
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft
File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json)
Hash identifier: Xq9MrT/uzPVca1J60js7YAY2M3G90IY98jrV+muCqNg=
Subject key identifier: 02:C5:3C:C0:B5:D7:44:D0:7E:97:89:CD:BD:07:0C:8A:FD:C7:B2:3D
Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80
Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80
Certificate serial: 0BC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft
Manifest number: 0BBB
Signing time: Tue 24 Mar 2026 18:47:33 +0000
Manifest this update: Tue 24 Mar 2026 18:47:33 +0000
Manifest next update: Tue 31 Mar 2026 18:47:33 +0000
Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: DqBiS/fBG4afpyZ+9fp+bzGhHk2QNJf8cZCY7DCGu80=)
2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: 4X3ObrBg443mSci6E+V0UQd/b/zW7MQqNF6LiZpBnXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl
rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3013 (0xbc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B837, serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80
Validity
Not Before: Mar 24 18:47:33 2026 GMT
Not After : Mar 31 18:47:33 2026 GMT
Subject: CN=69c2dc45-d77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:09:61:ac:1f:f1:6f:be:33:c4:16:e4:a2:bc:
77:8f:d7:2b:ac:f3:44:26:3f:c8:0b:21:5e:4b:fa:
cf:28:86:04:1f:a1:c4:63:79:c0:fd:90:18:ae:5f:
f4:ce:2b:aa:5f:7e:f8:e1:b5:93:e7:ec:cb:77:65:
5c:5e:de:5a:ea:b1:06:ee:ff:58:6d:b5:5c:87:4a:
8f:73:67:a4:ba:2e:99:47:7b:45:4e:2d:b8:ed:ee:
cd:64:da:fc:18:88:f8:2a:51:78:85:57:97:25:ad:
ca:0d:24:f6:3b:8e:a5:b0:99:85:94:6a:9b:a7:bd:
dc:47:bb:8f:25:12:18:3f:42:b3:37:ff:79:ae:50:
a1:7d:1f:f1:59:e9:21:a1:1b:35:aa:fe:f4:c2:3d:
2d:91:c6:6f:e8:dd:0e:e7:4b:2d:29:c6:de:d3:e7:
e6:02:22:75:bc:94:79:9d:02:8a:d3:ed:f5:bf:1b:
01:9c:28:b0:81:5b:65:57:5a:b0:59:f2:6e:5a:39:
3f:8d:1b:78:76:05:f9:05:d5:71:5b:f2:02:66:38:
65:e8:19:67:c2:e0:29:6e:bd:c9:fc:ec:7e:fd:75:
57:2b:3c:0e:da:81:75:12:aa:58:e2:7a:e7:bd:5e:
5b:ce:da:11:28:2a:ce:c7:0c:55:d1:f8:ea:05:9b:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C5:3C:C0:B5:D7:44:D0:7E:97:89:CD:BD:07:0C:8A:FD:C7:B2:3D
X509v3 Authority Key Identifier:
keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c7:7f:d3:ab:e8:69:c1:9f:13:13:8e:e9:5f:b5:62:b0:f2:
f0:aa:01:72:fe:b2:06:89:31:ad:8e:71:73:14:8f:17:71:f6:
98:e3:16:8e:fe:0d:e0:5a:53:a3:f4:0a:2a:c6:ae:63:b7:e3:
e5:ca:bc:b6:3f:c8:50:6d:4e:38:77:aa:56:d0:20:ed:84:9d:
73:61:d2:d8:3a:ba:5d:64:f8:8a:4a:76:a5:bd:24:ab:99:83:
76:1e:6c:a4:16:2a:32:a2:da:c7:d8:70:69:da:de:0c:12:0f:
93:15:08:43:f2:e6:94:75:ec:8e:c6:04:8d:fb:69:29:eb:25:
bc:e2:41:2c:4a:39:e8:6f:ff:ea:7b:cc:e4:3e:10:eb:c4:57:
0f:f4:bf:b2:d7:ec:4f:22:ea:19:33:ca:5c:56:fe:1e:3e:61:
30:2f:99:89:cf:8e:72:b6:ab:7c:08:75:4f:da:fe:64:1a:71:
75:25:12:6d:a3:ae:7a:55:b7:46:13:4c:2b:65:3c:70:15:d6:
d9:73:71:35:21:cb:a5:1f:9d:91:56:71:11:a0:32:20:df:40:
01:d2:9b:c1:d8:8d:4d:27:b1:fe:63:1d:f8:c6:bf:90:1b:d2:
5f:c0:b8:f3:b6:26:ad:17:4c:07:f4:6a:45:69:5a:e9:01:d9:
90:ce:72:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:59 2026 by rpki-client