
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft
File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json)
Hash identifier: DLamBXBQJZVNr2lor6uIgl4kwYTkuPWTxiVk8wmCZEs=
Subject key identifier: EF:02:39:94:48:3D:FE:EB:77:58:2C:1B:63:4F:C9:F0:97:4B:51:1C
Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40
Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240
Certificate serial: 0BF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft
Manifest number: 0BEB
Signing time: Mon 02 Mar 2026 02:17:53 +0000
Manifest this update: Mon 02 Mar 2026 02:17:52 +0000
Manifest next update: Mon 09 Mar 2026 02:17:52 +0000
Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: s4h2AxKSEvrhr49YtdTb9KmsYHlPxaZiIiEcUYWDKG4=)
2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: TI2KVdmBR8c+EKodG88ZYvgfW8TmL2x0GR8/djTO5Zs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl
rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3060 (0xbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240
Validity
Not Before: Mar 2 02:17:52 2026 GMT
Not After : Mar 9 02:17:52 2026 GMT
Subject: CN=69a4f351-656a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:e1:31:8f:8d:9d:cd:0c:cb:e0:8f:a2:92:
13:91:b7:29:ce:5c:5d:ae:17:54:f5:06:bc:90:a0:
7b:40:bc:84:88:10:24:a4:bc:22:5d:5d:f5:b2:6d:
e1:72:f0:71:66:64:90:3a:95:64:e3:bd:2d:32:20:
a2:be:be:e4:b4:48:60:bd:e4:4b:f2:f4:87:5f:e5:
9f:fd:a9:d5:2d:3b:1d:55:3d:f4:be:d8:66:a2:6e:
5e:ca:bb:3a:72:d1:78:f7:c5:b9:14:94:8b:30:66:
f6:83:f6:87:29:0a:89:e9:ed:a4:62:50:95:7c:bd:
7e:30:f1:34:e8:27:4e:15:bb:b2:a8:48:55:dc:62:
d1:23:45:10:33:8b:0e:1b:1c:1a:12:25:72:82:15:
4f:5a:62:f3:b9:c5:4e:1e:b2:dc:96:82:c6:e6:40:
77:88:6c:bc:7f:f3:99:9a:de:b5:1a:fc:09:03:47:
9f:6c:49:66:5f:1e:3a:3e:1d:49:55:f7:15:e8:80:
fa:c6:58:d3:5a:a6:5e:8c:0b:15:a9:57:e3:8d:f9:
4b:c5:3f:56:fa:7e:bc:3e:bd:12:99:5e:18:09:2e:
f0:44:25:0b:ea:b3:e0:1e:e8:23:58:59:db:81:f9:
80:18:8c:d6:b0:5b:c5:1d:b1:62:3a:8c:3c:6e:51:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:39:94:48:3D:FE:EB:77:58:2C:1B:63:4F:C9:F0:97:4B:51:1C
X509v3 Authority Key Identifier:
keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:1b:37:07:9f:da:18:e0:aa:da:86:e6:ae:51:42:49:2e:11:
fa:32:35:8e:74:18:22:3a:b6:ce:8c:b8:00:4b:03:69:a9:4c:
9a:06:c3:37:8b:29:c9:1f:3a:63:72:d5:b2:2f:c9:6f:a3:f0:
47:b0:ac:9c:34:39:4f:5a:13:f0:22:32:06:d9:95:10:1b:be:
d6:9d:e9:d7:95:b0:77:66:21:64:61:1e:44:54:1a:70:12:96:
a5:aa:45:a7:2a:fa:ac:23:01:8a:4e:25:df:c4:cf:f4:14:12:
94:a8:57:d3:08:11:5d:5c:eb:03:75:88:b1:e3:ed:cf:af:6f:
80:9d:f5:c7:c7:6f:c8:24:2a:0b:35:ec:ae:ef:bf:da:d6:8f:
a8:c9:8f:55:43:41:d5:b0:0b:6f:f0:f8:7b:b6:54:51:2b:af:
6d:77:ee:4e:e9:e5:dc:64:f9:4a:39:ca:ac:db:ac:4d:fc:73:
e8:1e:cb:97:85:ed:f0:81:09:24:aa:94:53:73:0d:5f:d3:93:
fd:84:d5:2e:2a:c1:07:74:03:ec:26:f0:85:45:a8:e3:29:da:
27:ce:f5:46:48:1c:19:7d:bb:c5:5f:0b:b3:54:13:93:6b:95:
fc:e0:34:b9:ca:4c:f1:91:2f:2c:48:d9:f8:e2:26:fe:4c:88:
fa:9e:f7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:10:02 2026 by rpki-client