
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
File: gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json)
Hash identifier: 2Huz6FJf2zdSOTGwVjr94ed6SvKR8R7DuKhZdkj1JsQ=
Subject key identifier: 3F:D7:03:0B:FB:F4:79:75:8F:5B:09:FF:F0:2F:3C:6B:7C:27:0B:00
Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
Certificate issuer: /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
Manifest number: A3
Signing time: Wed 25 Mar 2026 06:28:18 +0000
Manifest this update: Wed 25 Mar 2026 06:28:17 +0000
Manifest next update: Wed 01 Apr 2026 06:28:17 +0000
Files and hashes: 1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: Ploq/LbW3Tb6YIa5BHvZjqHe1XW7WI91mpcL8qzPWUM=)
2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: eJNqSsgVwpcsQg2beMNYNXlFNiDiSYEYUWJ9Bn6L/vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl
rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Validity
Not Before: Mar 25 06:28:17 2026 GMT
Not After : Apr 1 06:28:17 2026 GMT
Subject: CN=69c38082-a0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0e:dc:21:0f:3e:04:ea:9a:2f:00:4f:cb:5a:
ae:7c:29:15:f2:a4:01:da:ae:d7:b8:cc:e2:20:94:
b0:8c:72:c3:4f:a7:21:cd:e6:30:ba:49:3e:0a:08:
7d:8b:c1:47:a2:84:b8:4e:42:78:4c:3d:5a:14:06:
fa:96:72:17:c8:17:c3:f9:1b:0f:fc:42:5e:04:b1:
fc:07:8d:7c:65:b5:08:2a:98:d8:c1:2d:6d:4d:14:
2e:31:89:62:de:e5:8c:96:90:1b:e1:d2:3d:d5:3b:
c8:25:28:e8:66:82:ce:c8:52:11:56:c3:a7:6e:5b:
f7:30:91:dc:96:b6:4d:0b:a7:0d:79:4b:69:87:a8:
f4:7d:1e:e0:43:65:56:19:7f:bf:f0:1e:05:03:3d:
4f:48:45:ca:43:01:2a:d7:1b:41:ce:f1:b2:7f:52:
ca:b4:a8:fe:6e:78:6e:d1:77:6d:38:ae:ab:a8:42:
60:1a:ab:17:21:b3:2d:c4:5f:31:ff:ba:e2:07:a5:
57:46:3c:7e:ec:2a:7e:a3:52:15:f9:20:39:60:85:
0d:ec:b3:53:24:da:2d:8c:38:e1:e6:04:4e:d3:62:
ec:7e:ff:cb:a1:9f:cb:3a:61:a9:6c:fc:8e:e1:45:
33:27:9b:9a:a4:65:25:42:b6:21:ca:a7:83:94:93:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D7:03:0B:FB:F4:79:75:8F:5B:09:FF:F0:2F:3C:6B:7C:27:0B:00
X509v3 Authority Key Identifier:
keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b3:17:cc:be:49:a8:da:15:84:f5:48:d0:12:93:09:bf:02:
36:bf:14:ad:17:fe:9b:87:ac:0f:aa:0c:cd:0a:52:22:3f:73:
c1:b6:a8:25:a0:d9:94:3c:85:58:7b:9d:2f:0e:ef:a3:fd:92:
aa:3f:d5:94:ba:f2:eb:71:ba:d0:48:df:e7:cd:32:c6:4b:4b:
70:42:6e:7a:d2:ef:e5:23:87:6a:bb:26:7b:6b:71:e2:a9:78:
1d:d1:96:76:72:86:d4:77:12:bc:b6:77:5f:03:ae:32:64:c9:
7e:33:60:99:e9:ce:a0:25:f0:b6:d7:45:b7:5c:a4:ee:f2:cc:
b2:8c:0a:f7:da:04:20:68:b7:13:45:9e:43:99:54:2b:14:82:
db:a1:31:97:18:e5:87:d2:a8:1e:fd:52:0a:f5:84:cc:fe:88:
d8:40:60:86:10:69:40:dd:56:8a:d9:48:18:8c:11:d8:6b:4f:
21:bb:8a:c8:40:ec:b0:bf:6b:dd:ea:a4:74:63:c0:a9:60:a5:
cc:d1:08:36:39:69:b3:00:03:cf:26:9b:18:4e:ce:cd:db:50:
10:21:b7:e2:96:05:c6:df:72:1c:43:94:b1:23:af:10:e1:60:
90:89:94:97:fa:41:30:79:20:01:43:29:e5:c7:5c:81:e9:73:
8e:c8:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:25:40 2026 by rpki-client