
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
File: gBcCvJze9z33Ob-31L0ve4iF4Hc.mft (raw, json)
Hash identifier: FO/MKMX4+vpcNdL1noRZdkTbS12GMcILCg/fY02PtQg=
Subject key identifier: EE:D7:A7:30:CD:A1:81:2B:FC:94:9E:95:FE:7B:5C:F7:6A:01:0F:9F
Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Certificate serial: 0502
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
Manifest number: 04EB
Signing time: Thu 16 Apr 2026 23:42:00 +0000
Manifest this update: Thu 16 Apr 2026 23:41:59 +0000
Manifest next update: Thu 23 Apr 2026 23:41:59 +0000
Files and hashes: 1: gBcCvJze9z33Ob-31L0ve4iF4Hc.crl (hash: x+KRu2juf2HHhX+3XgWP8XNTo37RsqWn/5oC6Wcjcls=)
2: 86BADBF8013511EE81A9F21FC4F9AE02.roa (hash: H5Kg0WWi2ArQlY3F4MuVxADOQ4KYkHou5PZkoZEWfh0=)
3: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (hash: +pV8MUFMD6DhuSiuoXuPicHZS5pTjm70rSYAIUz1WWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1282 (0x502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124731, serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Validity
Not Before: Apr 16 23:41:59 2026 GMT
Not After : Apr 23 23:41:59 2026 GMT
Subject: CN=69e173c8-2573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:f9:a1:37:75:bf:31:d3:4f:ac:b9:d9:3c:
d5:90:6c:02:4e:cb:2f:5f:5f:59:16:33:aa:14:ea:
ae:47:c5:7f:35:94:cc:87:b5:df:9d:1e:5c:00:38:
fd:50:df:3e:7c:6c:7d:87:ec:1e:4d:e2:df:27:41:
f6:13:ce:ea:59:27:5f:12:cd:9b:8f:10:b8:30:94:
57:c4:d9:e4:54:0a:70:53:be:ea:29:90:e4:0b:58:
f3:2f:62:11:c2:bb:fd:b1:c3:c6:c0:53:16:c0:1b:
49:61:ed:d9:aa:f3:e3:68:55:fd:6f:8c:42:b8:00:
56:0c:d5:34:8c:b8:ec:3e:58:68:bc:96:67:a5:e1:
a9:82:be:d9:ba:18:c4:89:52:34:f5:a3:69:ec:02:
66:68:0f:63:44:d1:38:77:41:f3:a1:ef:6c:a1:f4:
0d:7d:62:bd:d8:e7:96:8e:36:a7:fe:2f:f2:2b:52:
9f:fe:e7:50:4e:be:48:1f:57:08:14:69:a8:88:27:
46:dc:87:e5:df:29:91:e8:5a:18:25:7d:2b:ef:6d:
5e:00:91:dd:e7:2f:41:c9:7c:fb:21:f5:3c:aa:0f:
99:ad:77:64:2d:a0:f0:76:f9:c1:34:d1:73:47:15:
0f:a4:12:37:f5:ef:09:04:29:69:4f:04:78:f4:21:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D7:A7:30:CD:A1:81:2B:FC:94:9E:95:FE:7B:5C:F7:6A:01:0F:9F
X509v3 Authority Key Identifier:
keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:11:b5:47:99:dd:a1:a2:9d:18:39:5b:14:d0:73:d5:89:83:
07:20:19:8f:fc:38:e7:c7:53:a8:4b:b5:db:e4:27:c8:c1:64:
da:e3:c1:8b:e9:be:7f:9e:b0:f8:7c:20:00:0b:86:c1:50:9b:
4c:7d:15:a0:7c:28:93:db:cf:2c:dd:e9:30:43:d2:23:8c:6d:
72:87:85:4b:41:56:3b:37:e9:ff:f6:6f:79:11:17:42:77:e2:
e4:ae:6d:cb:fe:70:16:24:69:d6:f1:96:f4:0b:d4:2a:1d:de:
e1:7f:48:e3:a5:15:01:6c:34:cd:e9:61:37:32:ee:76:b5:eb:
9f:93:c7:01:b2:c2:ed:c1:72:85:5c:83:b2:23:47:af:25:11:
10:59:6a:ab:c8:18:5a:9f:bb:2a:3e:fb:4a:6a:f3:ba:7f:4d:
c8:99:1e:23:64:b0:27:f6:30:f8:08:54:6e:65:4a:30:03:c7:
b4:ef:48:b5:8a:f8:f0:b7:6c:60:33:48:3f:6f:f8:3e:5d:27:
c8:a4:d5:07:60:0d:d0:f8:03:7c:f3:dd:9d:f9:9b:ed:94:a1:
c7:d2:bc:e9:c2:f5:9d:cd:e8:72:98:01:0f:a1:30:70:f3:4b:
8c:bd:3e:ab:91:c6:5c:7c:05:7d:f3:15:36:88:f0:11:0f:67:
f4:bd:f8:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ3MzExMTAvBgNVBAUTKDgwMTcwMkJDOUNERUY3M0RGNzM5QkZCN0Q0QkQyRjdC
ODg4NUUwNzcwHhcNMjYwNDE2MjM0MTU5WhcNMjYwNDIzMjM0MTU5WjAYMRYwFAYD
VQQDEw02OWUxNzNjOC0yNTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo/X5oTd1vzHTT6y52TzVkGwCTssvX19ZFjOqFOquR8V/NZTMh7XfnR5cADj9
UN8+fGx9h+weTeLfJ0H2E87qWSdfEs2bjxC4MJRXxNnkVApwU77qKZDkC1jzL2IR
wrv9scPGwFMWwBtJYe3ZqvPjaFX9b4xCuABWDNU0jLjsPlhovJZnpeGpgr7ZuhjE
iVI09aNp7AJmaA9jRNE4d0Hzoe9sofQNfWK92OeWjjan/i/yK1Kf/udQTr5IH1cI
FGmoiCdG3Ifl3ymR6FoYJX0r721eAJHd5y9ByXz7IfU8qg+ZrXdkLaDwdvnBNNFz
RxUPpBI39e8JBClpTwR49CEXeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7XpzDN
oYEr/JSelf57XPdqAQ+fMB8GA1UdIwQYMBaAFIAXAryc3vc99zm/t9S9L3uIheB3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDczMS9CNkIwMTRCMjVE
NkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6MzNPYi0zMUwwdmU0aUY0
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dCY0N2SnplOXozM09iLTMxTDB2ZTRpRjRIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDczMS9CNkIwMTRCMjVENkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6
MzNPYi0zMUwwdmU0aUY0SGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAERG1R5ndoaKdGDlbFNBz1YmDByAZj/w458dTqEu12+QnyMFk2uPBi+m+f56w
+HwgAAuGwVCbTH0VoHwok9vPLN3pMEPSI4xtcoeFS0FWOzfp//ZveREXQnfi5K5t
y/5wFiRp1vGW9AvUKh3e4X9I46UVAWw0zelhNzLudrXrn5PHAbLC7cFyhVyDsiNH
ryUREFlqq8gYWp+7Kj77Smrzun9NyJkeI2SwJ/Yw+AhUbmVKMAPHtO9ItYr48Lds
YDNIP2/4Pl0nyKTVB2AN0PgDfPPdnfmb7ZShx9K86cL1nc3ocpgBD6EwcPNLjL0+
q5HGXHwFffMVNojwEQ9n9L34Kw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:56 2026 by rpki-client