
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
File: GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json)
Hash identifier: tLTD3C42WudNZpzqqlskIcSrq+g+q6WzxtI50NdFyo0=
Subject key identifier: 32:0D:2A:23:75:9F:EE:9B:F8:20:5B:80:61:37:A8:56:0F:AD:DA:44
Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
Certificate issuer: /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Certificate serial: 03FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
Manifest number: 03EC
Signing time: Wed 25 Mar 2026 00:09:39 +0000
Manifest this update: Wed 25 Mar 2026 00:09:39 +0000
Manifest next update: Wed 01 Apr 2026 00:09:39 +0000
Files and hashes: 1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: TkI7DkMd0mHh3f9s2rYxAQt/tSdM6cEg8+RHTaFcut8=)
2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: IasGAzFc+l1gsAHfpGxVMa7FoIjlAPF1GzUpALF/028=)
3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: OdmIKnh99XTg8Hh9/TQirH8XV5FGfwwJr9IPq/Zw7no=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1018 (0x3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Validity
Not Before: Mar 25 00:09:39 2026 GMT
Not After : Apr 1 00:09:39 2026 GMT
Subject: CN=69c327c3-3935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:36:52:0a:dc:2d:4a:c9:6f:f5:df:74:ad:
08:12:3a:7e:37:9f:88:6d:79:a4:23:0b:fd:6e:14:
06:b5:7f:3b:e9:98:05:fa:f9:c4:55:93:87:77:c8:
ea:d2:4d:16:d4:78:8f:29:e9:92:c6:b0:0f:e7:ba:
a6:cc:62:9f:7f:65:05:3f:65:1b:d4:bd:c5:06:d2:
e3:0c:38:a2:56:96:6d:7c:8b:77:e1:a0:29:a7:ed:
2f:ca:c3:1e:4e:08:3e:98:69:b8:9c:d1:9f:8d:66:
ea:9e:a8:49:08:10:d6:f9:01:44:80:c7:11:af:0a:
70:47:db:8b:22:f1:a3:39:9c:25:dd:41:32:33:e7:
97:7a:c7:46:5c:e9:f4:73:d3:4e:15:f3:96:76:84:
32:25:dd:e2:21:7c:bb:74:f7:9e:e8:cf:d2:86:d3:
c7:71:a3:23:c7:4d:ae:3b:53:90:0e:9d:3c:9e:42:
41:5f:74:89:b6:a5:63:dd:32:43:45:bf:7a:53:16:
26:3f:05:9f:9d:de:89:3f:d6:24:c7:39:16:41:19:
1b:01:42:62:0d:89:cc:e9:64:e2:07:83:83:97:43:
c9:36:b3:d8:8e:69:5e:db:4f:35:93:c0:dd:f9:d9:
9a:e2:96:f8:27:a2:1f:e3:18:13:e8:47:e6:08:6a:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0D:2A:23:75:9F:EE:9B:F8:20:5B:80:61:37:A8:56:0F:AD:DA:44
X509v3 Authority Key Identifier:
keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e0:df:66:86:88:30:3a:17:74:f0:93:f9:37:3d:77:bc:7e:
79:ea:45:b2:c1:be:f8:da:c9:32:85:bd:cd:97:ee:9b:29:f8:
35:b0:ae:2d:b5:ca:58:78:dc:46:06:22:fc:79:41:35:6c:d9:
7e:e2:70:0c:53:d3:80:2d:f3:99:f8:37:90:cd:cc:a6:45:17:
8a:88:77:84:95:fa:e8:aa:80:1b:2f:79:d2:78:25:80:b1:13:
a2:d0:b2:40:08:be:9b:0c:d3:c6:97:e4:77:3a:31:fe:60:ae:
18:4b:ea:4e:b2:a2:59:2c:e5:d8:f1:f2:3a:3e:a8:11:eb:6b:
ba:a8:21:cc:4e:34:78:47:e0:15:19:23:fc:1c:82:73:6b:5e:
76:0e:b2:b9:1f:a4:38:ca:7a:c1:ed:cc:ef:21:28:ac:70:8a:
ff:54:83:e5:77:2c:69:24:c6:27:21:2d:d9:5e:b3:3d:61:c5:
ca:ec:af:bb:84:ff:58:b6:13:8a:74:66:b1:0a:fe:42:b8:54:
a3:4f:58:34:83:e8:0d:8c:2a:b6:ea:98:0f:68:72:35:6f:26:
66:1e:5a:85:b6:b3:7b:55:74:b9:36:94:92:a1:12:88:41:1c:
c5:33:1a:2a:ed:b4:b4:f1:7a:08:4f:48:54:20:40:0c:00:9d:
65:af:79:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1NUQxMTAvBgNVBAUTKDFBMjM5ODY4NDM1NjVERkZDODAwRjgwRkYyOTZCQUIx
QUQzNzE0RUMwHhcNMjYwMzI1MDAwOTM5WhcNMjYwNDAxMDAwOTM5WjAYMRYwFAYD
VQQDEw02OWMzMjdjMy0zOTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlc2UgrcLUrJb/XfdK0IEjp+N5+IbXmkIwv9bhQGtX876ZgF+vnEVZOHd8jq
0k0W1HiPKemSxrAP57qmzGKff2UFP2Ub1L3FBtLjDDiiVpZtfIt34aApp+0vysMe
Tgg+mGm4nNGfjWbqnqhJCBDW+QFEgMcRrwpwR9uLIvGjOZwl3UEyM+eXesdGXOn0
c9NOFfOWdoQyJd3iIXy7dPee6M/ShtPHcaMjx02uO1OQDp08nkJBX3SJtqVj3TJD
Rb96UxYmPwWfnd6JP9YkxzkWQRkbAUJiDYnM6WTiB4ODl0PJNrPYjmle2081k8Dd
+dma4pb4J6If4xgT6EfmCGrEVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDINKiN1
n+6b+CBbgGE3qFYPrdpEMB8GA1UdIwQYMBaAFBojmGhDVl3/yAD4D/KWurGtNxTs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjU1RC80MEU0M0I4MEI3
QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hmX0lBUGdQOHBhNnNhMDNG
T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dpT1lhRU5XWGZfSUFQZ1A4cGE2c2EwM0ZPdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjU1RC80MEU0M0I4MEI3QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hm
X0lBUGdQOHBhNnNhMDNGT3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP+DfZoaIMDoXdPCT+Tc9d7x+eepFssG++NrJMoW9zZfumyn4NbCuLbXKWHjc
RgYi/HlBNWzZfuJwDFPTgC3zmfg3kM3MpkUXioh3hJX66KqAGy950nglgLETotCy
QAi+mwzTxpfkdzox/mCuGEvqTrKiWSzl2PHyOj6oEetruqghzE40eEfgFRkj/ByC
c2tedg6yuR+kOMp6we3M7yEorHCK/1SD5XcsaSTGJyEt2V6zPWHFyuyvu4T/WLYT
inRmsQr+QrhUo09YNIPoDYwqtuqYD2hyNW8mZh5ahbaze1V0uTaUkqESiEEcxTMa
Ku20tPF6CE9IVCBADACdZa95sg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:04 2026 by rpki-client