
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
File: GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json)
Hash identifier: PY8G1T4txG7xAecPr/OhJbCn6+fkxgIQKQgOAWnChFg=
Subject key identifier: D1:48:D9:46:37:9D:C1:60:F3:08:E9:31:1E:92:B1:7D:59:03:80:F8
Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5
Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5
Certificate serial: 08C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
Manifest number: 08C1
Signing time: Sat 28 Feb 2026 20:45:14 +0000
Manifest this update: Sat 28 Feb 2026 20:45:13 +0000
Manifest next update: Sat 07 Mar 2026 20:45:13 +0000
Files and hashes: 1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: HP9I1nR0tKMzp0OHZlBIhnrU0H4/IBfqpbpOSOpjU9Y=)
2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: Mx6TdeWb7xQYRiw4RSx4+mjl75r/TBUYOnLqpN3UBjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl
rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2248 (0x8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158635, serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5
Validity
Not Before: Feb 28 20:45:13 2026 GMT
Not After : Mar 7 20:45:13 2026 GMT
Subject: CN=69a353da-51a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:e2:bf:4d:9a:bd:0d:94:d0:db:41:1c:d6:
02:3a:3d:13:58:93:e6:cf:8a:0c:09:3f:7d:c2:52:
75:7a:94:72:a8:71:e9:50:89:83:9e:f1:48:0c:30:
38:95:ab:95:bf:96:3f:ad:f4:6f:81:e8:15:a1:60:
5c:75:7c:d9:2e:60:7f:d0:ad:02:e9:a8:2b:ee:e0:
c5:89:db:88:80:80:3a:19:9a:c0:23:46:65:e3:4f:
b4:d0:95:13:8f:fc:d6:9b:d2:82:7f:cb:fa:8b:56:
65:4d:ff:4a:16:1a:01:bd:74:89:19:42:61:f7:fd:
ba:fb:23:99:ec:64:cb:52:81:0b:27:d9:c0:d7:e9:
63:18:49:44:43:90:ce:40:35:53:e0:c3:69:b8:ca:
ca:8d:f0:95:35:6d:b4:f3:56:ed:70:7b:45:1b:0e:
cd:b6:40:12:63:2f:e1:f0:98:22:17:16:a3:bd:3c:
52:3f:e7:44:22:5c:23:80:ab:ab:18:54:b6:b9:71:
b8:02:90:db:85:55:ab:cf:d3:35:73:55:91:78:d0:
3b:56:e1:b0:ad:fe:01:3e:ac:c4:71:89:1b:32:51:
b9:1d:4a:92:14:93:81:b7:fd:50:47:13:0d:7f:fe:
73:d4:54:13:54:a6:22:cf:d1:a2:a2:0a:5d:8a:6d:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:48:D9:46:37:9D:C1:60:F3:08:E9:31:1E:92:B1:7D:59:03:80:F8
X509v3 Authority Key Identifier:
keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:b5:35:38:ed:bb:04:46:c0:f7:ae:ba:a9:3c:7c:fb:08:d8:
cf:72:e3:e4:01:f9:3b:65:58:85:0b:df:a3:41:80:58:01:ff:
da:02:e1:c8:fd:d9:c7:72:f8:ee:2f:36:e2:bf:d6:29:73:3b:
48:3a:6f:c1:69:70:a3:e1:d2:71:20:92:cd:38:bd:68:77:d9:
80:66:52:d7:1f:58:64:4c:d0:34:b6:14:f3:cf:d3:79:e8:fe:
a3:ca:2e:48:e6:5a:e0:60:38:08:20:62:c9:2e:31:6f:87:74:
97:51:5c:d5:1f:cb:31:12:b9:e7:1d:7c:87:ac:41:46:35:3b:
0f:c0:c0:0d:75:72:64:4c:22:7e:44:09:8b:62:13:f2:20:9d:
df:14:25:5e:1f:7c:f4:60:cd:09:78:21:c2:6a:1e:9c:2a:bd:
d3:3d:72:26:3b:78:8b:26:b9:ea:7e:ee:bc:f9:1f:83:d3:37:
44:77:6e:52:e3:9c:4a:01:cd:30:f9:27:4e:1b:11:6a:52:e2:
53:65:62:b5:25:6d:e6:71:83:94:26:ce:ee:e3:d5:18:9d:52:
f1:ae:8e:b3:93:45:38:d1:02:3b:93:b1:98:18:90:68:97:25:
ee:eb:7b:b2:7b:07:a3:a6:06:3c:c5:10:8a:34:8a:ba:ee:c9:
5a:99:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:37 2026 by rpki-client