
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
File: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft (raw, json)
Hash identifier: BbhWV+1/BxAZg76mAUlUTxdgSes9NkMIne5ITTPg+i4=
Subject key identifier: 1E:08:C4:CC:4D:92:B8:0B:2A:50:A9:FB:DB:1D:2B:54:DB:37:2C:FC
Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Certificate serial: 043D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
Manifest number: 041F
Signing time: Sun 01 Mar 2026 23:39:59 +0000
Manifest this update: Sun 01 Mar 2026 23:39:58 +0000
Manifest next update: Sun 08 Mar 2026 23:39:58 +0000
Files and hashes: 1: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl (hash: J9gwqgwx0qKx5L2RkwudfYlYaSrfFqrkz9J8wyi+B2E=)
2: 7D1E4382F7E111F09133AC30656F56BC.roa (hash: zNF2ygfhhND/uBTDhIyFRkeFn/MaMe2JQ58piW9rdw0=)
3: 7C17299AF7E111F09133AC30656F56BC.roa (hash: t296rVU/xx7eKuOhP3U3tbmVD7byq5VC6ECxFEqQnZo=)
4: 7CA73BD4F7E111F09133AC30656F56BC.roa (hash: lrf8090retSGwJwGuDcCx3aFLrFcPfdjin1o0PlkDcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl
rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085 (0x43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Validity
Not Before: Mar 1 23:39:58 2026 GMT
Not After : Mar 8 23:39:58 2026 GMT
Subject: CN=69a4ce4e-5e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:e3:c2:12:82:7a:eb:79:f5:2c:46:3b:61:
4f:71:a0:a9:11:b0:75:86:a2:69:61:73:89:5c:d9:
be:61:98:9a:34:bb:85:8d:26:3d:9e:1e:cd:da:71:
a6:bc:88:a2:72:b1:be:eb:2a:d6:7c:15:ae:86:6d:
f1:d8:b8:5a:a3:50:b0:1a:00:02:6a:38:9a:e1:e5:
e9:22:89:cb:5f:7d:7e:3e:27:6d:c8:f9:29:78:cc:
a5:e1:1d:49:39:b3:ef:25:fc:2b:ea:12:bb:b3:ff:
c1:e6:53:d2:4c:e5:47:6c:ba:c9:f7:63:79:9a:09:
1f:a3:ca:5e:7a:2c:08:a2:0c:26:55:b8:0e:0c:56:
4e:d9:8d:ad:db:b9:86:84:c3:bf:f2:14:64:15:64:
ad:5d:be:ed:46:04:fc:e9:e9:5d:d8:ae:46:24:92:
8e:d0:d6:cb:30:12:6b:0e:27:9e:e8:ca:80:82:e5:
e8:8e:db:fd:56:e0:08:87:e3:07:64:0d:c0:e7:cf:
1e:4e:e5:f9:a0:29:95:74:8e:df:85:27:b0:51:f3:
40:ea:af:69:5e:c8:69:48:9d:b6:7f:a7:2d:be:12:
c7:f5:4b:46:29:02:9d:75:c3:03:94:61:d9:57:c5:
ef:f7:75:dc:1f:2e:86:72:20:92:fc:ab:5e:03:6a:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:08:C4:CC:4D:92:B8:0B:2A:50:A9:FB:DB:1D:2B:54:DB:37:2C:FC
X509v3 Authority Key Identifier:
keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:8b:64:c3:28:40:32:77:ea:86:84:cc:ec:b9:3d:8f:5d:27:
cb:14:75:4c:79:52:de:40:d3:18:5a:64:d4:32:54:85:53:ab:
73:25:21:ba:96:16:37:1f:4e:7f:73:3f:50:c5:ab:f1:f0:b5:
4b:dc:95:f4:fc:e8:97:fc:9a:73:b6:f1:8b:fc:b0:d3:e8:44:
97:01:13:96:b0:03:15:c3:d0:c6:01:e1:9b:7b:10:24:19:b9:
e2:7f:e0:ac:7f:14:56:12:95:69:47:47:44:61:46:49:63:fc:
a4:94:d8:fd:d5:c8:97:3b:73:3a:62:75:1b:b6:d9:20:09:3d:
a8:b7:8e:8e:86:00:3b:e4:d6:c7:4b:5e:32:44:a1:57:97:47:
90:6f:bc:5a:a9:8f:04:48:84:c8:4e:1b:e3:76:54:fe:bf:17:
c8:fd:a0:36:5c:e1:a6:ce:9d:07:3f:af:1b:5d:63:25:26:72:
44:e8:61:61:3b:12:26:a8:1d:9a:9f:66:c7:b9:2e:5d:f5:32:
35:82:21:f7:7b:ff:e5:2a:19:6d:ce:2e:54:7c:63:38:55:81:
ee:b2:4f:4e:df:76:68:20:ec:e1:af:50:fb:e8:fb:c1:75:3d:
46:37:57:fa:6e:b4:48:6e:6a:16:35:76:78:d1:0a:f3:d0:04:
01:b2:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:10 2026 by rpki-client