
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
File: GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft (raw, json)
Hash identifier: LW2PSj+Ok7SlzpDgGLzg4wbLQfK7V6FNO9kauidqamc=
Subject key identifier: 8E:1F:DB:73:82:7F:5F:BA:80:A6:42:5F:9A:FE:53:2B:AB:E3:77:24
Authority key identifier: 18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8
Certificate issuer: /CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8
Certificate serial: 0839
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
Manifest number: 082B
Signing time: Tue 24 Mar 2026 20:41:36 +0000
Manifest this update: Tue 24 Mar 2026 20:41:36 +0000
Manifest next update: Tue 31 Mar 2026 20:41:36 +0000
Files and hashes: 1: GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl (hash: 2OwdEhJiNcFQvd0C4xgH5DMjZ57rSZf/Wag3dNLbRvo=)
2: 18E7B6C80B5B11EB80C8B15FC4F9AE02.roa (hash: 6HBwnAdSSFtnjaGJ508w7iBxRC6Y0SWJe0qRKEHH2Og=)
3: 1994E0780B5B11EB80C8B15FC4F9AE02.roa (hash: FnoWXzNWJjjpdfPVYZMnHGoZQsfGs0O6OuWkpNH6Ba4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl
rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EA7F, serialNumber=18442A116C30101BEC8C89F4501978C092036BB8
Validity
Not Before: Mar 24 20:41:36 2026 GMT
Not After : Mar 31 20:41:36 2026 GMT
Subject: CN=69c2f700-12ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:25:e6:89:31:29:be:f3:09:3d:96:b3:6c:
58:98:d6:ed:24:97:b7:4f:73:e7:7e:2d:27:09:4a:
b8:6f:68:00:14:b1:82:3f:7d:e4:17:50:00:30:15:
29:ec:09:37:b0:60:d6:26:9b:d5:eb:33:92:d3:a0:
d7:16:7e:c1:27:b3:26:5d:c1:4b:73:f9:95:d8:06:
d2:62:a2:71:7c:28:11:ba:b4:05:3e:4d:91:18:1c:
a4:d8:62:bc:97:b6:58:02:31:59:94:e6:fe:6a:73:
b8:d9:71:fc:25:e5:d4:1a:f7:4b:a2:70:29:bf:f9:
b1:de:ce:5a:70:6a:a8:0e:e9:c3:78:fa:d4:f7:73:
21:81:de:ec:42:93:08:7c:d0:9b:db:20:59:9e:83:
45:52:28:e6:48:d8:ac:35:be:12:3e:15:7c:7e:1d:
b4:ee:32:6f:bb:06:97:46:86:c8:91:8f:34:f7:30:
ed:c0:2b:c3:6a:32:a6:ae:87:7c:21:ff:57:27:36:
c2:75:4d:07:37:34:ca:67:fe:40:de:b4:b3:8c:1e:
77:73:a1:e0:49:ea:ee:ff:2f:77:52:99:f1:bc:1b:
e1:0d:e0:a5:29:8c:bf:19:79:bb:05:11:ab:e2:25:
42:d1:aa:13:d8:2f:28:2f:da:cb:07:a6:e4:2b:1e:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1F:DB:73:82:7F:5F:BA:80:A6:42:5F:9A:FE:53:2B:AB:E3:77:24
X509v3 Authority Key Identifier:
keyid:18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:24:df:70:9f:52:a3:64:de:fd:8c:d2:ac:11:f8:3c:ef:93:
87:c9:60:b0:05:67:ad:77:3d:56:21:c4:07:30:c4:0c:74:6a:
fc:a5:f8:cd:1f:4c:af:80:cd:50:a0:a3:7d:da:f9:5b:3a:7c:
60:49:40:0f:60:50:2a:3c:f5:84:39:bd:8e:03:8a:00:b0:d7:
46:ed:92:a5:a6:9f:3a:ff:95:2d:78:f4:7c:53:cd:9d:34:4d:
3f:9a:f0:0d:5a:51:db:c2:e8:34:90:91:06:50:8f:97:e0:a4:
59:26:0c:26:df:f5:d6:94:4d:ab:9f:48:65:3d:ed:0f:fa:05:
14:27:55:2a:bf:28:e8:82:c7:fc:b7:2e:14:6a:df:94:bc:94:
ad:24:86:2b:7b:4f:f1:89:00:dd:4b:23:92:10:39:8b:38:95:
fa:5b:c9:b7:41:91:28:b4:6a:0c:fb:f8:6c:4a:08:fc:96:39:
af:41:61:9f:4a:1d:56:42:9e:f2:73:a0:8b:2b:b2:27:bd:5f:
aa:bc:6b:0f:67:f4:6b:fc:d1:0a:6c:60:d7:74:91:80:2c:a2:
b6:e7:76:39:71:c0:f2:01:2a:fe:f3:ce:8d:af:be:1f:3e:03:
15:64:8e:7b:8a:24:27:7e:c2:e9:75:37:12:d1:f3:44:d2:07:
c7:cc:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:01 2026 by rpki-client