
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
File: gSJD5rXQ3hGucMcns50fIeOurAM.mft (raw, json)
Hash identifier: FwaKUQYsIWccMMYVJKri2tY5BH83gUfksic/ksAaAvY=
Subject key identifier: DA:65:8E:B3:7B:73:9D:A2:7E:EF:7F:06:54:7D:6D:12:58:E3:EA:77
Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
Certificate issuer: /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
Manifest number: 013E
Signing time: Wed 25 Mar 2026 04:38:52 +0000
Manifest this update: Wed 25 Mar 2026 04:38:51 +0000
Manifest next update: Wed 01 Apr 2026 04:38:51 +0000
Files and hashes: 1: gSJD5rXQ3hGucMcns50fIeOurAM.crl (hash: vcYvzi62KNIjCFIB/9tKTNRWsCd5lcGVHbjIq42JWGM=)
2: 546C4C7C4E1911EFA1FB9E57C4F9AE02.roa (hash: 5Z8ZzvdcCMUcJI9VqBc6XGBhSKU7yOQG0N3N3OxiT9A=)
3: B02CCB344E0C11EF9175067FC4F9AE02.roa (hash: 9Lwep+ARPUV9Wzst4PPGeuZFDFzWL03Jq7MuLOxdM5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Validity
Not Before: Mar 25 04:38:51 2026 GMT
Not After : Apr 1 04:38:51 2026 GMT
Subject: CN=69c366db-1b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:be:a3:30:f8:d0:65:a6:b4:2f:e0:c5:bb:
b9:ee:54:3a:fe:99:79:3b:98:77:ac:5e:73:36:97:
48:97:1f:15:2f:a2:33:b2:c3:38:29:86:1f:b7:58:
c3:7f:fe:ff:6e:17:7e:47:50:60:fb:28:66:9a:73:
e2:5f:da:67:21:0d:86:5e:f8:f0:96:ed:7d:00:c3:
f9:ae:28:da:cd:41:de:a1:73:97:8a:2e:60:51:28:
2f:b9:2e:ba:7d:6a:a1:3c:53:ae:e6:a3:5c:79:69:
5c:89:fa:9c:14:f7:2c:cc:e9:76:29:ef:f2:03:3b:
06:c6:4d:1d:a3:40:35:e5:e7:c4:30:a8:93:58:cf:
8c:86:69:00:5f:37:4d:e7:3a:1b:c0:d9:22:94:ad:
bc:1d:46:df:ce:a6:03:96:31:38:f9:b8:11:31:03:
75:1c:8a:01:19:de:2d:19:20:80:81:09:8c:e7:ff:
00:a9:e5:20:0b:a0:ae:a3:4c:56:7d:b1:2e:a6:b9:
e1:d0:c8:c7:ba:98:38:3c:0f:d0:8d:63:28:68:2e:
55:2c:f9:9a:13:61:3a:28:39:48:f2:65:e4:d8:ae:
ce:84:a5:6f:52:14:8b:e5:b3:4b:e7:96:c3:2c:8c:
86:25:7e:aa:80:a1:25:41:b5:e9:c9:13:75:01:8f:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:8E:B3:7B:73:9D:A2:7E:EF:7F:06:54:7D:6D:12:58:E3:EA:77
X509v3 Authority Key Identifier:
keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:65:8c:61:74:46:40:8e:d4:37:d1:95:22:de:0e:b1:7d:80:
65:ec:2d:f8:2d:bb:55:ed:f4:0c:2a:d0:10:fa:17:fe:92:ef:
76:1c:27:62:57:57:17:fd:42:03:a5:e1:ae:60:5c:31:ab:be:
b4:bf:f3:bd:e9:6a:72:3c:74:9c:b5:36:6d:c1:88:6f:79:e5:
53:ab:c4:d3:46:89:29:fd:68:25:d3:19:b8:31:d9:41:00:67:
2e:e4:59:38:4e:d6:70:14:e9:87:6d:38:c5:d6:0d:61:43:e9:
eb:a2:4f:d9:a4:1d:c3:23:e0:08:5c:8e:ec:f5:65:6c:22:6f:
1a:6d:43:cf:aa:cd:fc:83:7d:2d:cd:0b:58:7f:ea:98:47:de:
5a:bf:be:6b:1d:f7:b5:4d:09:d3:58:3a:09:63:83:a8:c0:7a:
ca:46:0c:1c:9c:c9:8e:bb:29:72:9a:e6:20:a3:0b:66:be:ed:
02:96:23:4a:ce:62:44:db:6f:18:0d:31:bc:65:5c:5a:79:2c:
96:23:63:ab:c4:37:a0:2f:22:65:af:e1:a0:07:19:41:bd:b9:
12:e3:bc:2e:81:bd:ee:f0:1b:3d:81:b2:24:70:70:d0:d3:d4:
c6:28:7b:b6:bb:86:35:16:de:c8:80:5f:89:df:f8:5c:2b:7b:
02:aa:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:29 2026 by rpki-client