
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
File: GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json)
Hash identifier: +IvtAC2tK4hq40+QyoII2JG/ellSanDEKn1rq0RfBEI=
Subject key identifier: E9:73:EB:08:64:63:F0:7D:C6:45:65:CF:01:CF:57:90:6B:DD:21:62
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 03D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
Manifest number: 03A2
Signing time: Wed 25 Mar 2026 00:32:42 +0000
Manifest this update: Wed 25 Mar 2026 00:32:42 +0000
Manifest next update: Wed 01 Apr 2026 00:32:42 +0000
Files and hashes: 1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: o5Eylf423pWLSJRPES9NpQFoczRMtHFsLmstO1GEQYE=)
2: 583F47C01EB811F18CD447E9213D8C67.roa (hash: +qQU2eQcSlrgXPyXzClMrgom8/dbNphplGEsy11Vftk=)
3: AEF7F896B23511EF99CCD73DC4F9AE02.roa (hash: qAxsSTTEqLjnuspKTj9bvz83/t7vSvFTI1OuwSofZGY=)
4: 6318EE6A194711F193E941873C3D8C67.roa (hash: 8AJV4iIxgM98bRlEZFTlv65MKd8e0Yh/WuNaTVqN2bA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979 (0x3d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Validity
Not Before: Mar 25 00:32:42 2026 GMT
Not After : Apr 1 00:32:42 2026 GMT
Subject: CN=69c32d2a-eb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:eb:7b:36:5b:63:df:fa:6a:b2:cb:4a:ce:
11:2a:e8:c7:ae:52:3e:8c:b9:97:40:44:a0:da:e1:
70:5a:03:7b:c6:ac:0d:72:4c:38:bb:c7:b7:e8:3d:
bd:42:da:01:2c:94:7f:81:80:59:71:24:1a:dd:96:
d7:0f:da:18:2b:c0:50:5d:68:4c:16:f4:63:e8:75:
5f:06:a9:99:a9:10:bd:b4:47:2d:6c:9b:c4:ba:c3:
50:04:ad:7c:ca:a9:c2:46:3e:9e:04:8a:9f:ea:a6:
23:cc:fc:bb:c1:42:7a:bf:e9:10:a8:18:6b:fd:55:
8d:ea:30:e4:2d:5d:b5:95:4d:ea:02:04:68:e7:bd:
12:c1:64:a1:2d:ce:b7:b8:a1:93:db:00:53:b8:31:
cd:b9:86:43:63:78:35:38:44:df:ed:8a:bf:e5:26:
5b:e6:90:f0:1d:06:a8:18:eb:7f:af:91:5f:8c:7f:
c8:be:cf:fb:9c:a8:8a:3b:da:9d:1f:19:f2:d3:f0:
1f:ec:67:06:72:2b:55:57:9f:01:42:90:64:7d:1e:
66:86:46:d0:3d:d0:a9:66:40:55:6b:1b:34:5e:85:
66:77:1a:1d:60:5e:0a:b1:5a:f3:0d:49:ad:87:6a:
70:62:4d:60:1b:1f:41:24:6b:98:b1:0d:70:54:72:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:73:EB:08:64:63:F0:7D:C6:45:65:CF:01:CF:57:90:6B:DD:21:62
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:f2:9e:e7:48:3f:ae:72:bc:f4:5e:1b:f0:76:7e:f5:ff:06:
ca:c0:ea:43:fe:d1:ca:f5:5a:e0:55:90:08:28:d2:93:f1:67:
81:ca:42:ca:6b:11:5c:e7:26:d5:30:39:0c:78:21:93:71:8d:
c9:25:50:d3:52:78:48:db:7b:34:cf:12:95:b1:a9:e7:2b:1d:
dc:21:ac:1c:c0:a3:a3:68:75:b8:f2:6c:8a:47:5a:2e:ed:61:
74:6e:80:a4:b5:fd:e9:64:82:58:ed:e5:09:e4:8c:54:68:87:
15:e6:0c:41:59:1f:0c:28:57:07:65:3d:85:a8:b7:0a:a1:88:
2e:78:05:24:4d:83:15:29:8e:d9:9e:49:f2:02:09:8e:d8:2b:
1c:d8:65:61:1b:f5:4b:b3:81:08:63:68:8b:59:f6:34:69:be:
5d:e3:b6:02:b0:81:62:e1:4f:64:f8:1f:82:59:8d:ba:51:8b:
a8:02:48:60:6d:8f:e6:31:82:85:f8:07:80:2c:44:7f:8f:b6:
4d:ce:32:34:c0:67:ea:91:41:5c:bd:99:cd:5f:3c:d4:6d:86:
cf:2e:e7:18:f4:82:c5:cc:ee:71:43:ad:ef:d7:04:df:78:bf:
2d:e9:c6:d5:7b:ef:23:0f:6b:5f:63:76:b6:86:eb:b9:60:60:
bc:41:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:58 2026 by rpki-client