
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json)
Hash identifier: V5Gz3EIPTTbB5IjjvexA4JPj81/LwWxOfGLi9jb0oKM=
Subject key identifier: 44:BD:EA:EE:B0:D0:84:88:39:23:8E:57:E6:CE:0B:A7:C9:FA:5B:BE
Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Certificate serial: 06B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
Manifest number: 06AE
Signing time: Tue 24 Mar 2026 22:05:41 +0000
Manifest this update: Tue 24 Mar 2026 22:05:41 +0000
Manifest next update: Tue 31 Mar 2026 22:05:41 +0000
Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: THHH+MObagnusATWAs9rVg2qMI48CJKz7nF8ORzro4Q=)
2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: M577gprOgopViMBlM2br8rPqwyVug+teBZ5+ccpEPA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1718 (0x6b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Validity
Not Before: Mar 24 22:05:41 2026 GMT
Not After : Mar 31 22:05:41 2026 GMT
Subject: CN=69c30ab5-e215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:1c:56:0a:17:e5:18:ed:95:7f:74:1c:27:
ad:81:cf:b0:ec:df:02:24:c5:4e:c0:5c:82:2c:08:
ce:82:05:32:08:06:fc:4a:55:41:8a:96:f9:f5:f6:
61:33:87:c6:21:86:cc:23:15:37:83:ee:fe:36:db:
8a:ab:e0:9d:d1:6e:71:e1:79:b2:3e:74:52:d3:2b:
69:e1:44:bf:81:22:1d:66:4c:9a:c2:16:1b:cd:22:
01:99:2d:73:a9:4e:49:d8:51:ea:22:69:a8:7c:5a:
b3:db:17:6c:77:69:de:89:c2:62:f6:bd:e9:0d:f2:
17:b8:19:fa:a2:2c:ac:fe:50:f3:5a:71:7d:eb:49:
13:7e:a4:90:6b:6d:da:e0:0c:f6:b6:7c:8e:7f:36:
8a:3e:11:e0:13:3d:54:84:59:15:3c:6d:de:37:f4:
b5:4f:99:bb:4d:a2:7e:e0:ed:98:25:1d:ca:73:fa:
c7:76:da:0e:35:44:93:10:86:a1:f3:71:3e:bb:69:
d8:92:b8:84:9e:5b:2d:47:8f:73:3f:03:fe:fe:86:
55:45:94:fe:c9:77:f0:5e:2c:6b:31:67:b1:40:5c:
63:40:ec:04:a3:25:22:68:f3:b7:f8:58:9b:16:68:
bf:d8:51:44:9b:79:12:af:b4:e6:df:eb:fc:60:8e:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BD:EA:EE:B0:D0:84:88:39:23:8E:57:E6:CE:0B:A7:C9:FA:5B:BE
X509v3 Authority Key Identifier:
keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f6:ee:e9:63:58:08:17:56:42:71:c4:08:9e:70:01:ac:39:
3b:c9:cc:c3:ae:50:50:ef:5f:aa:6b:10:e8:13:e9:92:8b:17:
32:26:a0:ef:a7:db:42:b7:03:a7:e6:17:07:b9:06:05:cb:f9:
cc:36:5b:a3:1c:74:8f:d0:eb:d5:55:2e:01:f4:a9:e8:98:1f:
b2:6e:38:56:31:7f:0b:ca:d5:53:2d:a8:38:44:46:24:c0:ad:
98:9f:f4:f2:aa:1a:91:e0:65:29:cc:e0:89:fc:af:8a:11:12:
18:b0:c6:8b:55:b1:29:7d:91:a5:a0:ed:93:de:79:b8:11:db:
ba:b9:36:41:78:d9:41:d2:09:a5:02:a7:05:0d:8e:26:c9:74:
49:eb:b2:93:d3:e0:36:82:9f:97:e0:c4:41:98:90:3d:59:a1:
2c:34:72:98:a9:10:a0:82:9b:af:11:ef:47:5e:2d:e0:46:49:
73:27:f6:a2:53:5a:93:88:91:27:66:24:51:7b:cb:2f:b7:69:
b7:20:cc:15:0a:b4:82:0d:4d:2e:5a:1d:33:3e:35:ef:6b:50:
58:b1:f5:51:e3:29:28:48:9b:e8:fb:1d:7d:64:6f:de:d4:65:
33:f8:bc:d5:5f:bd:71:7b:92:db:c1:c2:5c:1f:06:03:ff:f4:
36:93:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:03 2026 by rpki-client