
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json)
Hash identifier: gv8A9YdsoCLOfpLbFdKkEnm09DK7spFSZAFPZoUWFDQ=
Subject key identifier: B1:92:99:A5:EF:03:23:49:F6:85:44:76:71:BF:93:F6:91:EB:4B:93
Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Certificate serial: 08D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
Manifest number: 08C8
Signing time: Tue 24 Mar 2026 20:11:11 +0000
Manifest this update: Tue 24 Mar 2026 20:11:11 +0000
Manifest next update: Tue 31 Mar 2026 20:11:11 +0000
Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: KDl5RAdjpFuZhClNX3VTCcN7VelrBxohwJ9Jnf+XtHQ=)
2: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: cdnSLxMfhuwZ6Et2fzD+gihlVu8L05hih+WXS+qI80c=)
3: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: 9utKPxoH2n6Lt3z3yPm91op8vGhWDr2B1tZqqN/7b1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2259 (0x8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Validity
Not Before: Mar 24 20:11:11 2026 GMT
Not After : Mar 31 20:11:11 2026 GMT
Subject: CN=69c2efdf-3e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e8:04:bc:36:7d:e5:b3:ca:69:7e:ca:a5:82:
65:e6:4a:18:21:e5:25:1c:97:ac:79:07:e0:f2:db:
c7:cc:88:d7:50:0f:30:aa:08:5f:ba:01:41:cd:c7:
eb:d6:38:3e:e0:03:9e:36:7e:a3:97:d1:d6:41:1b:
f4:0a:61:fd:26:fb:3c:02:f4:f8:57:91:fe:3a:77:
c9:1c:cd:34:b0:16:10:30:96:4a:dc:8b:85:e8:eb:
48:46:f4:38:27:f1:b0:70:50:86:c9:05:2e:fc:96:
9d:f5:6a:5f:c5:a1:7c:b9:34:b3:0a:a1:50:d6:9e:
41:fa:29:58:b4:a4:22:c4:72:45:d6:93:17:52:82:
ee:6e:da:a9:b9:bb:2b:8a:95:c4:d6:5a:11:c0:fa:
d5:92:51:b6:b5:8e:67:b0:30:6e:dc:5f:f6:ad:c5:
f6:fa:e1:3b:5d:2f:eb:3d:a3:b0:2c:9f:36:ac:a7:
a1:26:b8:65:28:2d:17:b4:47:e6:09:22:3d:1e:14:
8f:40:9b:b9:bc:de:e0:22:5d:cc:12:84:e7:a6:40:
b0:6b:f3:bf:b7:db:a1:1c:fd:0b:ee:c1:a3:8c:51:
da:af:4d:77:eb:7a:83:bb:98:5b:32:fa:ab:d3:9a:
ad:73:63:24:dc:53:6b:13:56:19:1d:68:af:50:07:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:92:99:A5:EF:03:23:49:F6:85:44:76:71:BF:93:F6:91:EB:4B:93
X509v3 Authority Key Identifier:
keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:92:ed:4d:2b:29:64:d8:8d:2b:12:96:94:ac:38:9d:37:6e:
78:90:45:4a:7f:98:11:c0:6d:f0:a9:90:cb:f0:6c:c4:32:53:
52:8b:dc:b0:33:d5:a9:21:21:bf:d2:24:a5:a6:ea:a3:9f:4e:
0d:fd:4e:6e:44:6d:30:6f:91:cd:35:6d:55:f2:e8:fd:f5:93:
2f:8b:cb:67:4a:8b:d2:f5:a3:17:b1:3d:22:d8:c3:be:e7:c7:
94:17:ed:eb:dd:1b:f8:54:0f:76:f6:21:a3:14:9a:f1:73:b0:
fe:f5:ff:3a:6e:e4:1b:03:ac:66:ba:50:f0:55:ce:e8:c7:14:
0d:97:83:80:41:44:95:69:d9:f3:3f:89:87:56:34:7e:dd:92:
85:ff:6d:5c:68:99:b4:88:97:d2:c1:b3:dc:ae:79:58:6f:f4:
1c:9d:3f:1d:31:12:a7:24:ba:6d:8d:9b:7c:42:9a:bd:8f:da:
6e:92:b1:9a:1c:72:a0:b9:12:fa:fc:8f:72:2b:b9:fc:70:8e:
82:71:6e:ea:f7:a0:8e:1b:57:db:c1:9d:9a:ee:a3:47:6a:aa:
9b:97:44:d9:51:a6:5c:b0:7e:a0:da:34:83:48:02:63:7d:59:
d8:45:05:14:eb:30:05:26:2f:54:21:b2:92:35:60:4e:1e:70:
d7:09:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:49 2026 by rpki-client