
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
File: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft (raw, json)
Hash identifier: 5f69k86qfuLQCn1ay+6QSpHpHnNpFPvvdnQHd88sUvU=
Subject key identifier: FA:FA:C6:2B:05:EB:D1:2F:B8:79:00:93:D0:21:35:CE:83:78:9D:A1
Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7
Certificate issuer: /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
Manifest number: AA
Signing time: Wed 25 Mar 2026 06:25:11 +0000
Manifest this update: Wed 25 Mar 2026 06:25:10 +0000
Manifest next update: Wed 01 Apr 2026 06:25:10 +0000
Files and hashes: 1: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl (hash: eu2AtBX6U3rEFkW7vzeWkilQIBDytlRXbxnJsWgjKzY=)
2: D7605790272B11F08FF39632C4F9AE02.roa (hash: nr6JciLI3Ka3QyKzBxLF/eHWC7KMSAIgpipIdaBxLYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl
rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7
Validity
Not Before: Mar 25 06:25:10 2026 GMT
Not After : Apr 1 06:25:10 2026 GMT
Subject: CN=69c37fc7-5712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:46:e6:3e:78:cc:12:25:08:bd:d7:cb:6b:
6a:92:60:14:b2:b3:ce:b2:91:d3:0b:c5:db:5a:ff:
69:a6:79:1f:b7:eb:16:e0:78:de:7f:de:92:0a:e4:
75:5d:df:bf:33:e7:fd:3e:02:36:4e:0c:d1:03:38:
0a:0c:fa:45:fd:a9:7b:7a:75:0e:0b:17:77:3d:e2:
61:6d:49:8d:ec:cd:da:52:c2:55:f9:09:bd:21:5f:
a1:c1:c6:41:ea:3f:ff:f1:4e:f6:5c:82:f0:8c:56:
6e:30:08:8f:af:dc:fc:07:85:6e:df:61:34:ec:19:
e6:2e:08:92:95:ec:02:56:9c:d7:05:f9:53:ce:be:
ba:f2:f9:ef:c1:55:d4:32:82:14:0a:8f:ec:52:b6:
41:99:71:14:d9:2c:21:76:b6:be:42:3b:de:be:ed:
ce:77:1b:07:cb:f6:9a:ea:40:1f:76:bc:9d:66:d2:
29:ed:f6:9f:41:71:c3:0f:95:38:2e:79:4e:0e:89:
ad:50:5d:7a:41:72:1a:5c:d0:28:3f:bb:19:e3:69:
9a:e0:e8:00:e0:49:b2:d2:4c:46:cc:fc:ba:10:a6:
9a:a2:9c:74:dd:fd:81:fe:c1:1e:28:c5:c0:09:6a:
28:bb:bd:36:58:16:68:e1:9d:22:f0:ef:0f:d1:5b:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FA:C6:2B:05:EB:D1:2F:B8:79:00:93:D0:21:35:CE:83:78:9D:A1
X509v3 Authority Key Identifier:
keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:0a:ec:6d:c3:0a:a9:6e:2d:89:42:f2:fc:f3:8e:a2:98:0f:
0a:1f:6f:46:4f:e5:d7:90:a1:6b:31:91:f6:71:9c:a9:ff:8c:
04:da:00:08:41:e3:f6:00:76:26:32:ab:f3:3e:c2:ec:ef:5a:
de:da:00:b3:65:7b:95:c6:e2:fd:08:48:66:0e:92:c8:2c:f4:
f3:9e:93:e6:3c:3d:62:b0:48:8d:0b:9d:98:91:5d:b1:e2:32:
e3:b4:fd:44:84:6e:35:91:85:c0:3d:5f:e9:3f:32:ba:51:7c:
c7:a9:ab:58:2f:c4:bd:2c:44:ce:30:01:ff:8c:f3:dc:d6:5b:
42:c9:a2:b3:cf:b2:12:1b:70:51:85:7a:e8:bf:03:a9:09:f9:
e0:a2:51:f7:c4:57:dc:7b:6e:11:74:93:cd:fa:81:6c:65:57:
82:de:28:c6:ad:12:4a:a2:a6:52:15:ed:b7:02:ef:1f:03:cb:
74:97:08:70:1d:09:66:c0:2b:c3:a2:1a:5b:7d:96:87:32:f0:
98:25:f2:0a:82:9b:d4:95:ee:1a:8b:a4:c2:04:f1:42:77:2d:
63:92:f3:ea:82:cd:ec:96:38:9f:ce:43:8d:d6:f8:fb:f4:ee:
3b:dc:0d:fc:d8:2f:9e:98:6d:bb:f6:58:84:95:1d:d5:4f:2e:
30:f6:08:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:57 2026 by rpki-client