
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
File: gm447HHypIW0sk7-zoRjJQqEoLw.mft (raw, json)
Hash identifier: q85hoCxGXzkk+7e2llRrf2g/rEeXd0+OBUk1Wbop9sA=
Subject key identifier: 71:1E:72:93:4B:02:32:52:00:ED:CC:BD:F7:65:00:88:4F:23:E3:4C
Authority key identifier: 82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC
Certificate issuer: /CN=A915A0EE/serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
Certificate serial: 020F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
Manifest number: 020B
Signing time: Wed 25 Mar 2026 02:20:53 +0000
Manifest this update: Wed 25 Mar 2026 02:20:53 +0000
Manifest next update: Wed 01 Apr 2026 02:20:53 +0000
Files and hashes: 1: gm447HHypIW0sk7-zoRjJQqEoLw.crl (hash: droINevn6IhXFR+rVjXtffbcaM4UvbRb2+CPX1xFg9I=)
2: 6A3BE658401B11F080319527C4F9AE02.roa (hash: G0vlI3Y4+8WgZsJeIBEokHzCEUdmWiGvtc5JLb9JKsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl
rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0EE, serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
Validity
Not Before: Mar 25 02:20:53 2026 GMT
Not After : Apr 1 02:20:53 2026 GMT
Subject: CN=69c34685-8f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:4a:3f:76:b4:67:52:16:f6:fc:b3:39:4a:
f2:d2:c9:e3:24:b8:e5:2f:82:4e:d5:f5:85:75:5f:
e4:bc:a1:24:a6:87:93:fc:b1:91:af:fd:d3:c8:72:
26:0a:c6:56:7c:76:2a:62:e0:7c:4c:1d:32:73:48:
51:70:15:8e:d6:44:2c:8e:9b:8a:06:df:ab:fb:c6:
48:ea:e8:ae:2e:d9:84:ed:0b:b2:3e:7c:4a:f8:94:
3f:e2:10:2b:6d:9a:33:4e:7a:a0:e5:80:c4:f7:ca:
09:6d:02:98:f1:05:c3:e7:dd:59:1b:90:85:ce:9b:
bc:e1:08:6c:1a:56:f5:66:30:9f:0b:0a:77:50:59:
19:15:87:f2:c6:11:2a:d0:0d:9c:31:3f:57:f6:86:
dc:5f:7e:b9:3f:89:cb:f4:a7:d1:b3:21:f4:6b:6a:
6d:e5:24:12:47:4f:74:40:62:01:45:e8:76:16:70:
df:ba:72:40:22:1c:75:a1:2b:30:d8:8f:51:b0:22:
da:8c:62:e5:bc:da:f8:7d:80:4e:5e:f6:8e:f7:78:
23:de:aa:50:8a:8e:51:35:09:15:47:e7:01:d8:05:
7d:e8:ef:53:17:2d:04:19:62:d7:27:80:00:0c:42:
82:7f:3d:27:ea:93:cc:32:bb:40:a4:ec:fd:ce:b5:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1E:72:93:4B:02:32:52:00:ED:CC:BD:F7:65:00:88:4F:23:E3:4C
X509v3 Authority Key Identifier:
keyid:82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:63:ce:19:5e:be:e6:0a:6f:1f:23:de:56:f2:23:f4:be:14:
a9:4c:09:48:f7:63:a5:67:0d:81:5a:45:89:d2:ab:fe:83:dd:
c6:8a:e5:4c:09:f3:85:0d:9f:60:89:ad:01:84:fe:0f:c9:63:
74:1f:68:bf:4a:08:f8:d3:36:8d:26:f3:10:69:ea:49:ee:3c:
c3:10:ea:45:d9:0b:a6:1c:4c:0c:04:53:c5:e0:eb:11:10:24:
4e:90:92:c3:9e:b6:38:7d:5a:f5:1c:57:87:b2:0b:8d:4c:57:
11:43:31:c2:9c:f8:24:f7:f9:ce:ff:43:f7:67:66:fe:1d:cc:
4a:48:28:db:77:0a:de:9b:34:84:f5:a6:09:92:af:e0:de:8b:
25:20:53:97:1d:89:4b:37:32:9e:21:40:55:81:a8:c8:3f:84:
51:c5:df:b9:91:f9:f3:5d:ad:8a:81:c7:63:5e:de:9e:93:69:
59:9e:8c:56:17:c6:a8:1e:b8:51:d5:70:a0:c3:75:8a:6d:3d:
01:0a:76:95:a9:66:08:ec:dd:17:05:12:09:a4:8c:72:5d:6d:
d1:52:6f:89:e5:81:b1:17:40:a4:1c:1f:16:c2:7a:9b:0b:ab:
69:99:dc:54:fe:39:89:80:1e:15:75:5b:72:a7:6e:d5:af:38:
9c:27:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:23 2026 by rpki-client