
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
File: gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft (raw, json)
Hash identifier: Y/y1i6FgK0lrJX25po8ODBDhIe10aRRBf7+ZgviCWMc=
Subject key identifier: B6:A4:43:23:7A:96:3E:60:2B:E3:C9:9A:A4:4B:92:6E:EB:8D:55:77
Authority key identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74
Certificate issuer: /CN=A914E4E2/serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
Manifest number: 44
Signing time: Fri 17 Apr 2026 08:09:26 +0000
Manifest this update: Fri 17 Apr 2026 08:09:25 +0000
Manifest next update: Fri 24 Apr 2026 08:09:25 +0000
Files and hashes: 1: gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl (hash: /1NnVIb9gYP2li6GYjn3QyX/0w0UkjAlHv2zjXRwoyw=)
2: 6F81A4F8E64811F09CAB54BE376F56BC.roa (hash: kTGqoANe0FuZnU39X94Ie/hbapSgOp3eh2oaDxbXHwE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl
rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E4E2, serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
Validity
Not Before: Apr 17 08:09:25 2026 GMT
Not After : Apr 24 08:09:25 2026 GMT
Subject: CN=69e1eab6-1449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:26:3d:6d:11:a6:ec:6e:1a:fb:16:ee:d7:
ee:bf:6d:db:f5:7c:54:44:1e:98:99:61:f2:cf:75:
1c:90:aa:15:2d:09:4e:b8:43:29:61:dc:21:ff:ce:
fb:df:b9:a4:9a:c8:86:7f:a9:4d:83:99:6f:86:90:
25:ff:df:75:15:54:09:52:27:4c:b1:85:09:87:be:
44:97:e8:76:d3:50:8d:11:fc:38:39:df:ab:e1:3c:
f6:c0:6e:01:ad:d7:c0:ba:43:6c:23:e5:03:9a:67:
9d:16:82:15:d4:a9:f6:48:77:62:75:66:b9:78:f8:
cf:c4:44:4b:cf:1d:9d:9e:65:8c:ab:f7:f9:14:b9:
5c:9e:0e:4b:77:e3:bf:ed:49:cd:3b:a5:e0:33:1e:
0b:e7:e7:e0:e8:cf:9d:bd:2b:8a:8e:80:33:b0:2e:
4a:4f:14:d2:ef:41:47:a5:1f:bf:66:56:86:c6:36:
b2:42:57:da:c9:34:e7:e5:35:7e:b6:19:17:a5:5c:
40:55:8e:7a:ae:32:61:22:e8:dc:d3:a3:a3:33:4c:
55:48:1c:02:7f:70:6c:c0:b5:2e:f7:7f:fc:ba:dc:
74:e0:2a:62:1e:04:ef:cb:9b:41:ce:32:ae:a3:86:
4e:be:35:de:da:9b:76:09:d1:63:42:9b:50:71:69:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A4:43:23:7A:96:3E:60:2B:E3:C9:9A:A4:4B:92:6E:EB:8D:55:77
X509v3 Authority Key Identifier:
keyid:81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:f8:9b:5f:fb:05:b5:e8:85:5a:a0:47:76:f4:4d:e1:52:3f:
d1:2c:3c:6c:f8:f4:58:bd:10:dd:f0:f3:f0:20:16:5d:80:52:
32:c9:11:c1:46:be:1a:33:e0:37:07:d6:5e:7a:b7:53:8f:af:
93:37:d5:75:9a:44:d6:bf:e2:1d:e5:a5:08:23:f7:15:73:2a:
65:27:63:ce:10:7f:a0:85:9d:0d:b4:a7:48:52:29:67:14:60:
8c:05:28:5d:e1:d5:6e:3b:df:6f:ba:d4:85:8d:de:e0:8d:89:
23:ad:23:0d:7e:8a:c6:92:71:7f:ab:31:3d:fa:9f:10:95:55:
09:51:02:63:9a:d0:50:b7:8e:05:ad:e7:43:a3:ff:31:52:f0:
07:ac:97:6e:41:85:48:6e:3f:b2:c0:40:09:32:e7:28:35:d5:
f7:aa:fb:59:3a:22:51:cc:c1:c8:e8:80:33:78:92:43:78:85:
7b:ed:bb:83:86:a8:cf:09:b3:4b:03:91:12:a4:0a:40:a8:1f:
b8:8d:ce:23:80:9b:ed:67:ec:9f:c0:3b:74:e4:48:12:64:40:
24:e4:1b:47:2d:3c:9a:e4:96:03:a7:1d:00:8d:fd:eb:65:7e:
1c:05:ef:53:ed:a1:ad:f5:f5:f6:ec:aa:8b:0e:4b:92:97:14:
6d:f6:67:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:36:19 2026 by rpki-client