwMkRFNDEwHhcNMjYwNTEyMTkwMzA0WhcNMjYwNTE5MTkwMzA0WjAYMRYwFAYD
VQQDEw02YTAzNzk2OC1iMzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0A2T069IkUcdnyovw8c9xMoVb+W8SlU8pNoN6f6X67PhoU1LUa5jyaxYQMBb
fOQ+O1LxMgKXF3l4pO394Deotu28gT9b97dNPxitL4ArggHbOu9LEcIvgZDnud7X
pMYLDZMjoRm9l816+6tgXauKBPzBaG9RQO6I0I9fTUNcorG7OrsmH0OhvUI/mXjF
m7h3TFFlmrGO6340WLuqImEruNC5chVlWCpoiNAYo+Tc1UgU9aaL7NEIfvdePNns
3sN1sWixQ49qRRPbMTw94dxboFe4KTpUyHRFrs94ljZ9AjBkF4WsFrmQ88ItYbnk
lZObMdpbzJSZaXlLZWuqY0h01QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHV/Lu7B
sGFZCY8QUQp2yU6CLFPBMB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy
QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz
a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2
aG9JN2FmUTNZazZjQUMza0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk1LaamfEqUwUi2hVXJnClJBRfXfvPPeoOfGz4M1cv9GJlp4U0MO8YPfaK9Tf
29ZpC+6UfNg4m+jOuL+ieGz5kWgLjQ8vKY3Bl2/EI2pkybPXqZDZR+OdNZ5fLZbO
g8ov54MmTp4BVSev38FZxXD+ENiKw2Ko1oN41JYenm5K4iuJfwduq3tQqSRkeTUV
P8ECxHVe4s/Zoip04kQUmjxd7H15nrc7OTLy2ipyaSkSQzg5I/xNwxzyH+RhoU+t
MjC/xRt1m34HAGeSZkYV3UX6AJtbu6uixI7pi6IB39SYn4lYYICJfz/xgwNDYJdL
w+ttHwqHbDVPPNtYl9MkZARGpw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:36:10 2026 by rpki-client