
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json)
Hash identifier: 5U3pbN+3sOxM/YlJd72KOKzOwP7yw6UzJtJ/I9HABjs=
Subject key identifier: BD:F5:EE:87:2D:44:C5:E8:3C:23:32:0B:9F:07:D2:5B:E5:B5:B7:77
Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22
Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
Manifest number: 0174
Signing time: Wed 25 Mar 2026 04:00:26 +0000
Manifest this update: Wed 25 Mar 2026 04:00:26 +0000
Manifest next update: Wed 01 Apr 2026 04:00:26 +0000
Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: gfQRmJ07jBGSWOlaRod/MpcGRKDnLtHJFQ91nNc2iw4=)
2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: 05Ya7DJVKX8wCHmVHhil4CLCkj7r7+cnlIeankN562g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl
rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
Validity
Not Before: Mar 25 04:00:26 2026 GMT
Not After : Apr 1 04:00:26 2026 GMT
Subject: CN=69c35dda-36c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:7e:c6:3f:3c:d1:00:c6:8a:4d:39:06:e9:
48:1f:4b:18:a0:21:5e:7f:41:17:d8:65:80:26:8a:
c6:0f:ee:16:56:88:25:76:53:da:4e:59:91:58:8e:
9b:28:47:34:c5:30:ce:2e:5f:4b:5f:de:1e:29:c2:
37:66:4c:6c:f1:1a:cc:cc:83:37:62:e6:7f:bc:60:
b2:cb:ce:7c:d9:6a:a0:e9:05:41:89:6c:94:00:71:
4c:50:63:de:25:f6:1c:da:a8:cc:87:5e:80:9c:b3:
5b:e1:b4:4e:bc:da:2d:14:3e:61:cb:43:68:f6:3a:
df:03:6a:c3:22:43:a3:0f:91:0c:5b:46:70:3d:12:
a4:f0:e3:ec:db:a4:bd:1f:65:1a:21:27:c3:31:53:
dd:e1:70:9b:11:1a:49:96:ab:11:d6:86:46:f5:65:
c1:db:92:78:69:4a:c4:6f:bf:01:90:51:b5:ee:83:
a7:07:eb:58:61:d7:cd:b6:77:fd:05:86:f6:1b:16:
96:e1:9f:c6:3a:2a:6a:79:e9:ba:05:c1:20:f7:65:
7e:0d:80:c5:e8:82:0a:97:e6:9c:a4:66:42:88:1e:
8c:3c:29:93:81:d5:d4:d6:ec:cf:1a:ce:25:e2:ce:
7c:42:31:10:89:4f:0c:39:97:18:b2:23:a2:8d:71:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F5:EE:87:2D:44:C5:E8:3C:23:32:0B:9F:07:D2:5B:E5:B5:B7:77
X509v3 Authority Key Identifier:
keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:7d:3e:43:73:08:c9:c0:4a:d7:ce:c6:93:2c:da:33:6d:91:
ae:db:b8:64:71:f3:73:c9:f9:cf:bc:56:f3:0a:c4:f5:e8:ba:
3d:a2:83:e5:c4:bb:7a:f3:c4:21:ed:52:18:d6:c4:d0:66:a2:
50:8e:97:7a:fb:c5:26:e3:80:3d:88:ff:0b:af:a9:f1:5c:f6:
6c:d4:88:45:21:86:eb:1d:c0:19:cc:00:68:d2:e4:16:56:5a:
e8:c4:eb:4e:ad:6b:74:df:5d:2f:c8:59:ad:f3:03:c1:a6:78:
93:92:1b:7e:2b:ec:2e:03:22:e0:99:66:48:91:4b:51:e1:21:
2f:06:2e:c7:c5:41:c6:da:fc:c9:ba:10:96:9f:66:8d:83:c3:
1e:7e:c6:87:21:c3:44:c7:03:7c:8c:29:d1:6a:ba:6a:f4:bf:
55:1a:41:01:ca:8f:dc:64:64:e0:98:1c:d4:74:d1:64:3e:8e:
3e:87:26:c9:81:f0:06:11:7b:29:ff:a6:9b:ad:5f:35:23:84:
11:ac:64:35:99:1b:38:f4:ca:2c:15:38:89:68:6e:32:63:c8:
34:88:f9:f0:e5:f8:63:93:53:e4:93:f8:d4:3e:e4:16:1d:c7:
92:7a:2f:c7:7b:fa:4a:60:cd:61:13:e6:fd:ad:5f:15:3b:b8:
02:6a:27:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:02 2026 by rpki-client