
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
File: gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json)
Hash identifier: xftY4SkuJmYJCd/Jdc1PQIH3cfqw5/l2pPjACdssaZ8=
Subject key identifier: EC:E2:BA:5B:BB:74:6E:41:BE:AC:A7:C4:FB:F3:55:B9:DC:CA:AF:B2
Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
Manifest number: B8
Signing time: Fri 27 Mar 2026 06:40:12 +0000
Manifest this update: Fri 27 Mar 2026 06:40:12 +0000
Manifest next update: Fri 03 Apr 2026 06:40:12 +0000
Files and hashes: 1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: ccMQw0MnLWGtCNg6RAp/V3SW4cxo+7fuqFXKAUtGH3k=)
2: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: iS1RAh1nMPiaCmT07O7xAgf1BvaBTAfnVl6oRY7qhr8=)
3: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: JIEsA7areAo/HXr9zawFvTRRX2S0zguLE0PWXUlfIVA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 06:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Validity
Not Before: Mar 27 06:40:12 2026 GMT
Not After : Apr 3 06:40:12 2026 GMT
Subject: CN=69c6264c-32d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:0f:c3:e8:c3:20:39:b9:66:11:73:8f:da:
9b:fa:14:12:61:85:b5:21:40:51:79:e9:52:50:ae:
b2:bf:c4:4e:f5:6d:9e:67:78:9c:a5:cc:de:5d:41:
56:5a:bc:81:87:74:ba:04:16:ad:8f:1d:d4:b7:0b:
db:c5:01:40:47:ee:74:95:57:3b:d5:bd:77:1d:b7:
ca:4e:90:e7:ae:88:d0:d3:bc:b5:94:b3:15:08:51:
8f:56:de:b3:ed:e9:e0:4f:88:60:98:0b:15:a1:08:
5e:6b:f8:ae:1d:1b:38:14:ff:90:d2:ac:cf:9f:e7:
92:56:c6:0c:4b:0c:d8:af:17:32:c1:7e:5e:78:7b:
cf:40:1e:d2:e8:6c:0c:d8:07:ec:b5:36:46:31:a3:
d2:f7:64:d3:dd:bf:b9:e7:1e:b2:d4:f9:69:45:91:
d8:92:66:64:71:28:bf:07:56:cc:e2:79:1b:3c:2f:
f7:b1:42:91:11:fd:71:1e:c7:c7:d7:28:2e:bf:09:
1c:f0:27:53:a4:59:a3:7c:8b:de:86:43:ad:73:37:
53:da:b0:8d:e6:fb:42:3f:8c:4d:89:bb:fc:18:25:
e1:5a:25:05:55:34:6e:8d:7b:84:3a:76:07:ad:10:
7e:51:cb:41:39:47:b5:a5:b1:19:d8:c3:8b:b1:88:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E2:BA:5B:BB:74:6E:41:BE:AC:A7:C4:FB:F3:55:B9:DC:CA:AF:B2
X509v3 Authority Key Identifier:
keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:e9:b3:4c:2f:db:2a:de:36:4e:8a:05:c8:b5:16:63:7a:6f:
5f:a9:a8:c6:89:00:cf:20:33:d1:85:3e:1e:5b:52:59:76:e3:
a5:49:d1:2b:0d:03:68:ff:ff:ae:7b:5f:05:1e:7a:4f:7d:31:
16:a9:44:7e:77:14:54:93:0a:4d:f2:ae:ae:45:e5:3d:ae:e9:
25:55:14:62:a4:b4:2f:d3:31:9c:e7:3e:2e:2a:5d:09:93:0c:
65:36:7b:49:03:cd:21:3d:cd:ed:94:bd:91:22:2c:7d:3a:2d:
c1:40:bb:2c:b8:4b:5b:b4:69:65:f1:c2:52:10:e5:90:35:8d:
f7:0b:56:80:56:8f:64:72:17:ba:b2:dd:9d:7d:c5:fd:f9:18:
05:f4:17:44:1f:55:79:6b:88:24:c5:2f:a6:73:da:8c:4b:ca:
70:75:91:e4:78:ac:f9:8b:75:41:20:f1:b1:1b:c7:30:d4:c1:
67:dd:02:f9:e4:b9:38:85:5a:52:58:5e:a3:08:46:85:cb:f3:
c8:2e:f2:a6:c1:d9:c8:2e:04:79:06:70:46:f2:07:d9:83:1f:
a2:1a:d8:1f:02:92:fe:9f:72:57:4c:81:23:25:f9:45:61:8a:
f6:66:a8:28:53:2b:4c:85:e2:85:6d:df:8d:70:43:ad:92:1b:
1e:76:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:03 2026 by rpki-client