
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
File: gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft (raw, json)
Hash identifier: wAoqNU1C2+LafoG+DZYKob2g21I0Ot6fOgwrvepnvKE=
Subject key identifier: 6C:2D:F6:87:A3:B5:C1:F4:3A:7A:CA:3E:BB:CA:77:EE:9D:72:05:2C
Authority key identifier: 83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22
Certificate issuer: /CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22
Certificate serial: 09A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
Manifest number: 099A
Signing time: Tue 24 Mar 2026 19:47:44 +0000
Manifest this update: Tue 24 Mar 2026 19:47:44 +0000
Manifest next update: Tue 31 Mar 2026 19:47:44 +0000
Files and hashes: 1: gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl (hash: 5V7avmduIYmR/dpZHpFBeRRQd2ZnZ2V1sSFsuwqpI38=)
2: B0071914AAE811EA8412810FC4F9AE02.roa (hash: gqN4+0x/iPERujmuiwnxSyaP8QLNa37HtTvPV2wxA2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl
rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2472 (0x9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C005, serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22
Validity
Not Before: Mar 24 19:47:44 2026 GMT
Not After : Mar 31 19:47:44 2026 GMT
Subject: CN=69c2ea60-df4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:04:f0:f6:e1:d4:f7:ac:64:1b:bd:b1:6e:
83:d5:db:19:bc:73:96:54:ca:0c:11:d2:1f:c1:73:
0d:9a:1d:aa:da:7c:8d:c9:50:09:a7:82:e7:33:b3:
63:db:98:6c:98:03:4d:76:5b:bc:94:e0:54:2f:5d:
03:3f:dc:82:63:da:3e:7e:48:a4:a4:ec:ef:49:8c:
68:ef:a7:a2:08:91:92:d8:f3:e9:b2:fb:8e:9f:d7:
44:8a:c4:b4:44:9f:3a:a8:74:51:28:a0:bc:7f:3a:
1e:12:3b:f8:b2:2b:c0:9b:7c:e8:f4:eb:73:8d:90:
24:00:b2:31:0d:27:0d:b1:39:36:70:b7:f7:03:be:
cb:26:99:2a:ef:e2:24:c7:3c:17:bd:37:2f:da:2d:
0f:de:5c:4a:bc:b4:77:a3:0c:db:9c:11:a9:a9:79:
3c:4e:93:fa:38:a1:18:c8:60:b0:90:81:56:0e:b5:
3a:27:8f:a6:a5:30:9e:04:d3:30:51:50:ad:6b:ba:
52:45:18:4e:21:af:40:63:24:da:7b:0f:63:d2:8f:
fd:65:9e:e3:ec:c1:97:1f:ab:8b:9c:bb:87:1c:dc:
a5:aa:62:22:60:8f:ca:1f:25:28:c2:dc:77:28:96:
4a:e9:2d:7e:a5:70:08:96:40:9d:37:e4:32:40:13:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2D:F6:87:A3:B5:C1:F4:3A:7A:CA:3E:BB:CA:77:EE:9D:72:05:2C
X509v3 Authority Key Identifier:
keyid:83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:93:25:e8:8d:75:82:4a:d6:57:aa:3a:12:7f:f1:c6:21:7d:
b1:e2:dc:c2:e9:6e:b9:70:56:a6:a0:41:8f:5f:5d:51:91:df:
61:46:8a:1b:28:02:a4:67:de:b8:49:41:a1:53:68:6c:36:84:
ce:5f:36:13:7e:fa:65:5b:84:85:56:4e:ba:fb:b7:16:a5:df:
13:fa:b4:7a:31:f6:77:8a:3f:10:24:cd:e7:aa:cb:1c:ce:5c:
48:46:00:ef:54:0b:c5:d2:74:ee:6d:a4:5e:fc:31:cd:18:1d:
82:4c:00:90:57:6c:24:12:c8:27:63:21:fe:5d:53:5b:db:0a:
ba:1a:8a:db:e8:ce:c3:57:2f:05:2c:dd:41:ea:29:e6:ed:df:
52:71:8d:d6:2b:ed:64:78:48:c8:46:1a:cb:68:85:bb:63:15:
45:36:0b:62:bc:ee:1a:06:81:22:33:a9:f7:65:7a:9c:55:eb:
4f:f7:c2:b5:ec:9c:b4:e1:47:6b:ba:ba:02:48:1e:1c:96:d4:
99:b7:a8:ae:71:ac:a5:20:94:d9:05:e8:1c:f0:b8:db:95:50:
66:71:73:2f:00:ab:1f:83:4f:07:5f:18:34:53:22:0d:58:2c:
de:67:76:c6:2c:ba:bf:fc:c3:7c:72:fe:d6:77:9f:df:09:89:
c2:62:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:42 2026 by rpki-client