
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json)
Hash identifier: kkZnScQ/IW1Zxi52R0HcD+EH/d3Ht00rmXiAI66k3GI=
Subject key identifier: FE:1D:2A:87:DF:3C:C9:55:EB:84:D7:B8:BB:DE:92:BE:F5:09:73:9D
Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40
Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240
Certificate serial: D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
Manifest number: D4
Signing time: Wed 25 Mar 2026 05:55:00 +0000
Manifest this update: Wed 25 Mar 2026 05:55:00 +0000
Manifest next update: Wed 01 Apr 2026 05:55:00 +0000
Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: sO0LYonbots79+dbNLFtj4Jc4Sqd42H8AHnFd6fTfTU=)
2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: wkTh9Y52qCH1kUygnzzHUYqH5OavzN/aAEX9D+Z5fho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl
rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240
Validity
Not Before: Mar 25 05:55:00 2026 GMT
Not After : Apr 1 05:55:00 2026 GMT
Subject: CN=69c378b4-c9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:58:71:54:6f:a9:19:d0:d4:4c:55:3f:7d:
ee:4e:75:ac:56:b3:ae:de:42:b6:a7:56:b6:7c:0e:
da:b4:c7:56:d7:e9:08:48:35:9d:0a:8e:bc:f4:b4:
4e:58:d6:6a:1b:17:32:86:11:78:a3:a4:5c:82:62:
d6:3f:e2:43:9c:ed:3f:f5:2b:5f:16:57:e9:17:cb:
3b:12:51:dc:03:b0:75:f2:c0:0e:98:94:13:26:20:
74:1a:0c:34:3d:13:a2:c9:58:74:3a:57:f9:d7:a1:
17:a2:c7:71:83:c4:ea:ac:b6:7e:ca:02:86:5c:56:
4b:ed:d8:68:1a:42:75:cd:31:67:dc:24:95:47:11:
c5:fe:ad:e3:c0:2a:dc:66:8b:25:45:6b:33:26:6d:
f8:2e:09:05:35:ae:6a:71:57:29:ae:d6:f1:ce:db:
c6:7e:bf:78:99:5d:63:6a:d8:ae:8f:e2:14:6f:03:
5c:83:cd:27:75:c9:61:3f:54:cd:93:bc:22:58:63:
df:d7:f9:14:40:99:ad:6d:3c:5f:83:98:09:04:6d:
12:1d:7e:ff:77:9c:be:7a:0c:f2:aa:5a:90:c9:98:
42:c3:d7:62:70:a7:d2:13:d4:76:7c:00:7f:fb:60:
8d:e0:d7:d5:4d:dd:fa:3e:65:70:fb:7e:03:a1:98:
c6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1D:2A:87:DF:3C:C9:55:EB:84:D7:B8:BB:DE:92:BE:F5:09:73:9D
X509v3 Authority Key Identifier:
keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:9a:af:53:9e:8c:a0:bd:7f:9b:47:88:2c:8e:25:29:e2:5b:
b6:10:1c:d1:0a:dc:76:96:a3:ce:49:a3:81:cc:d9:e7:0e:c3:
ea:fb:74:14:9b:45:f8:fa:c1:a7:4b:a4:cb:f1:49:5b:b7:c9:
df:7a:68:85:fb:e5:3b:81:af:4d:e1:c8:03:b5:ea:fd:b3:45:
18:7c:33:7d:ef:42:9f:70:ee:bd:93:45:ab:38:91:e1:d9:1d:
24:57:38:18:9c:e6:e5:ec:cc:57:d9:05:c9:6c:3d:2f:11:bc:
c7:85:dd:e1:2f:c9:34:ea:44:6b:3d:03:5b:11:31:e0:85:f0:
c6:b9:40:e8:96:f6:d7:92:26:ac:47:35:1d:12:78:b1:8d:c2:
c1:32:0d:34:d2:18:0d:55:64:38:4a:5b:6e:e0:8a:21:ea:34:
cd:a4:1b:38:86:ad:1d:53:ef:5c:f3:dc:bc:e3:ad:fb:9a:49:
56:48:2e:70:65:cf:59:f6:5d:37:94:9e:c6:eb:eb:90:f4:64:
8a:1b:81:84:2f:3f:bf:ad:b7:ce:af:e4:f5:00:52:7c:9b:60:
bf:66:a3:55:05:2e:29:d1:4b:a8:18:11:79:a2:f6:66:64:c2:
0d:78:d7:65:4c:c7:4b:d5:f2:c4:68:cf:91:9f:1b:1d:f6:2e:
05:97:cb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:21:21 2026 by rpki-client