
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
File: gSxjWrgxJmFeyTROfsbpAu2safU.mft (raw, json)
Hash identifier: ECQb93ZXIPMZ/2MiyFL11/81OoxZKvpA0X7OPIl23D0=
Subject key identifier: 7F:1E:9D:AF:12:11:5E:7D:41:D0:ED:02:80:13:8C:87:05:45:79:E1
Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5
Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5
Certificate serial: 072E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
Manifest number: 0724
Signing time: Tue 24 Mar 2026 21:33:11 +0000
Manifest this update: Tue 24 Mar 2026 21:33:10 +0000
Manifest next update: Tue 31 Mar 2026 21:33:10 +0000
Files and hashes: 1: gSxjWrgxJmFeyTROfsbpAu2safU.crl (hash: l+O4+xIQq58uhNItNPOo/juw/Bfno9eqPVD3G4Mgg4M=)
2: 52EF768073C511EB98AF9867C4F9AE02.roa (hash: Bm3y0DJFCkO/S/0sT/0qvItblZkyKv9YD3bBQrpZv2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl
rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5
Validity
Not Before: Mar 24 21:33:10 2026 GMT
Not After : Mar 31 21:33:10 2026 GMT
Subject: CN=69c30317-b8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:7e:30:14:a3:fa:5a:b4:09:12:aa:e7:09:
0e:ed:52:69:6c:d6:12:43:ae:c4:7a:92:52:54:a2:
6e:4d:d1:97:17:1c:b2:9c:d0:99:67:1b:a4:17:21:
80:67:3a:49:4c:b6:24:69:65:ef:f0:f1:3f:e9:76:
6d:77:16:ce:44:39:94:60:9b:57:5c:66:bb:c9:75:
aa:f6:81:aa:9b:70:04:44:6f:0b:81:10:6a:96:43:
51:e1:a3:36:e3:ff:89:fe:73:31:2c:da:a2:21:65:
6b:3c:0a:f9:15:6a:3e:54:57:1d:54:e8:d1:69:95:
aa:f0:89:9e:2a:6e:32:1c:0e:87:44:81:46:12:c9:
55:3d:9b:f7:89:7d:26:0a:95:70:cf:07:2a:2b:2e:
45:15:05:fb:f4:5c:ff:83:bc:42:75:41:9d:06:5e:
96:ba:52:64:44:c0:7c:15:0f:8b:f6:91:9f:1c:8b:
42:fc:30:83:eb:30:86:2c:37:da:34:2c:ad:77:69:
bd:ab:38:60:3d:5d:6c:94:ef:dc:82:f8:34:ac:b7:
97:31:10:7b:08:d7:18:c3:d3:83:55:8c:fd:18:a5:
83:87:de:bf:1d:7b:9b:79:90:02:34:cd:ec:81:ed:
ac:db:64:d8:87:5c:6b:b7:54:bb:fd:49:df:20:6e:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1E:9D:AF:12:11:5E:7D:41:D0:ED:02:80:13:8C:87:05:45:79:E1
X509v3 Authority Key Identifier:
keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:50:c9:52:3b:ac:a3:8c:b1:7f:82:d9:1f:94:67:0c:42:54:
fc:26:70:d0:89:0f:20:f9:2e:75:94:55:35:f5:0d:2a:54:b5:
c9:91:1e:a2:7b:87:4d:ff:ad:e3:3e:ad:4d:22:60:49:0e:ed:
e1:5a:bf:63:92:ac:f8:15:cf:29:1d:ef:06:5e:aa:a5:a6:e9:
7d:a6:86:c3:6a:12:ed:a1:45:0d:7d:c8:e8:39:65:fc:1a:28:
dc:ce:2b:d0:62:99:3c:e5:36:8d:c7:37:89:0e:46:b2:0c:fc:
fa:cd:29:00:09:fc:71:fd:eb:bb:65:24:5b:dc:94:37:3e:9a:
02:5e:14:cd:20:d6:6b:5f:19:de:ec:ba:73:76:d4:be:ff:76:
47:65:47:a9:cd:a7:b4:78:59:30:c9:5e:a7:9c:d5:41:54:02:
35:29:c4:69:4f:07:29:39:1e:cd:7e:78:f6:61:a3:b5:07:9e:
2f:ed:1f:8c:6c:a5:1b:f9:f1:ae:a7:27:17:86:a0:f3:7c:02:
b8:fe:d8:a6:11:94:03:b8:2d:fb:3e:ae:ae:84:2e:36:80:89:
ac:dd:d9:2e:3d:52:e0:e5:f4:20:1c:fa:c4:a8:b7:49:d9:b7:
ca:e8:fe:1d:26:23:75:1b:2c:8c:40:44:76:f0:73:ab:b4:91:
cf:fe:09:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:50:23 2026 by rpki-client