
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
File: gmqoO74CQNE5BqurRkMX6eercO8.mft (raw, json)
Hash identifier: 0jcmgc6ArEDZMTWgvWpDI9YzVYvdgaz70NEgYVCL0jg=
Subject key identifier: B5:A9:0A:B5:77:E2:F0:B9:08:AC:A9:F0:52:18:54:E5:9C:04:E3:78
Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
Certificate issuer: /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
Manifest number: 85
Signing time: Wed 25 Mar 2026 06:50:00 +0000
Manifest this update: Wed 25 Mar 2026 06:50:00 +0000
Manifest next update: Wed 01 Apr 2026 06:50:00 +0000
Files and hashes: 1: gmqoO74CQNE5BqurRkMX6eercO8.crl (hash: CREqzHZcYgcvOa9cOM/fkz6E/WSJhJP/ejRuOf6ukfU=)
2: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (hash: eC+Ca7N9y7VnPMiNtCOnwDbBNDTPawuOGNwqU/JVjQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Validity
Not Before: Mar 25 06:50:00 2026 GMT
Not After : Apr 1 06:50:00 2026 GMT
Subject: CN=69c38598-998b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3f:45:29:d7:a5:4d:e0:11:e3:64:e4:82:c0:
0f:3e:2e:e2:c1:81:c8:cb:78:e3:34:d8:15:ef:75:
ba:46:bc:63:b3:ac:f5:97:ba:26:1a:e1:26:34:f5:
ba:19:44:bf:4a:03:2e:a4:78:a9:12:ac:93:bf:0e:
70:46:f1:df:50:a3:93:ee:bd:ac:bf:f4:f7:02:dd:
fd:5f:a4:5c:23:56:ce:c5:b8:ce:13:84:eb:c9:07:
52:0f:8e:6d:cc:bd:13:6b:4d:03:38:59:45:8b:99:
98:69:5e:48:e1:8c:9d:9d:fc:76:ce:87:39:a4:a6:
f9:c5:d8:8c:09:84:02:4b:71:c2:5f:97:d7:2e:ea:
d6:be:7d:42:f4:b3:10:12:f7:27:86:aa:f8:88:ae:
19:4d:97:a8:9f:bc:b4:1d:4e:c4:e9:72:cb:c6:b2:
90:39:ef:8e:d4:19:05:1a:fa:c1:22:f6:00:63:d4:
b0:9a:6d:95:ee:dd:0a:b9:c9:e3:f1:87:3a:82:72:
e5:68:53:5f:de:f8:31:c8:ea:ee:34:bf:11:a1:e2:
ab:02:3e:29:d6:70:6a:8f:d6:7b:c8:27:60:8f:21:
ee:6f:95:58:cb:85:28:fe:57:91:1e:e7:62:aa:12:
f0:fe:9c:a5:bf:be:fb:0e:20:6c:d2:62:79:1c:89:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A9:0A:B5:77:E2:F0:B9:08:AC:A9:F0:52:18:54:E5:9C:04:E3:78
X509v3 Authority Key Identifier:
keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:af:95:c6:77:c3:a8:c6:e7:02:23:eb:24:e2:2b:65:4e:17:
83:61:db:b5:63:0e:24:60:90:cc:17:83:d8:f1:19:c8:78:32:
7a:00:6a:e4:0f:a0:e4:bf:12:ad:64:8b:46:0e:c0:6e:fb:3f:
8c:3f:40:19:75:83:0b:c2:15:5a:41:5f:a2:f9:c7:63:10:f1:
b4:dc:69:79:a0:d8:bc:fc:c2:cc:7b:e0:cd:a9:d7:14:1c:20:
48:01:5b:7f:b1:69:b6:24:4d:e6:09:07:5a:ee:92:c8:46:f8:
91:7a:48:28:4a:fc:66:be:8d:83:35:15:60:f2:96:76:44:00:
e8:7f:28:31:95:98:e1:f3:ab:ed:2e:32:ea:da:66:2d:e5:4e:
73:5a:31:4c:46:1b:57:c0:8f:47:01:c4:7c:7a:7a:38:39:2e:
b6:3a:1a:86:ae:5d:6f:cb:c6:9e:34:63:68:d0:27:91:a0:9c:
42:2c:01:a8:92:81:f5:1e:76:1d:d1:68:d2:f6:c4:ba:a3:07:
98:2f:1a:e8:00:b5:03:46:c4:22:10:ee:42:bf:90:0f:c4:55:
bc:d3:06:ed:45:6f:33:80:c4:17:d0:ad:11:f7:5f:7f:99:79:
7c:54:5a:ba:72:0d:a4:94:f5:55:9e:e3:ca:3b:eb:64:bc:6e:
12:2b:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:32 2026 by rpki-client