
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json)
Hash identifier: jK0S8M1s+93GLKtG7FMWAfDjNn5Q/giozkgnVr96cpw=
Subject key identifier: 95:1B:E7:9D:30:37:30:9E:6D:BD:88:50:86:5C:28:57:5F:21:51:52
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
Manifest number: 8E
Signing time: Wed 25 Mar 2026 04:19:00 +0000
Manifest this update: Wed 25 Mar 2026 04:19:00 +0000
Manifest next update: Wed 01 Apr 2026 04:19:00 +0000
Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: /GxfVcq54+f/tgFpde3E/TZBUD+SwHY6dK9JzPUZObY=)
2: A78653B2561F11F09624D128C4F9AE02.roa (hash: U+SMdhKcC6YZLVwx7CjvcktHCkK7+pBrjdw40Tvbfas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Validity
Not Before: Mar 25 04:19:00 2026 GMT
Not After : Apr 1 04:19:00 2026 GMT
Subject: CN=69c36234-f8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:f3:58:b7:d5:7d:53:c1:7b:74:e5:e0:cc:
7f:9d:22:8c:b2:41:b2:e9:98:69:17:52:0f:62:d0:
a6:c6:58:b9:b1:33:99:4d:2a:bb:91:2a:ed:85:df:
5c:cd:3c:84:bb:02:c7:6b:0e:5e:4d:28:2a:a4:94:
9b:e1:58:d5:9d:31:45:c3:5e:70:d2:65:1e:f1:45:
fb:d2:02:28:b8:a1:1c:40:64:c2:01:d6:b2:40:ee:
d3:b5:ba:d7:c8:83:d5:9d:e8:82:49:51:5b:bd:ae:
2e:d5:01:cb:da:42:9e:fd:bd:53:a5:12:13:60:e0:
45:a1:cb:85:75:55:47:83:bb:c1:8d:6e:56:45:a9:
d1:ce:50:27:a8:14:11:cc:73:20:fa:15:12:64:c2:
47:2d:2b:c4:60:09:51:e4:ba:bf:bf:bb:43:86:37:
58:5e:3c:6e:36:21:d7:1b:06:23:f0:b9:be:5c:83:
f3:bd:79:78:2e:ea:7d:be:02:78:92:37:0d:b2:19:
e3:47:d9:fa:e2:82:98:5e:b0:8c:35:ba:15:b3:e2:
f0:7d:f8:0e:55:65:54:98:28:64:72:c8:cd:f8:e6:
11:27:fa:dc:38:32:86:91:6a:10:c0:ee:71:6d:d3:
c0:38:aa:dd:87:d2:17:40:fe:52:e5:1a:3d:41:68:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1B:E7:9D:30:37:30:9E:6D:BD:88:50:86:5C:28:57:5F:21:51:52
X509v3 Authority Key Identifier:
keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3a:78:1a:6b:06:75:d0:9f:f3:a6:a1:3f:40:cf:a5:f8:4f:
c8:cd:11:d9:ae:4e:33:f2:17:02:ab:49:5a:14:87:43:b6:fe:
f6:46:a4:78:41:d0:c4:18:17:68:a5:05:a0:f4:4f:9a:86:f3:
d0:00:57:21:cd:e8:7e:1d:f5:de:d5:e8:e7:ef:bd:fd:d2:ec:
f3:d6:75:a0:de:75:6c:76:10:dc:52:23:f6:f2:7a:9b:c4:e3:
85:ea:c0:af:f1:f0:1c:e8:a6:2c:4c:59:4d:66:8b:3c:b8:bc:
3b:e5:50:83:4e:aa:4c:95:02:6b:89:6d:8b:28:8d:96:c1:9b:
5f:1a:10:68:06:db:ec:e8:64:9a:d3:41:0a:54:e6:86:c9:1f:
94:cd:a3:64:23:db:9e:42:de:be:54:c5:5e:9c:44:57:a3:e3:
80:19:ca:0d:98:53:34:59:7c:87:58:92:16:59:5e:ff:aa:00:
01:fe:03:69:33:9b:1e:a1:67:d7:4d:33:05:5e:64:5b:ad:9a:
4a:c0:01:0f:81:ee:e0:5c:7b:77:55:eb:4b:80:02:d3:d7:82:
44:73:6a:7f:b4:b3:c0:53:10:af:c4:af:3e:bd:a0:8d:23:72:
d0:66:0a:6d:4a:e7:a5:26:16:78:7e:d9:f3:ed:ee:be:9e:88:
e6:bf:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:00 2026 by rpki-client