
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
File: G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json)
Hash identifier: WMaH+LimAG7No55iJp54DGUxueVc3tgpxsj7IbI4UbE=
Subject key identifier: 3F:4C:08:7B:30:EE:C4:1C:0B:5D:9C:8B:2B:8F:06:B9:A8:91:82:E3
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Certificate issuer: /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial: 2330
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
Manifest number: 2308
Signing time: Tue 24 Mar 2026 15:46:29 +0000
Manifest this update: Tue 24 Mar 2026 15:46:28 +0000
Manifest next update: Tue 31 Mar 2026 15:46:28 +0000
Files and hashes: 1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: ehJU0aUlqhw/iIyyqjtTOyf/CdKVCi67wCqCY1Evqcg=)
2: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: 7peUVHRk+PQhJWC3EgfTO1c+QPolVUXxC238dGIMM0g=)
3: 27BCA4ECCCAD11F0B8832177C4F9AE02.roa (hash: jEoMcnbvl//p7lD0lzYAw/Hc1FlVvhd843cxzq1inSc=)
4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: nrDtqZzOKVXo2gMciyi4gICGgYqAvv6VbbsJk7cKje8=)
5: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: NWJw87iGPcBaGP0PIOvFnWY4dzwoZ1iihk/1tJetYcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9008 (0x2330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Validity
Not Before: Mar 24 15:46:28 2026 GMT
Not After : Mar 31 15:46:28 2026 GMT
Subject: CN=69c2b1d5-49e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:89:04:89:bd:d2:e8:09:0c:2c:21:02:85:
fd:2d:2b:54:99:26:02:28:e0:8d:8c:4e:86:22:d9:
b4:15:58:3f:5a:de:e9:ad:6d:7f:98:57:ca:8e:6a:
6c:ff:28:92:88:71:e5:e3:b4:99:74:4d:b3:6c:22:
7d:a8:29:45:9a:a6:f3:a6:86:1c:f7:cf:5c:f1:f4:
1a:38:d2:ec:21:38:4a:72:7d:bc:c6:5c:14:ce:d8:
81:6f:f5:fa:85:f5:88:5b:b6:71:8d:7a:94:b0:1c:
74:eb:23:e8:e9:18:f6:0b:23:dc:a1:8c:49:a5:a9:
6f:65:c1:35:b1:e1:50:1b:3d:c1:92:09:d4:e6:db:
f3:ee:ac:80:c1:56:12:e3:10:00:04:f1:97:89:dc:
a8:07:bf:1d:86:91:bd:fc:2c:ad:ef:cd:c3:bd:4a:
9b:82:a3:09:5a:22:01:fa:ad:8c:b1:06:65:f8:49:
da:c4:c2:32:37:8a:24:f8:9e:2b:43:16:59:a8:7e:
f8:60:0b:cd:69:2b:d1:f4:3d:f8:46:c5:11:3e:c9:
ea:c9:10:77:c3:65:3e:c8:f2:6d:f5:dd:54:d5:ba:
89:b9:4c:99:bd:c1:41:b0:b9:76:aa:bf:0e:7e:7b:
ad:05:2e:ad:56:d4:38:a1:c6:e8:4d:70:fc:d9:64:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4C:08:7B:30:EE:C4:1C:0B:5D:9C:8B:2B:8F:06:B9:A8:91:82:E3
X509v3 Authority Key Identifier:
keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:8e:53:8a:6e:05:f8:d3:0c:f1:41:c0:4d:20:dc:cf:9e:7c:
34:36:f3:7e:11:76:6a:43:39:ad:e4:4e:4a:0c:47:e8:ff:22:
19:25:b0:04:fc:4e:ad:46:23:b6:a8:64:d5:b0:20:78:a3:5f:
33:31:7d:52:1a:41:b3:13:d4:6e:db:e0:f7:47:3a:26:10:1d:
8f:b6:9b:13:f0:c3:2e:ad:dc:86:7f:63:ab:e0:8f:7c:aa:e9:
17:08:0b:dd:8c:3e:f6:ec:8c:d8:58:be:fe:75:c0:3c:bf:7d:
48:b1:b2:04:88:b9:49:d4:ce:0d:8b:1c:a9:42:c5:5c:77:c0:
b2:a0:1c:60:49:ff:98:b2:40:12:0a:e2:be:de:d5:50:2b:30:
38:56:43:6c:80:6d:60:19:89:1d:2c:c0:63:ff:25:a1:49:ec:
f9:5a:23:b7:66:df:75:4f:36:93:03:2c:72:57:78:73:bb:36:
54:a4:39:1f:fe:f6:28:42:1d:b0:b9:a8:37:cb:0c:dd:3d:76:
ea:45:3c:0e:4d:2f:32:c4:51:28:d7:49:65:c0:e5:71:42:76:
e6:af:f7:19:86:d4:7f:ef:d7:8e:4f:b8:dd:c7:77:19:a2:69:
91:a4:53:21:4c:4f:27:b0:ca:54:a3:d6:e2:64:0f:37:59:e5:
f4:e6:cf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:13:03 2026 by rpki-client