
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
File: GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json)
Hash identifier: 5mvEoeeJdAQlzqU3KFf4tXC5xzOSkIFrbP7Kh63mID0=
Subject key identifier: F4:C5:8D:D8:70:4F:4E:5B:A2:DD:E1:28:43:4C:C9:15:09:D0:9A:BE
Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Certificate serial: 0718
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
Manifest number: 070B
Signing time: Tue 24 Mar 2026 21:42:42 +0000
Manifest this update: Tue 24 Mar 2026 21:42:42 +0000
Manifest next update: Tue 31 Mar 2026 21:42:42 +0000
Files and hashes: 1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: iD4JwQcp3ecNc33b8/zurtCOgoOV9SeU1X6t0vtxkwc=)
2: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: ru7koRfv5BK76e7LZX8DgS3H7EAsvoHWWsynZ+iius0=)
3: 753CE1E6814411F0AF823466C4F9AE02.roa (hash: yzIzUBPrHypmilwZ97hmXQLxuQTPjTDzfB9emwk1+Is=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1816 (0x718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Validity
Not Before: Mar 24 21:42:42 2026 GMT
Not After : Mar 31 21:42:42 2026 GMT
Subject: CN=69c30552-fe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:67:4e:2e:73:08:32:a5:5e:74:bf:4c:8c:
a2:f5:15:11:35:be:c1:3c:9a:b6:eb:48:5b:ce:9e:
84:bf:07:32:54:62:a8:93:fa:8f:22:85:25:ef:42:
de:bd:49:17:a9:df:2a:e4:1c:2e:5a:9f:50:b4:b9:
2b:be:b7:ce:ac:5f:ca:46:00:2d:ad:85:53:e4:d4:
a5:c2:e0:a7:c8:a3:2c:26:1c:12:13:4b:ca:0f:42:
7d:08:0d:b3:a8:1f:70:e6:d1:ae:61:5b:89:db:23:
15:b7:df:62:a7:7b:7b:1f:85:d2:f8:1d:c8:2a:70:
ae:7b:5f:1f:8b:a5:f1:dc:31:e1:77:72:bb:c9:f6:
1d:68:38:e4:96:40:f6:48:ff:64:1e:f1:3a:8e:18:
61:ae:46:dc:3f:e7:95:5e:f7:5b:fa:c6:f0:4f:5e:
7a:ef:4f:0a:14:f4:20:23:56:2c:3e:06:63:b7:4c:
05:41:d7:78:73:b4:df:e5:3a:b8:8d:fb:03:72:9d:
bb:ae:4e:4a:c1:fa:9c:b7:a5:02:b5:1e:01:59:b6:
6d:a7:9c:7d:8d:6e:d0:45:bd:af:b9:db:2c:e1:3e:
15:b3:c8:41:ee:46:f4:39:0f:c3:58:01:8a:20:57:
a0:74:6c:8b:34:03:02:e0:ac:8b:28:b2:ae:51:68:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C5:8D:D8:70:4F:4E:5B:A2:DD:E1:28:43:4C:C9:15:09:D0:9A:BE
X509v3 Authority Key Identifier:
keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:df:18:81:ae:3e:63:e9:fd:d3:9e:a9:38:28:55:65:93:4b:
5b:4b:bc:ad:db:1a:c0:83:38:f3:10:aa:eb:85:21:8e:ee:a0:
7a:9d:80:66:43:c4:a8:40:87:68:79:22:c5:8f:6c:6c:39:2f:
f6:0e:93:a3:72:88:ac:a8:e7:15:b5:07:94:7c:48:ec:8c:45:
6e:bd:e5:5b:bb:92:79:6d:f6:f4:65:95:b0:de:3d:55:c2:4a:
15:23:ac:b3:42:0f:0e:05:8a:72:5e:45:be:07:f7:ab:6a:61:
6e:0a:8e:34:4b:71:cc:f3:3f:82:a1:15:96:bd:fd:63:af:35:
d4:0d:0a:a6:7b:d1:68:08:1f:09:87:15:02:96:e0:eb:42:80:
66:cb:2a:1c:fe:e6:6c:39:8e:22:a2:70:5e:c8:8a:22:fd:9c:
35:7e:9a:47:ed:0e:61:68:f9:25:27:b7:11:3a:0d:47:9e:65:
ce:c5:cf:1f:0f:39:a6:d7:f2:60:ce:b7:5f:7c:4a:f6:d8:32:
44:a5:40:a2:64:b9:e5:68:94:19:44:bb:c2:92:1c:b1:65:10:
38:46:fa:41:bc:94:11:80:07:c4:6e:58:76:c2:51:e0:08:51:
88:c4:17:9f:54:d3:d5:3a:c6:7b:dd:38:8d:0d:94:b3:bb:1f:
78:3c:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:51 2026 by rpki-client