
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
File: gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json)
Hash identifier: Hjv9erAmrw3piyXBr1jg7PakXLT0H5ehZN3wNlFqq+8=
Subject key identifier: 58:01:4A:78:E5:44:3F:83:92:F3:92:38:11:58:38:2A:43:84:A2:D3
Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE
Certificate issuer: /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
Manifest number: 0151
Signing time: Wed 25 Mar 2026 04:20:15 +0000
Manifest this update: Wed 25 Mar 2026 04:20:14 +0000
Manifest next update: Wed 01 Apr 2026 04:20:14 +0000
Files and hashes: 1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: I9BqAwZoU7as63IXWbEbKKf7LKUT296zLNaRmz2PguA=)
2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: Noab3uEs+xPwuZ2bTIDiOuTeew78OSESSBsHX4WRCNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl
rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
Validity
Not Before: Mar 25 04:20:14 2026 GMT
Not After : Apr 1 04:20:14 2026 GMT
Subject: CN=69c3627e-dd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ac:31:e4:d5:c2:ad:fc:20:f2:a0:dd:e1:b7:
b6:67:62:57:fb:b9:a1:5e:b6:af:48:27:b3:83:a9:
7c:95:e0:31:33:71:40:ff:02:30:b6:f0:79:41:6e:
db:17:df:d0:de:56:83:e7:79:d8:f8:58:a6:e2:4d:
32:f2:f2:e6:46:b5:6c:35:d8:09:f1:50:2e:f5:7d:
34:3b:b1:24:b2:f9:02:b8:70:8a:87:e4:65:24:74:
7c:7f:85:1a:d7:c7:ed:e4:85:fa:51:5d:e5:64:a1:
b1:ba:6f:ec:50:f1:04:92:70:5a:c9:71:c6:f4:c8:
df:37:a6:1c:e9:b3:6e:83:f1:bc:18:1d:4c:f1:3b:
57:52:80:ae:42:3f:fe:bd:47:31:98:a7:97:57:cf:
d0:8e:72:15:2c:79:45:86:e6:20:56:ae:c6:60:1b:
54:6a:63:27:73:cc:3a:41:6d:d5:d4:5d:a6:17:86:
f3:14:02:85:36:ee:ab:d5:93:00:24:02:91:54:74:
20:fb:ba:c5:83:e1:3c:ed:63:3f:b5:3b:9d:fe:6c:
c6:32:75:f9:3b:7c:3b:7d:63:d8:65:33:c7:58:75:
3c:5f:be:ed:a6:84:1c:76:99:fd:26:55:d6:aa:2a:
00:76:b6:61:2b:4a:0b:ea:6c:fe:fa:04:85:37:1f:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:01:4A:78:E5:44:3F:83:92:F3:92:38:11:58:38:2A:43:84:A2:D3
X509v3 Authority Key Identifier:
keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:d1:5f:c3:bb:74:9d:a6:35:de:76:1d:6a:71:40:a1:7d:9f:
12:35:33:3e:78:54:d0:04:0d:d0:3f:c7:7e:b9:7e:0e:50:0b:
7a:b1:35:4f:64:ff:d3:97:df:2d:b6:16:c3:85:48:26:43:31:
96:d6:6c:b4:34:d8:6c:11:79:69:20:b7:b5:aa:4a:03:dc:6d:
5f:2f:4a:88:2a:5e:cb:27:52:0a:21:c5:f2:44:52:b1:13:c4:
9d:97:54:fe:11:37:63:a6:43:f1:36:80:66:75:15:2f:a8:7f:
4f:5d:12:06:16:cf:57:c2:f4:c6:63:05:fa:32:da:ea:84:0e:
da:59:f3:bf:4f:3e:2e:91:c9:13:92:46:1c:20:b5:8a:08:3c:
3f:e0:b8:cb:f3:f0:5a:8e:20:34:2b:03:bf:0f:b8:ee:72:29:
37:a6:a4:a5:e8:c2:f7:b2:af:3b:92:7a:68:f7:b0:0e:65:c8:
55:03:84:61:34:16:28:f8:06:53:89:23:a1:a2:45:e9:5c:73:
08:e2:e8:c2:a3:ff:e6:48:36:a3:a4:75:40:2d:73:8b:9e:58:
0d:54:a1:97:21:92:e4:dd:65:91:b0:a3:fa:c5:21:43:1b:16:
1c:50:4d:69:12:18:8d:4b:49:8c:33:30:76:b1:1d:6e:55:77:
dc:17:c0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:17:28 2026 by rpki-client