
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
File: gMgrnUJmF5jRouALzqsG8-Tho14.mft (raw, json)
Hash identifier: zIOZzGWufNidq1WUY2lvG/PXLF0P7drRzhGmxUrWGpY=
Subject key identifier: 13:C8:0C:33:4E:F2:17:8A:E7:53:C8:6B:B6:33:E2:C2:99:6C:E7:AD
Authority key identifier: 80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
Certificate issuer: /CN=A915B358/serialNumber=80C82B9D42661798D1A2E00BCEAB06F3E4E1A35E
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
Manifest number: 29
Signing time: Wed 25 Mar 2026 07:57:27 +0000
Manifest this update: Wed 25 Mar 2026 07:57:26 +0000
Manifest next update: Wed 01 Apr 2026 07:57:26 +0000
Files and hashes: 1: gMgrnUJmF5jRouALzqsG8-Tho14.crl (hash: 4BzGtSsGqj+56IXX9bBPqV0IBKfMZbO5+RcrqCtFO+8=)
2: 6EA43FD8F1C311F0B949DD23396F56BC.roa (hash: f5n4m6nXywP280ii3RvUIrsXSPmcfdVHv8484hmnrW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.crl
rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B358, serialNumber=80C82B9D42661798D1A2E00BCEAB06F3E4E1A35E
Validity
Not Before: Mar 25 07:57:26 2026 GMT
Not After : Apr 1 07:57:26 2026 GMT
Subject: CN=69c39567-9f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:8b:12:e2:4e:3d:b5:0d:8b:2d:80:a9:01:
bf:0e:9a:25:52:e5:ed:1d:82:6e:35:b2:90:08:e5:
9f:1d:16:26:ee:8b:7d:e0:6c:c8:43:5c:19:16:44:
15:f1:6c:dc:ce:09:8e:3f:f8:59:80:6f:87:2f:f3:
99:33:09:94:7b:40:8a:5a:82:95:f0:6d:c5:c4:53:
42:20:73:fc:51:5e:3a:ce:e3:63:fd:09:75:e3:bd:
7a:a0:27:45:b1:e4:06:cf:94:ab:fd:91:24:44:ea:
46:84:b0:bb:13:d2:7b:fc:5a:bc:ca:6b:50:cf:6c:
c5:81:17:bd:ad:67:58:8b:42:80:ea:63:65:8e:25:
c3:24:b2:38:49:de:bd:34:55:51:28:e3:7d:e0:4f:
a2:b4:5f:60:4d:1d:3b:8b:71:1f:27:09:3e:33:8b:
51:01:67:53:bf:3e:9c:a0:84:ba:72:f7:89:3d:78:
8e:72:8e:36:17:9a:f1:ce:ee:ce:ef:8f:e4:86:08:
de:be:8a:0f:b3:16:ec:d3:b3:21:d7:39:af:62:69:
fa:06:28:d2:93:01:14:22:4a:2b:40:24:d0:07:99:
bb:27:da:7b:36:3f:93:05:67:01:ac:4b:11:f5:e5:
6f:10:b7:4b:37:85:10:ac:bf:6e:2d:53:e7:60:4b:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C8:0C:33:4E:F2:17:8A:E7:53:C8:6B:B6:33:E2:C2:99:6C:E7:AD
X509v3 Authority Key Identifier:
keyid:80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:79:e6:c3:91:8d:a9:b8:fe:1d:59:ac:55:19:48:70:49:cf:
79:9f:68:cb:e9:53:9a:c3:44:4d:70:14:26:36:f1:21:ee:87:
c2:9c:a6:d0:c4:92:59:2c:ad:63:3c:9c:ce:9d:44:35:c7:5d:
f5:0d:29:ba:57:35:22:00:6a:f1:be:82:da:5f:7c:57:77:89:
fe:6b:81:9f:6d:36:60:8f:55:9b:cd:9f:92:33:ab:e0:fc:0b:
d7:cf:85:fd:49:c5:04:10:c5:af:51:b6:9b:25:cd:ea:71:7f:
83:2e:d9:a4:46:df:26:4f:ef:d3:16:de:ba:ef:76:12:6e:7c:
aa:82:b2:e3:e2:e7:cd:43:68:e2:67:17:d9:a8:56:99:0e:6a:
33:00:b7:8a:fb:1a:64:90:31:79:35:58:a5:92:79:76:55:ca:
5c:45:04:08:b1:14:01:57:fd:98:e5:bf:dc:6b:ec:9f:fe:c6:
f8:e9:76:88:a1:7a:f3:fd:2f:c2:1f:74:34:7c:78:e7:59:92:
79:4b:88:97:3c:72:0c:67:33:43:f7:66:c1:fe:b6:d7:0c:c7:
c6:13:a5:74:51:4e:c3:3f:1e:c3:f5:f8:46:1e:24:03:06:06:
5e:14:da:9b:06:21:f9:3f:ba:f5:2f:8d:a9:eb:46:b7:a9:90:
55:fb:59:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:13 2026 by rpki-client