
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
File: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json)
Hash identifier: uF0KIQuIrtBoLCwUSTBz+y/CogGxoKyvbo8WnZ9YQ5g=
Subject key identifier: 8E:B2:D1:4B:1C:90:40:C3:2E:21:8B:52:20:1B:4B:C5:F4:D7:A4:69
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial: 034A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
Manifest number: 0335
Signing time: Wed 13 May 2026 01:15:59 +0000
Manifest this update: Wed 13 May 2026 01:15:58 +0000
Manifest next update: Wed 20 May 2026 01:15:58 +0000
Files and hashes: 1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: enhT1aKY4SAfJWvrPb1THMsNBKFMyBUVAVN/ZyPh1q0=)
2: CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (hash: zK5tz0TQBIN2LOFrK1BLN+syvhwWEXx2GojszSpoCIY=)
3: B8470B32494A11F190BF742ABC833773.roa (hash: l1nGh824I3T5lf9QrE/Fz+zMfXJJnmJsro/LJCbKbhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Validity
Not Before: May 13 01:15:58 2026 GMT
Not After : May 20 01:15:58 2026 GMT
Subject: CN=6a03d0cf-b2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:65:29:66:c1:5b:5e:8e:cf:84:46:f3:73:
5f:75:13:66:ed:90:43:64:b4:9c:84:4c:22:b3:a0:
bd:e1:45:cd:b9:87:b4:04:c1:d2:cd:25:77:db:47:
90:1e:87:6f:c9:97:58:46:c2:c8:bf:52:48:bd:6e:
ba:6d:5d:ab:61:99:a3:98:e9:11:b7:93:37:ed:2a:
4b:a7:64:b5:9e:39:08:c9:1a:8b:23:b0:ab:7c:09:
c6:6b:95:c7:61:b5:8f:d3:ab:58:6d:a5:4f:c7:8b:
65:06:f9:03:08:b3:70:2c:c1:2a:44:3a:51:8d:05:
17:67:c9:4d:c5:af:b7:cf:32:d2:31:70:41:25:aa:
c1:77:50:13:9b:ed:5e:62:9c:3c:6c:6b:2b:d4:d2:
fc:00:74:5b:32:ca:82:1e:cf:ba:31:93:d3:22:21:
5c:d6:0b:78:95:c3:19:89:a4:b3:11:f5:42:bb:6f:
ee:25:26:f2:da:d6:a7:b0:a4:3e:2a:6b:9b:03:d0:
5e:6a:06:87:1f:a3:25:54:af:ca:3d:89:84:a9:27:
97:88:00:a8:e6:c7:b2:80:80:03:a0:d6:27:23:60:
84:e7:2e:28:f4:51:ea:4c:1a:3e:bc:07:6c:e0:09:
a1:d4:43:4a:77:cb:56:0c:18:81:92:73:d1:87:1d:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B2:D1:4B:1C:90:40:C3:2E:21:8B:52:20:1B:4B:C5:F4:D7:A4:69
X509v3 Authority Key Identifier:
keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:66:6f:11:97:b9:63:ec:a4:1b:84:07:b4:87:fd:87:d7:48:
cf:f3:fb:fc:e4:69:be:3a:1c:91:14:05:72:38:71:a7:2b:d2:
29:9a:cb:b9:12:a9:89:16:ca:10:25:8f:f5:1d:51:96:31:23:
60:db:d6:6b:4c:c9:a1:6b:21:99:71:b6:79:35:a4:9f:f0:f8:
96:f5:d1:5e:14:eb:d9:a0:c6:87:41:a5:24:9e:7c:fb:c9:58:
da:e9:ee:52:96:ad:d4:bb:e7:9f:a3:e8:b9:e5:de:71:9a:d1:
43:91:2f:4a:b6:de:54:4a:a1:28:1e:6e:a5:c1:cf:7c:d8:7d:
96:a3:ec:08:27:ed:6e:ef:f7:fe:b3:a3:11:59:53:5a:3f:b7:
13:a6:c0:f6:dc:0a:5b:4f:e9:41:68:7a:99:c8:c7:74:87:6d:
f0:19:fc:2a:5e:5c:6b:6c:2b:60:0d:c3:34:41:ab:6b:06:74:
75:af:6f:cd:40:28:b9:8d:0b:d1:18:1f:59:66:75:38:41:cd:
04:7b:51:2b:52:2b:3c:bf:89:69:8a:a0:c6:9a:fb:a4:c8:30:
2e:5f:96:86:d9:a3:fc:7a:61:40:49:2f:17:c2:fc:62:1e:b5:
94:3f:3e:2c:47:b3:34:78:04:db:31:92:74:82:b2:2b:97:59:
9b:30:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:58:16 2026 by rpki-client