
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
File: GAVt61gONXTxSD5mnFqkLlhOzrs.mft (raw, json)
Hash identifier: FBdQ2z27SYqnnz/ZH5HjDVZgxeBc9Xf4/MpvxFIAIos=
Subject key identifier: 15:B0:76:49:53:55:F3:B0:B8:18:F8:1D:14:BE:26:DB:6F:8A:73:FF
Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB
Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
Certificate serial: 1FBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
Manifest number: 1FA3
Signing time: Tue 24 Mar 2026 15:55:27 +0000
Manifest this update: Tue 24 Mar 2026 15:55:26 +0000
Manifest next update: Tue 31 Mar 2026 15:55:26 +0000
Files and hashes: 1: GAVt61gONXTxSD5mnFqkLlhOzrs.crl (hash: Rk9QgFm2JNVGmljBvA4JBTv4r6znI9hanC8v/ekrSyg=)
2: 764D8698EA9111EAA035205FC4F9AE02.roa (hash: 9ufHj/6r6if7zqd9kKJC4tXMn88VrHi46Sq/Hl8dabA=)
3: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (hash: C7P5AcEx090pAuIHt/BLFBDZ2T8kalGct8M8n/mgbS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl
rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8126 (0x1fbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A0CB, serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
Validity
Not Before: Mar 24 15:55:26 2026 GMT
Not After : Mar 31 15:55:26 2026 GMT
Subject: CN=69c2b3ef-a22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:69:bc:f2:ca:66:08:a3:1b:7d:c2:7a:59:
be:13:1a:76:8c:2e:80:11:c7:b9:15:c1:0c:97:63:
9d:83:ed:25:d9:a8:14:4d:0f:40:27:c3:04:7c:70:
af:99:b9:bb:ea:41:79:08:65:a4:3f:a4:47:8b:91:
d1:25:0e:36:4d:74:7a:2d:ba:84:c0:36:dd:1d:82:
70:00:1e:91:f8:01:45:10:03:b9:33:0d:41:4b:42:
a4:1c:3f:ff:a8:34:c9:d8:16:8b:ce:99:e5:df:46:
7a:ca:1f:e0:35:6f:6e:6f:ed:04:f0:d3:20:a1:31:
b6:9c:b7:09:60:10:5d:87:77:d1:1f:0a:b4:f7:4a:
1e:df:34:6d:81:4b:64:83:02:66:1d:ce:ee:41:8d:
03:13:7b:c5:45:e7:2a:35:41:5e:bd:af:6f:99:9d:
b7:2a:a2:ce:16:46:70:df:04:34:c4:22:74:b8:b0:
6b:da:63:02:41:c3:bf:61:3d:ec:40:b0:6e:ee:15:
f4:b7:bd:a3:fe:d9:a1:b6:0d:e9:d8:1a:5d:a4:f4:
6f:e4:93:55:e6:30:72:42:64:85:a8:dd:de:e1:f6:
ef:1e:64:5b:44:2c:20:48:2f:86:b4:e5:1f:40:3f:
11:cf:22:b3:b9:9c:15:e6:45:e3:79:1d:4b:6c:f6:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B0:76:49:53:55:F3:B0:B8:18:F8:1D:14:BE:26:DB:6F:8A:73:FF
X509v3 Authority Key Identifier:
keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:06:2a:29:5b:e4:21:bb:40:a5:df:fe:be:cf:78:83:bf:03:
78:45:3b:ec:18:61:2e:71:1d:dd:02:fe:81:bd:08:57:17:ae:
08:fb:0e:bf:ca:69:ed:81:92:d9:7d:27:2e:aa:33:13:f7:df:
f4:94:f9:16:64:42:9a:18:20:5d:14:28:17:f2:71:20:1c:83:
07:84:c9:87:18:38:82:2a:ca:53:48:19:7d:15:fc:ae:26:dc:
d2:fe:3a:59:78:b4:7e:4c:1d:58:57:dc:a4:80:b9:dc:5c:00:
c2:22:b6:ae:f1:c6:81:f1:75:6b:cb:43:b6:cb:aa:ac:c9:e0:
65:93:07:fc:13:3e:6c:01:a2:2e:c0:c3:30:ca:17:a8:6d:4c:
8a:e7:2f:41:20:00:42:24:89:4b:a1:ba:4d:ab:c7:7c:48:97:
e8:da:31:82:c8:01:dd:b1:e9:6a:b4:34:56:b5:08:da:65:04:
95:e1:e3:79:12:98:22:18:eb:96:53:a3:41:75:1e:d5:41:48:
e9:fa:5a:90:04:98:72:b4:b8:d9:b9:dd:3a:10:6a:09:79:0d:
0d:da:5e:37:f5:d6:24:fd:36:b5:a2:02:bf:62:4a:ae:8e:b0:
d5:9e:5b:51:00:e1:80:a2:e6:5a:89:bc:b8:e9:0a:62:44:dc:
a5:78:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:12 2026 by rpki-client