
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json)
Hash identifier: wJCJZ1KB8rBHjk1ShFds+WBJI50o/4+TLsnh+d8p/qM=
Subject key identifier: B9:50:3D:03:1D:92:82:8D:EE:99:D3:CC:FC:5B:11:98:65:0E:74:82
Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8
Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8
Certificate serial: 03B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
Manifest number: 03AE
Signing time: Fri 27 Mar 2026 00:28:45 +0000
Manifest this update: Fri 27 Mar 2026 00:28:44 +0000
Manifest next update: Fri 03 Apr 2026 00:28:44 +0000
Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: L7UY6BYnCtCXsLEBUrwX4G94cRr7EuU9WkWz3f/VqCo=)
2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: ZWSjR9hPEgzTd16SzLm/XWDFrj10G67gV4xDp96p4xE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl
rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949 (0x3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8
Validity
Not Before: Mar 27 00:28:44 2026 GMT
Not After : Apr 3 00:28:44 2026 GMT
Subject: CN=69c5cf3d-1ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:5a:e8:e6:b7:f5:33:74:ba:49:01:ae:ce:
5a:88:a7:6d:56:72:be:45:0b:e6:85:48:a7:d7:d4:
01:c7:bb:45:88:78:75:80:98:74:fe:15:0c:a2:b4:
a8:6a:62:9a:b0:82:fd:af:79:e7:4f:a0:bb:3e:4a:
b5:1d:75:98:16:f1:6f:52:b8:6c:61:35:f2:77:d3:
6c:9c:08:6c:49:c0:a9:96:d7:b0:3f:c0:bb:81:9e:
3b:32:db:ab:25:10:44:89:05:0f:e4:4f:5e:37:b2:
4e:a4:1b:00:ba:12:66:f1:0c:85:2e:29:61:8a:9b:
59:5c:67:64:09:6c:a0:5a:33:61:23:3e:fa:aa:69:
28:f6:06:4c:0a:9a:4a:0c:d5:f4:6a:06:b0:74:1b:
78:32:82:a0:8f:53:d2:13:f9:ca:d9:7a:04:e9:f5:
0a:eb:b6:16:fb:a5:cf:f9:70:10:09:be:09:fd:88:
14:39:2e:47:b4:e0:fd:d4:4f:77:a7:79:1a:39:d1:
ab:83:0b:2f:c7:db:d1:1e:c2:cb:ca:32:49:e8:fd:
88:f5:ce:4e:e9:be:6f:80:b9:3b:58:cb:ec:67:a4:
f2:78:fa:c3:68:4b:44:38:20:1b:69:c2:4b:9e:88:
01:e6:49:81:6e:25:1b:1a:2c:ca:57:5c:af:f1:76:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:50:3D:03:1D:92:82:8D:EE:99:D3:CC:FC:5B:11:98:65:0E:74:82
X509v3 Authority Key Identifier:
keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1f:c4:96:de:77:be:e3:23:6a:83:69:74:c9:d4:ba:17:4b:
12:b6:a9:00:60:71:cf:e2:51:3d:dd:5f:3b:c7:39:e5:99:53:
00:84:6f:f4:18:e1:97:e5:af:77:47:bb:a0:37:04:b2:53:d1:
e6:42:d1:f3:08:6d:d5:fd:42:2e:77:ac:40:bc:ab:26:b0:ed:
0c:fe:60:ac:49:87:b0:90:dc:de:0b:c8:fa:cf:b7:51:ad:05:
25:0b:e5:d8:ad:3e:c1:2a:26:2b:a8:a9:b9:58:de:aa:25:6f:
38:6a:a4:87:f6:57:c3:7b:11:79:ed:54:b8:e4:91:6e:7b:48:
c5:a8:37:56:68:35:77:b8:58:e7:67:48:45:db:50:ea:65:d4:
53:ee:48:68:53:ba:6f:a8:4f:11:6a:9a:cd:a7:95:fc:15:8a:
5f:27:5c:83:05:8c:de:5c:85:9e:48:eb:48:8b:08:63:96:2b:
71:a2:4e:1e:71:f6:18:f2:c3:e4:71:61:bf:3e:42:e7:03:40:
7f:65:78:46:5c:d3:2d:16:f3:e7:a0:48:47:97:d3:8f:96:f8:
86:af:62:b1:d0:85:e6:de:3d:52:3e:1b:c2:41:aa:f0:64:c5:
99:68:46:84:39:39:39:66:66:5b:16:bc:2b:d2:db:cb:cf:57:
6e:46:ce:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw
Njg3NUZFQzgwHhcNMjYwMzI3MDAyODQ0WhcNMjYwNDAzMDAyODQ0WjAYMRYwFAYD
VQQDEw02OWM1Y2YzZC0xZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqDla6Oa39TN0ukkBrs5aiKdtVnK+RQvmhUin19QBx7tFiHh1gJh0/hUMorSo
amKasIL9r3nnT6C7Pkq1HXWYFvFvUrhsYTXyd9NsnAhsScCpltewP8C7gZ47Mtur
JRBEiQUP5E9eN7JOpBsAuhJm8QyFLilhiptZXGdkCWygWjNhIz76qmko9gZMCppK
DNX0agawdBt4MoKgj1PSE/nK2XoE6fUK67YW+6XP+XAQCb4J/YgUOS5HtOD91E93
p3kaOdGrgwsvx9vRHsLLyjJJ6P2I9c5O6b5vgLk7WMvsZ6TyePrDaEtEOCAbacJL
nogB5kmBbiUbGizKV1yv8XaUuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlQPQMd
koKN7pnTzPxbEZhlDnSCMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx
MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r
OUtOR3BGRUlFUVFHaDFfc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeh/Elt53vuMjaoNpdMnUuhdLErapAGBxz+JRPd1fO8c55ZlTAIRv9Bjhl+Wv
d0e7oDcEslPR5kLR8wht1f1CLnesQLyrJrDtDP5grEmHsJDc3gvI+s+3Ua0FJQvl
2K0+wSomK6ipuVjeqiVvOGqkh/ZXw3sRee1UuOSRbntIxag3Vmg1d7hY52dIRdtQ
6mXUU+5IaFO6b6hPEWqazaeV/BWKXydcgwWM3lyFnkjrSIsIY5YrcaJOHnH2GPLD
5HFhvz5C5wNAf2V4RlzTLRbz56BIR5fTj5b4hq9isdCF5t49Uj4bwkGq8GTFmWhG
hDk5OWZmWxa8K9Lby89XbkbOvg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:14 2026 by rpki-client