
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
File: GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json)
Hash identifier: rXXO0kcuWSzLV2umt2U3D39TuDd9gTN5Yep+Siyo+vs=
Subject key identifier: 2D:DE:8E:EF:32:9A:07:6D:78:CB:70:99:24:17:52:AD:3F:D4:33:29
Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77
Certificate issuer: /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
Manifest number: CD
Signing time: Wed 25 Mar 2026 06:00:28 +0000
Manifest this update: Wed 25 Mar 2026 06:00:28 +0000
Manifest next update: Wed 01 Apr 2026 06:00:28 +0000
Files and hashes: 1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: 8+oX/u6e5Q3oY79kMtCwGXMajEFqaYLtDMOUm1MmJZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl
rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
Validity
Not Before: Mar 25 06:00:28 2026 GMT
Not After : Apr 1 06:00:28 2026 GMT
Subject: CN=69c379fc-b828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:fa:68:e0:bc:29:19:fb:65:31:72:ea:8f:
d3:98:e2:d9:7b:5f:cf:99:cb:67:0f:20:8d:fe:7c:
0b:85:7b:58:1b:0c:60:30:8b:74:cd:96:ad:cc:8a:
24:33:f4:e1:a6:f4:22:df:e6:03:35:9b:22:65:60:
3a:a5:7a:7c:5a:3a:00:fd:26:45:ef:d8:2a:5f:c8:
5c:af:bb:79:d7:ee:b7:45:16:c1:e6:33:58:c0:38:
05:52:77:80:aa:6a:1b:79:49:b7:6e:b8:30:e4:b7:
37:40:96:de:8e:fd:bf:0e:a4:62:23:f7:2e:1f:a1:
34:48:37:4d:48:21:9d:4d:ee:e2:d1:01:dc:fa:b9:
b2:ba:99:d8:04:84:00:ae:49:77:d2:a6:57:02:eb:
ce:a0:47:63:46:96:79:80:e7:7f:bd:a2:3e:ff:0d:
39:34:52:34:3c:2d:23:78:f7:bd:ac:77:10:49:1a:
ce:3a:8b:a6:01:41:41:90:72:58:4d:f1:c3:25:e4:
2a:11:e1:43:db:fa:fa:55:97:f9:3a:db:e7:58:ce:
b3:17:4b:fa:8d:7d:af:e2:6a:c7:70:4b:ab:ef:46:
b2:dc:dc:4d:74:9c:f7:1d:e2:10:12:b7:22:d9:bd:
65:0b:59:e0:f2:b8:ff:ce:9c:ef:5f:b2:1f:7f:0e:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DE:8E:EF:32:9A:07:6D:78:CB:70:99:24:17:52:AD:3F:D4:33:29
X509v3 Authority Key Identifier:
keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:0e:5d:8b:26:03:36:1e:17:1a:46:85:c5:d1:f2:a1:5a:b1:
b5:61:9e:de:02:08:8d:7f:b2:0d:76:ed:83:e1:14:d7:20:29:
be:fb:c3:1c:7d:4d:9b:f9:6f:df:35:20:82:5b:ab:fb:cd:1c:
e8:ce:03:27:82:c0:3b:0c:15:74:e8:ea:2f:5f:29:7f:68:22:
40:1d:9a:8b:33:ae:78:1a:82:b1:55:7a:67:ab:47:30:fd:90:
ce:40:4e:70:8e:5f:83:90:00:b8:a8:b4:c9:d4:06:b5:21:1a:
70:d7:95:fb:49:f7:e8:f3:74:3d:4a:5a:58:10:1b:d3:21:f9:
85:9d:5e:78:f0:1e:e7:19:07:c6:17:31:c9:8b:f0:6b:14:c3:
08:23:e8:37:c5:28:93:f0:dc:3c:5e:ea:bb:78:96:1d:bd:ac:
7f:f6:68:00:a1:5a:4a:a6:64:be:e1:8d:65:b3:62:5a:ea:78:
b1:e9:27:90:7e:42:12:2c:63:59:59:6e:b6:d1:66:55:4e:d7:
68:8a:5f:9f:c3:9f:07:a6:10:84:59:d6:c5:9c:75:61:84:9f:
57:d7:67:eb:0a:8e:66:d6:10:63:32:b9:0f:69:78:97:03:e7:
45:23:49:be:f1:95:c9:56:be:93:30:8a:aa:5c:ad:80:17:c9:
c2:03:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:56 2026 by rpki-client