
$ rpki-client -vvf rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
File: GepbRfAegL4KdtzayZJrbmdC8iE.mft (raw, json)
Hash identifier: JH7nwG/3wzoCQ3hd+oY1eBMkgBdrgSnd/07KfbhMEnQ=
Subject key identifier: 85:34:79:3F:02:BC:63:92:8E:15:B5:78:20:A0:FF:D7:D4:22:14:54
Authority key identifier: 19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21
Certificate issuer: /CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221
Certificate serial: 0816
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
Manifest number: 080D
Signing time: Tue 24 Mar 2026 20:51:15 +0000
Manifest this update: Tue 24 Mar 2026 20:51:15 +0000
Manifest next update: Tue 31 Mar 2026 20:51:15 +0000
Files and hashes: 1: GepbRfAegL4KdtzayZJrbmdC8iE.crl (hash: LAtyL3cU+cvSIhb7UKQNpnRbItyLhP57B6I0fiDrwLA=)
2: B2356D1A180911EB962CB216C4F9AE02.roa (hash: M0OgX57VoJtOlKQD31xLPVZDI9E+FhCt3dSUg36Gqbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl
rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070 (0x816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915617D, serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221
Validity
Not Before: Mar 24 20:51:15 2026 GMT
Not After : Mar 31 20:51:15 2026 GMT
Subject: CN=69c2f943-9da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:85:83:d0:98:4d:36:83:50:d5:96:37:1c:
35:6f:48:30:5c:c4:a1:6b:22:ba:72:90:52:5e:8c:
df:14:ca:3c:4a:e4:02:3e:ea:8b:55:60:20:c5:ae:
bc:ac:d2:56:a9:36:b0:fb:18:ba:3e:f3:b7:0d:34:
9b:66:92:fc:52:53:e5:15:80:68:09:82:2c:a1:36:
b9:20:b5:1e:3a:b9:bb:2a:69:57:d1:81:54:71:2c:
87:a7:ce:ac:5a:61:86:41:c9:ec:ef:0d:14:2a:5d:
e8:fd:53:8b:cc:e0:84:bc:00:ee:03:99:2b:b5:87:
72:1f:47:e4:05:ce:0d:99:72:a5:a8:e3:f0:68:4b:
0e:0f:d0:ac:19:55:52:24:38:9b:a6:6b:50:e6:89:
3d:45:9a:b7:b2:c1:ba:8b:17:22:e1:ba:e9:90:10:
96:c5:b4:34:22:27:fb:1f:6a:e5:4c:fe:00:e5:ea:
8a:a7:c9:2a:58:7a:ec:fa:fd:0e:dd:da:7b:7f:13:
60:1c:e1:f3:76:5e:12:16:95:f5:d7:92:e4:e3:0e:
d0:32:f1:6e:4b:ef:a7:89:8e:a7:64:8f:d3:07:bf:
cd:9d:f6:ed:9d:3e:f8:58:02:7d:1d:17:df:e6:87:
a4:2a:a3:ee:d5:2a:09:04:ce:07:00:0a:ba:ca:67:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:34:79:3F:02:BC:63:92:8E:15:B5:78:20:A0:FF:D7:D4:22:14:54
X509v3 Authority Key Identifier:
keyid:19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0b:fc:73:1d:e9:2a:6c:65:86:58:e2:f7:99:1a:d1:e9:95:
5d:a1:18:60:96:29:4e:95:11:30:38:f9:7c:35:3c:de:ef:23:
bf:36:30:3d:29:d0:18:97:53:7a:1c:f8:e1:97:2c:cc:80:44:
7a:f3:4b:2e:1b:b6:c8:a2:8f:6d:6f:fe:c7:e2:8c:94:29:96:
56:82:1f:ca:30:59:89:ec:3f:16:86:e9:a8:7e:f4:93:c8:b1:
47:6c:6d:f2:a1:36:9a:4e:16:6b:18:bd:a4:61:fe:84:f3:cf:
04:81:5b:f6:95:3d:43:af:f1:c9:14:c8:0e:0c:ca:06:fc:59:
ae:57:43:02:38:d6:af:8b:e2:54:e3:ce:8d:0d:17:91:1c:35:
ab:6e:d7:ae:e1:4a:74:88:1c:f6:86:cb:8e:d0:82:6f:0e:19:
c1:04:6b:88:13:e5:3f:bd:ae:b1:3d:ca:3b:af:df:95:f7:fe:
27:40:b7:53:5b:6c:6d:d4:d4:40:05:2a:fa:18:47:ea:9e:f1:
81:89:27:93:d8:77:1b:a5:2c:5f:fa:81:3f:56:5b:cd:56:44:
93:40:cb:e6:b7:3c:59:ab:65:58:e5:a5:85:39:c0:02:fc:3c:
cc:ef:2b:ce:b5:b2:9d:fd:02:d7:32:b4:7b:9e:a4:d8:47:e3:
8c:c6:53:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:13 2026 by rpki-client