
$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
File: G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft (raw, json)
Hash identifier: t3Y+W1xHMC5UEk0ctxWWjrGZfEz5iSouTzUu454nS7A=
Subject key identifier: B5:FA:8C:74:B7:B7:C7:C7:8A:AF:B8:15:50:D7:E1:41:2B:31:E0:DD
Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
Certificate issuer: /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Certificate serial: 09CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
Manifest number: 1A35
Signing time: Tue 24 Mar 2026 17:14:58 +0000
Manifest this update: Tue 24 Mar 2026 17:14:57 +0000
Manifest next update: Tue 31 Mar 2026 17:14:57 +0000
Files and hashes: 1: G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl (hash: zwp42ZXMPJhxJ0ywbcSPaZwG3BeU0nZzzBv3NMDEyTk=)
2: F70F5E7A505E11ED9947920DC4F9AE02.roa (hash: e25Eh5ysW99xEZdZeEMO20g/Wj/Kb6T5qU+ioCm+p3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2509 (0x9cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Validity
Not Before: Mar 24 17:14:57 2026 GMT
Not After : Mar 31 17:14:57 2026 GMT
Subject: CN=69c2c692-eb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:31:96:c4:51:e1:f9:a9:46:a3:08:33:d1:
01:a2:73:ba:40:ef:05:f0:0d:56:ca:24:b8:3c:76:
50:20:12:50:75:d2:56:a7:9f:ee:44:86:f2:1a:12:
ec:d3:5d:9c:d5:e5:78:29:d4:3d:70:33:cd:a1:e0:
21:de:39:7c:25:d4:09:0d:bd:c2:f6:0a:e8:a8:4d:
0f:bb:45:04:40:a4:aa:75:09:59:43:0f:a4:68:42:
e0:88:2a:08:2d:e3:2c:99:b5:b1:70:51:ee:f0:7e:
0b:37:39:37:2f:29:d5:1f:95:07:17:b2:e2:71:d4:
e3:8e:f5:84:8b:4c:93:8a:a4:b7:4e:b9:5b:49:c9:
a5:9d:48:d9:5f:76:8d:93:3f:67:e0:a4:83:22:53:
64:74:f1:1a:7a:40:fd:df:bf:9f:28:59:6c:a6:2d:
77:e9:80:36:a6:b6:84:6c:6e:e1:6d:49:9b:34:dd:
83:f9:f9:30:44:94:8f:91:8e:f6:f7:02:5b:05:f6:
29:f6:a3:c8:5f:f2:80:09:09:2b:38:7a:00:ee:3d:
c8:3e:96:7c:24:89:63:34:f8:44:29:26:96:02:16:
fa:40:6f:08:a2:c4:f6:d4:ff:38:49:59:0e:56:52:
e2:b0:bc:fd:39:7d:e8:c4:62:c7:a9:ea:64:13:c0:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FA:8C:74:B7:B7:C7:C7:8A:AF:B8:15:50:D7:E1:41:2B:31:E0:DD
X509v3 Authority Key Identifier:
keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:ef:11:4c:00:82:53:0c:c0:80:2a:da:99:92:21:d9:ac:4d:
8d:de:8a:9a:57:95:00:1d:0c:63:5a:16:82:1a:5b:b8:13:21:
c5:3c:1b:cf:8d:67:90:9c:ac:1b:50:23:02:dc:40:1f:4e:53:
e4:29:50:4b:89:86:bf:aa:f9:81:b4:5a:cd:06:1b:11:cb:1e:
d1:38:29:4f:1f:21:7e:bb:ac:cc:96:9a:cb:b4:7e:ac:a3:e5:
a8:96:c4:5b:71:71:cc:4f:ce:74:94:b0:93:a6:74:33:25:1a:
a5:c2:6d:3d:91:e5:1a:b8:23:5e:2a:33:4b:f3:f2:ba:30:62:
62:60:05:6b:e6:b4:c1:ad:6c:9a:f0:66:10:d9:18:14:40:4f:
4c:91:b6:81:54:a1:c7:e9:b6:e4:d2:ca:35:f3:54:fd:3e:d9:
b5:97:e8:ac:e9:98:7e:6f:73:3f:99:03:ab:cc:ab:dc:31:2a:
92:5a:8d:c9:04:5a:2c:b9:60:57:4d:1f:d4:52:2b:21:68:d4:
a7:07:4a:35:d6:52:1f:f6:f5:58:2e:b7:7b:7f:f0:f7:92:a9:
48:d8:0e:ee:16:36:17:3a:2a:53:74:50:49:4e:82:57:b4:7e:
9f:58:73:80:80:d4:02:5c:ae:ae:9c:f9:cd:8d:ee:e3:f5:2e:
3c:91:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:48 2026 by rpki-client