
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
File: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json)
Hash identifier: PTfWSsbzcv0xLRPCPt2DHai1M+dNcdR5lLik2NyJ3CU=
Subject key identifier: 51:1E:9B:EA:7D:2B:9C:14:76:24:64:94:71:1B:98:D8:74:DA:F9:E9
Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Certificate serial: 0562
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
Manifest number: 0552
Signing time: Tue 24 Mar 2026 23:06:48 +0000
Manifest this update: Tue 24 Mar 2026 23:06:48 +0000
Manifest next update: Tue 31 Mar 2026 23:06:48 +0000
Files and hashes: 1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: vQhtcCwX2m6s8ej+f7H3lPEJOXlKlMqqKwogWqPnBLo=)
2: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: ikBL+n1I4lTln4IeZuN3wg5X+cHKMnhhuxIqhkGyMPU=)
3: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: 0x9cH1BXF1oCzflKPF1qlRUnA1ksucVxQM/2AaZ9hhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:06:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1378 (0x562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Validity
Not Before: Mar 24 23:06:48 2026 GMT
Not After : Mar 31 23:06:48 2026 GMT
Subject: CN=69c31908-28ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:a4:74:70:96:69:d9:ab:b2:d5:d7:2d:64:
a8:2d:f5:61:cc:82:44:48:bf:07:7c:ea:d7:63:d7:
4e:2e:74:38:71:29:25:9a:b7:2e:f6:7c:bf:b9:1e:
91:42:2c:a9:15:c0:02:ec:4c:bf:25:6f:7f:6e:e1:
55:9f:53:e4:51:58:95:07:a2:50:2c:68:de:f8:14:
33:2a:48:12:99:44:67:31:6e:ca:f2:55:e2:b8:c8:
1d:b9:d8:49:e1:ec:12:90:94:a2:9e:77:b9:ec:ca:
be:f0:9b:68:af:a0:81:13:f4:88:ce:2d:2e:9f:2d:
b3:70:ee:63:e0:d1:8c:70:15:95:e3:6e:63:e0:05:
11:d7:e2:22:24:3d:50:e7:5f:6e:b0:64:fd:da:0f:
dd:5e:97:c0:4f:02:19:9b:87:13:ca:02:6e:d6:c3:
6a:9b:e2:c4:c0:b4:cb:93:1f:41:33:c2:f6:e1:23:
d2:6e:3c:4d:49:17:4b:3b:7e:91:3f:c0:cc:4c:ab:
18:de:ef:9c:68:ec:be:84:cb:b8:58:d8:dd:61:0e:
2b:06:58:f3:f0:a6:c5:e7:94:fd:00:55:ee:82:c6:
60:7a:55:de:a5:9b:34:e2:46:ed:d2:0b:9b:7f:df:
b8:82:84:52:90:f0:a2:57:04:5e:1e:91:d7:b8:e8:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1E:9B:EA:7D:2B:9C:14:76:24:64:94:71:1B:98:D8:74:DA:F9:E9
X509v3 Authority Key Identifier:
keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:d3:1b:57:20:0c:b0:f9:bf:26:aa:0b:b0:d2:eb:c0:11:5e:
4f:a1:9a:7a:ea:5c:8b:e3:d4:66:c7:b8:62:2d:6c:83:82:ce:
77:a3:c7:fc:7d:d3:4f:89:92:1a:81:31:87:24:1a:14:aa:c8:
49:19:41:f7:ea:90:2f:44:60:1d:67:f9:a2:59:e7:d1:74:b3:
1f:d2:94:80:a1:26:aa:56:34:1a:e8:3c:1c:de:a0:e4:cc:b3:
cb:d2:d3:53:db:c7:3e:8e:32:1f:35:07:0a:43:f7:71:21:1c:
37:a5:e4:f4:b9:b0:fe:b7:1b:ca:46:9e:af:8e:26:3a:15:50:
ee:ba:bb:bf:7c:b1:c0:de:04:bf:07:61:ff:f9:56:4d:78:63:
28:d5:f2:00:eb:44:7f:fc:18:3e:7a:4d:7d:76:86:78:cb:16:
36:e7:58:4f:3a:6d:3e:8e:2f:7a:e9:6a:45:86:02:b0:7c:f1:
0c:b7:24:86:64:62:6a:b9:88:13:f2:b1:17:32:99:4a:ae:bc:
b0:fd:aa:ee:52:ec:64:fb:21:45:2f:81:0d:ef:87:5a:f8:7f:
82:ea:9c:34:8a:8b:62:db:ae:63:1c:3e:b7:72:a5:6f:10:4a:
69:d4:62:63:bf:e6:95:f3:7a:f8:fd:34:dd:bd:18:4c:7b:dc:
d2:a4:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:27:28 2026 by rpki-client