
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
File: GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json)
Hash identifier: Oi3QvqRwmcbHBgVLU4PfTnJY3clnIN/bWJvM+9e6RFg=
Subject key identifier: FF:83:AD:72:E2:1A:89:96:C4:52:ED:87:47:82:67:3A:E2:81:E9:B0
Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
Certificate issuer: /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Certificate serial: 03E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
Manifest number: 03DE
Signing time: Sun 01 Mar 2026 01:22:19 +0000
Manifest this update: Sun 01 Mar 2026 01:22:19 +0000
Manifest next update: Sun 08 Mar 2026 01:22:19 +0000
Files and hashes: 1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: 3bkS4ALo6L8KTwZSE//6MeH0GozVISZzRkRl3TmVV1Q=)
2: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: l9YGphPLih+4p0TDLk8PQxvCJvvtiquaBZzq1Oot6Xw=)
3: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: 07YWg9g83guD20U5WpW8ibBwLyL4HcWmJhNvyQx5O2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1000 (0x3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Validity
Not Before: Mar 1 01:22:19 2026 GMT
Not After : Mar 8 01:22:19 2026 GMT
Subject: CN=69a394cb-f285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:ae:50:17:d7:4a:c1:3c:cb:38:cb:c6:23:
8a:06:a0:48:f2:d1:d9:d8:19:86:9d:bd:56:b4:51:
e4:79:3d:1d:cb:36:5d:74:87:f3:72:77:92:85:87:
37:83:fa:fa:cd:73:92:98:70:a9:c4:fb:7c:95:f2:
d0:64:2d:40:b5:cd:14:1d:aa:d6:4e:8b:50:14:ca:
bd:9a:6c:21:3f:59:f0:d6:78:93:83:c4:78:ae:f0:
81:84:ad:2e:9b:4f:bc:80:2a:9e:fb:c4:64:89:8f:
1b:1b:40:79:03:fa:b4:8b:2a:0f:3c:7d:13:38:9d:
07:95:10:5a:b3:f8:ee:a5:0a:05:7b:8e:d3:36:18:
8d:3b:2f:64:e5:e0:bb:c6:17:58:a9:2f:77:91:d1:
5f:a7:03:ae:7a:ed:4c:bb:43:1d:d0:27:30:ed:3b:
e3:88:90:38:cd:c8:99:f6:a9:9a:98:6a:44:56:48:
72:4f:26:d4:f0:b7:44:d0:f0:6e:e1:06:65:5e:bb:
cc:d0:38:fc:1c:66:e3:29:84:f7:57:1d:39:0c:18:
d9:80:a1:cb:77:51:84:ef:53:91:ab:ce:ff:dc:fb:
bf:d3:58:2e:af:3d:22:15:43:66:c9:d2:b0:18:c7:
66:60:48:27:5a:20:ec:40:32:97:63:5f:1a:7f:ac:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:AD:72:E2:1A:89:96:C4:52:ED:87:47:82:67:3A:E2:81:E9:B0
X509v3 Authority Key Identifier:
keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a6:a2:be:40:96:19:04:d9:28:c4:70:88:23:ab:29:a0:13:
2b:1b:f9:18:34:2d:fb:4e:91:5c:1f:12:f0:58:46:13:6d:95:
a8:a9:68:b3:45:5a:55:91:13:e3:59:8b:7d:28:6a:90:81:82:
17:95:c3:a3:8a:eb:34:cd:a4:ce:4a:90:fa:6b:b8:99:a0:01:
5d:82:e2:f0:a8:67:d0:8c:fa:e2:39:45:30:eb:25:41:a3:72:
77:7a:8c:bb:7a:20:57:b6:ab:d6:2a:ff:50:f9:73:91:2c:07:
d1:6a:85:63:17:7e:38:dc:fa:37:a8:9d:74:41:5e:66:20:ef:
ae:7d:3f:b9:51:f6:69:91:02:1b:c4:69:5f:b5:41:7c:3e:f3:
b0:3b:3e:80:bf:2b:3c:02:ae:79:d9:21:34:5e:76:e7:0d:40:
7e:4e:dc:3a:1b:47:1d:21:e0:4a:08:15:4a:89:d4:59:2f:da:
77:83:cd:87:2c:53:1f:c7:74:c0:2c:f6:8f:64:7d:15:24:d5:
3b:47:33:9a:6e:a1:1e:aa:b4:01:d0:0f:1f:5f:e3:18:af:12:
e8:be:28:91:a0:1a:d7:c4:3b:11:e5:8c:55:68:4d:c2:1b:d6:
a9:1a:30:c0:5e:6e:f9:a6:c7:7d:49:b0:68:0b:57:df:93:19:
65:12:d7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:40 2026 by rpki-client