
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
File: gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json)
Hash identifier: Y2CjzSGMebCXOjRaEuEzC9wLOXqF/7KScZZit98r+bA=
Subject key identifier: D4:CE:5B:EC:5B:CD:14:6D:75:9C:3B:52:79:E4:51:12:B9:BC:EF:D6
Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
Manifest number: AB
Signing time: Sun 01 Mar 2026 08:33:47 +0000
Manifest this update: Sun 01 Mar 2026 08:33:46 +0000
Manifest next update: Sun 08 Mar 2026 08:33:46 +0000
Files and hashes: 1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: sStnNZ1mBGC1t2IW85N2gcOSesL1r4oQnnGuBxGJW34=)
2: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: JIEsA7areAo/HXr9zawFvTRRX2S0zguLE0PWXUlfIVA=)
3: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: iS1RAh1nMPiaCmT07O7xAgf1BvaBTAfnVl6oRY7qhr8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Validity
Not Before: Mar 1 08:33:46 2026 GMT
Not After : Mar 8 08:33:46 2026 GMT
Subject: CN=69a3f9eb-db82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d5:84:b2:13:a9:65:81:e7:cd:d5:38:d6:a3:
b5:e2:00:1e:cc:a6:6b:f4:87:33:cb:47:75:76:1a:
f3:f5:0f:6d:f4:b5:54:78:b9:fd:11:c3:a5:be:62:
e0:df:11:b5:8f:93:37:88:ef:af:a1:fa:43:f6:3b:
4e:f9:b1:85:42:3b:43:12:9c:29:b4:33:b2:d9:1c:
a3:96:ba:90:23:5b:5b:87:b0:4a:4e:ec:1d:4f:f7:
51:f6:c4:81:dd:d1:33:80:be:24:db:cc:84:df:db:
c0:ad:b7:43:de:49:d7:bc:df:d7:71:45:6f:60:29:
26:ea:07:a7:6d:5e:54:68:ea:04:e1:03:0a:fb:14:
3d:44:d3:03:f0:6b:e2:62:b7:57:65:2e:b1:89:75:
da:75:d5:22:c6:a5:09:70:4f:5d:1e:58:02:08:f5:
dc:fc:6b:0f:bd:4c:e0:a8:0a:e3:d5:73:81:95:14:
71:66:39:07:f6:c9:ee:8c:11:e4:8f:d6:26:aa:ee:
d5:bc:f5:90:e8:8a:3e:d1:40:cd:a2:46:db:14:7b:
8a:a1:bb:45:87:c7:49:40:59:2f:77:30:22:3a:b8:
7d:42:3c:14:a2:d0:bb:6b:8d:dd:ea:f7:8b:45:7b:
19:ba:3c:58:ca:df:6b:d2:db:63:b2:0d:b9:cd:de:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CE:5B:EC:5B:CD:14:6D:75:9C:3B:52:79:E4:51:12:B9:BC:EF:D6
X509v3 Authority Key Identifier:
keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:da:77:9e:d4:98:a2:34:76:79:52:2c:69:43:d1:db:49:ff:
1e:f1:20:a4:7a:6a:53:88:4a:48:70:50:bd:7e:91:08:11:d7:
db:21:e9:0b:c7:66:19:4d:cb:e0:3b:d6:67:47:c7:51:0f:d8:
f0:9d:5d:24:61:53:b3:1b:3f:0f:4c:96:62:26:51:ba:7a:70:
2c:20:6e:19:1e:c6:57:c8:5d:58:c4:d3:d9:d6:d9:a5:cd:3a:
9b:48:6d:ea:91:39:1f:aa:35:66:67:9e:dd:3b:3e:78:b9:3a:
b9:08:e4:3a:10:c9:b4:14:34:5c:e1:d6:3a:83:89:e4:4c:84:
67:19:6c:d6:15:aa:7a:dc:7b:df:f0:c7:5b:a0:af:b7:b9:a4:
e0:02:21:61:8a:6c:86:01:14:57:e6:d3:c6:c2:3b:bb:d8:5b:
2c:f3:e7:2c:88:2c:23:75:1b:4a:1e:5e:8f:43:b7:5c:3c:3f:
73:02:39:08:b5:67:06:16:f1:5a:50:07:2e:f3:ed:2a:27:4f:
fc:14:b9:a6:92:c4:e4:41:1b:f7:6e:00:d8:5f:fa:66:90:ef:
9d:97:30:f3:99:be:45:cd:01:f8:f5:7c:21:4f:aa:17:6b:f6:
8b:01:e0:25:2f:bc:a9:15:b7:80:5d:01:df:22:ea:dc:d6:3d:
4d:aa:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:09:05 2026 by rpki-client