
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft
File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json)
Hash identifier: CDy3Svqo6QYxFQqHv2043wHpRbGYtU8AdD4HR8n7dsA=
Subject key identifier: A2:3A:8B:E7:AD:04:71:FE:37:92:D7:2C:63:3E:D1:8D:1D:C1:BD:85
Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67
Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067
Certificate serial: 1292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft
Manifest number: 1284
Signing time: Mon 28 Sep 2026 17:08:56 +0000
Manifest this update: Mon 28 Sep 2026 17:08:56 +0000
Manifest next update: Mon 05 Oct 2026 17:08:56 +0000
Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: 6mCl5iVQPWLGrcU8D5FZkadjje00N3rRatOHcI3k2KA=)
2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: dQ31DGysxuRcz8IXxZUTh7NYyP9e4QqCfC6Tluzrj9A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl
rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 17:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4754 (0x1292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193C85, serialNumber=185FF6647E1E9677501377B5515479B9E9461067
Validity
Not Before: Sep 28 17:08:56 2026 GMT
Not After : Oct 5 17:08:56 2026 GMT
Subject: CN=6aba9f28-5caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:b3:9f:d6:4d:2b:7a:fe:c2:fd:ff:f5:c1:
23:89:32:4f:52:a1:1e:3e:ae:7b:82:9c:13:8f:09:
71:7e:b2:a8:d5:5c:f2:e3:34:68:53:3f:a4:a2:f0:
00:82:73:04:dc:a6:f7:13:81:8d:2a:a8:26:73:7b:
0c:2a:a5:bb:ce:79:f8:67:7e:2b:89:9c:b9:17:10:
af:ac:1d:c8:38:5d:5c:42:06:13:32:73:49:25:85:
c2:b7:ed:ba:f4:33:1e:0e:06:65:d1:35:0f:b3:23:
f8:58:66:6a:b3:23:42:ee:68:54:ac:76:e3:19:29:
fa:bd:ef:b6:8f:f2:f3:26:2b:52:53:ea:a2:73:88:
91:6b:14:a3:3a:ae:f8:f6:ba:c5:f7:98:dd:d2:56:
75:da:be:24:87:4d:aa:a3:95:04:ad:96:11:77:b2:
a7:eb:14:73:79:8e:57:18:3b:46:18:fd:68:08:ad:
81:c0:0b:8d:68:eb:00:3b:b9:97:31:26:84:ff:a4:
76:0b:8b:0b:7c:18:d5:8e:40:eb:61:ed:ff:f5:9d:
ab:60:07:3d:c2:1a:16:c4:5e:a7:a7:f0:b2:cc:ee:
f6:60:a5:32:bd:0c:88:8a:aa:9d:f6:bb:7b:96:4d:
7e:d7:42:24:24:4b:90:72:f6:29:dd:d6:56:f6:52:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:8B:E7:AD:04:71:FE:37:92:D7:2C:63:3E:D1:8D:1D:C1:BD:85
X509v3 Authority Key Identifier:
keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:c7:6a:37:c5:27:18:c2:02:84:58:d5:6b:28:fc:09:6c:e1:
f6:11:e6:0d:a3:64:b3:67:21:42:b5:5a:00:d8:ba:ff:40:60:
d7:1c:23:bb:27:c4:3f:66:e4:75:b6:43:5a:ba:29:ca:40:d0:
1a:19:a6:0a:00:e7:35:9d:e2:f3:c7:93:0f:3d:4a:08:37:98:
ce:35:00:bb:42:de:98:f1:c8:cc:72:a4:c4:0c:1f:ef:f4:b5:
41:ca:b4:8f:8a:5b:9b:3f:f8:b4:d1:7c:72:de:80:5e:0b:93:
f8:9f:60:ac:f4:99:96:17:96:6d:08:d5:49:a6:bf:b1:2c:86:
42:2b:a1:39:e8:4a:c0:33:8c:a6:ac:7f:fa:9b:8a:1f:87:0e:
3b:01:31:ad:f1:85:ff:ab:1e:c6:e1:53:1e:cf:bf:33:c2:de:
a2:c5:b5:ea:f3:05:d2:33:9f:34:34:8b:d3:71:7f:15:fd:9d:
d7:8a:98:2f:7d:04:86:8e:8f:8f:03:61:ee:3f:c9:54:f9:94:
2d:30:cf:c4:69:45:41:7c:3d:4c:35:19:76:dd:aa:20:6d:ab:
a5:b1:a7:90:97:57:e5:30:60:d9:ff:88:09:e8:3f:79:c6:0f:
61:50:15:e7:15:59:e9:88:3a:d1:3f:25:af:55:49:f1:f2:7b:
54:d1:af:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:12:10 2026 by rpki-client