
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
File: gBf49rHsAjxINqRXp7BYQqBxnyg.mft (raw, json)
Hash identifier: eiL3ZDmPgMlv73k0KPsDibykUAUOfzZjpwjIRgHiZII=
Subject key identifier: BF:7C:6F:F9:F6:41:AD:AC:1B:85:3C:B3:5D:71:DA:C7:7B:76:B0:14
Authority key identifier: 80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
Certificate issuer: /CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Certificate serial: 0BD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
Manifest number: 0BCB
Signing time: Mon 02 Mar 2026 18:50:41 +0000
Manifest this update: Mon 02 Mar 2026 18:50:41 +0000
Manifest next update: Mon 09 Mar 2026 18:50:41 +0000
Files and hashes: 1: gBf49rHsAjxINqRXp7BYQqBxnyg.crl (hash: +9vyNuzrK1u79RwFlRK56SLqDXzTfdH/6WewmqsrTn0=)
2: 6DEDEF66387A11EA9450A37CC4F9AE02.roa (hash: ELrRGZxBbx62IbZuq+m878L42woZMXpG8f6EE7+m9cY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3029 (0xbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B088, serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Validity
Not Before: Mar 2 18:50:41 2026 GMT
Not After : Mar 9 18:50:41 2026 GMT
Subject: CN=69a5dc01-29ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:92:80:c0:10:3b:08:a4:ca:8a:14:66:4f:
a3:04:f0:dd:1c:a0:23:67:e2:3e:b6:f0:09:10:22:
4f:67:7c:6c:84:84:d0:9d:46:a8:ba:bc:d7:8f:82:
f5:2f:34:12:ec:48:3f:da:a0:90:19:ee:46:ed:62:
da:63:63:0a:5a:3c:af:ab:7c:3d:3e:de:b5:49:69:
09:66:dc:5d:8e:db:c6:72:f8:bb:8a:52:e5:28:c3:
f9:66:60:f1:7d:20:d3:77:2e:60:0e:fb:83:ea:17:
69:f2:f9:5d:b8:3c:19:9b:4e:1b:e0:14:ae:23:c6:
44:3a:19:6b:2d:9b:44:0f:99:7a:63:c5:fd:9b:18:
64:00:1e:cf:f9:a2:e2:10:df:2e:74:0e:73:59:e3:
07:41:74:04:8d:4c:57:3c:65:e2:36:d1:72:8c:9f:
52:ee:44:e7:26:95:4a:c9:a7:30:c4:46:6c:41:8b:
b8:49:75:c0:ee:bf:62:01:18:7c:e9:a7:07:5e:00:
91:ce:d0:48:1c:52:c9:85:a1:95:cb:3f:9c:15:2f:
3c:27:2e:d4:7d:98:5e:bf:08:cd:65:d8:67:db:b0:
ce:bd:08:dc:02:fa:c7:e9:68:d5:24:2b:51:1b:63:
ae:66:48:37:11:6c:8e:0f:a4:17:2e:5b:74:d3:07:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7C:6F:F9:F6:41:AD:AC:1B:85:3C:B3:5D:71:DA:C7:7B:76:B0:14
X509v3 Authority Key Identifier:
keyid:80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:0f:7e:ac:1e:bf:10:42:8d:16:bc:3e:85:2e:76:89:7f:5d:
a2:e0:e5:eb:7e:b6:64:dd:d8:08:f8:18:8c:80:79:b5:80:29:
b5:55:7b:98:49:2b:83:2d:46:e1:a3:d7:5b:f9:03:67:d9:df:
ec:e0:93:26:a5:50:5a:1e:4e:16:65:b9:4b:26:29:fe:29:8f:
18:3a:bb:5d:80:2a:cd:4b:fd:98:34:60:06:cd:cb:d7:3c:cf:
86:a1:9e:4f:8d:23:e4:fa:2b:4b:e2:c5:ed:af:2d:c5:aa:07:
b9:8f:2b:61:94:87:47:d2:31:ce:e7:cb:d0:82:28:92:b1:5a:
1d:ff:8a:6d:d8:99:b6:2f:40:1d:ed:6e:44:43:cb:47:c1:4d:
73:a9:e7:17:18:93:fa:99:80:f2:a4:fd:e5:b0:32:18:db:d2:
69:dc:ad:0c:e8:ad:99:43:b5:43:22:88:18:6b:7a:b6:21:a3:
8d:98:c0:2e:31:b9:4d:de:9e:a4:cf:03:ac:b7:04:7b:2f:53:
c8:02:4d:eb:85:06:f2:97:59:44:15:d6:c7:d4:43:63:7f:c6:
8e:92:04:c5:37:9b:fc:e3:34:d3:ad:f0:c4:e3:50:ef:78:dc:
59:f3:5d:65:eb:00:c2:0d:26:57:d2:e8:23:8b:1c:f6:e9:20:
8d:d3:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:42 2026 by rpki-client