
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
File: gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json)
Hash identifier: gWrBDz9dFMUsU3CjI7G+9FW4lkeIxt/gw91RdXrTE+0=
Subject key identifier: D0:40:03:4F:A4:05:AA:AB:02:4D:05:55:1F:89:81:76:F7:F5:92:36
Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
Certificate issuer: /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
Manifest number: 021B
Signing time: Sun 27 Sep 2026 03:11:32 +0000
Manifest this update: Sun 27 Sep 2026 03:11:32 +0000
Manifest next update: Sun 04 Oct 2026 03:11:32 +0000
Files and hashes: 1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: cK7ULxTzmTh44rSqEMpmmVSIYeeR/MSh0UvQSqAsrkA=)
2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: EEOuLVOFGIUAdOuI2tNMq9b7RGo51bkfuVm6Dgdj9UY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Validity
Not Before: Sep 27 03:11:32 2026 GMT
Not After : Oct 4 03:11:32 2026 GMT
Subject: CN=6ab88964-8783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2d:c6:9d:b9:24:5c:e7:26:71:14:1f:4a:a5:
c4:13:d1:37:b3:1d:02:f7:f0:bf:1f:2a:d2:f5:5c:
b1:eb:06:fb:fc:ff:32:7e:35:3f:16:89:df:12:18:
4a:98:01:d5:a1:a6:3f:f6:3e:e0:b0:29:27:3d:3c:
01:91:2c:06:ea:47:86:09:d1:6c:6e:bb:e5:23:8f:
06:d9:6f:71:9f:16:de:eb:c7:cf:5d:21:32:aa:26:
1e:7d:27:75:e5:39:ed:94:81:78:e4:18:f6:34:0a:
e3:2e:77:87:02:4d:47:b1:37:fd:13:d7:3f:77:ac:
57:20:c9:45:0a:15:5b:d4:a7:c9:3f:8a:53:89:f1:
cb:59:24:d6:d9:60:f3:dc:1f:14:1a:12:87:d5:fa:
97:c8:99:a6:c3:7a:0f:d4:3e:53:cc:60:f9:31:aa:
45:38:3f:11:db:d1:4b:1c:15:ee:2c:e2:5f:17:e5:
62:69:5b:26:dc:4c:45:e0:58:94:80:1d:bb:0d:84:
3a:b7:94:85:ce:6d:ae:96:1d:fa:6d:52:38:7a:d4:
5e:5c:7b:2e:f7:fc:1d:4f:80:5d:ce:34:37:13:bb:
87:10:b8:9e:12:62:71:24:e0:c5:5c:64:69:ff:43:
d3:07:10:0b:6a:5b:25:8f:f9:83:f6:5f:88:0e:61:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:40:03:4F:A4:05:AA:AB:02:4D:05:55:1F:89:81:76:F7:F5:92:36
X509v3 Authority Key Identifier:
keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:37:43:7c:53:1a:df:1a:7a:47:23:99:03:f2:a1:23:98:66:
10:a1:03:20:29:5e:4d:90:d5:11:1b:c9:10:96:53:2b:3c:d8:
a6:49:37:e6:56:75:12:a7:08:a5:9e:04:a9:85:68:da:a3:44:
bf:65:ba:62:2a:f3:5a:4b:88:7c:ad:e5:dd:bd:b7:af:cb:83:
d2:9e:ae:4b:48:82:f6:b2:fd:0d:ee:04:c0:67:fb:d3:6d:98:
6b:a9:ca:b9:57:70:3a:72:e7:c8:87:79:a0:ea:67:dc:fc:10:
f1:df:bc:69:21:a8:a2:96:83:20:fa:65:c6:2e:5c:9b:0a:05:
f6:c1:bc:5a:d9:82:b1:63:ab:d7:be:75:eb:1d:9b:4d:46:0c:
9b:cf:80:0f:19:da:1b:48:60:5f:1c:10:57:55:11:1e:0c:33:
7a:7e:ce:1b:f1:01:2d:46:7f:d3:18:84:4c:3f:ba:0f:56:6a:
37:ad:77:7d:fd:b4:2d:81:73:92:6d:1e:fc:e1:3d:a7:21:0c:
51:2d:14:f4:9e:ca:76:cc:e2:1d:dc:f1:2e:a3:0f:ed:33:01:
ab:8d:ab:b1:3f:39:1f:2f:5d:98:e3:56:3f:92:04:20:b8:ac:
0e:07:f4:33:7b:c2:b7:b5:0b:4d:89:09:68:4f:0d:6c:af:bd:
ad:f1:f8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:32:00 2026 by rpki-client