
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
File: GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft (raw, json)
Hash identifier: tG/2E8qmPa1ThNL9HpM/M3td3L5e98D1T6Vx6nYLPkY=
Subject key identifier: 4B:53:EC:82:88:88:D9:BE:1D:C8:E3:50:33:A2:70:C5:A5:8B:98:15
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial: 0568
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
Manifest number: 0501
Signing time: Mon 02 Mar 2026 02:27:33 +0000
Manifest this update: Mon 02 Mar 2026 02:27:32 +0000
Manifest next update: Mon 09 Mar 2026 02:27:32 +0000
Files and hashes: 1: GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl (hash: 3Y4wYUnwB8miOCnxSdMWAWO0hP/ZidFwhaJVAR6wsw4=)
2: 4472E7B85B6011F0A2E8311CC4F9AE02.roa (hash: 82CEt9VL/OD9TisSAa9TvwDZ8sCfGc7f8L0y9tiJpe8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Validity
Not Before: Mar 2 02:27:32 2026 GMT
Not After : Mar 9 02:27:32 2026 GMT
Subject: CN=69a4f595-088a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:4e:9e:a2:8b:02:e1:73:a5:e2:a6:4f:f4:
60:43:3d:19:d9:86:23:bf:24:01:d8:a6:0a:11:46:
7d:56:47:98:b5:5e:1f:7d:7b:a5:e6:b2:ce:65:3b:
89:39:8f:d7:b8:89:81:7a:f1:2b:da:d5:1e:ec:03:
79:95:99:d9:2c:e2:8c:b4:58:c3:20:61:72:d3:8c:
ba:b7:ec:90:a4:55:ff:02:6b:ae:a7:62:43:18:21:
d6:0f:5f:fe:0a:ab:ef:93:af:fd:19:7f:54:84:97:
7d:9e:fc:81:b4:f4:4f:9f:96:ae:26:d9:1c:ce:10:
b6:ef:2d:b4:13:10:8d:32:c3:c7:21:f1:da:2d:82:
f3:91:ab:1c:19:e9:7a:2a:e2:20:cb:04:e3:58:a9:
96:6a:cf:bb:bd:6d:85:42:0e:0a:2d:23:28:a4:8c:
fc:58:de:b5:fb:c3:76:73:28:40:3f:8c:2e:50:dd:
97:db:4c:19:ed:bf:34:74:34:59:82:a4:46:7c:ee:
d4:e8:a4:cd:94:b4:e7:85:8d:62:16:65:98:6f:1f:
c1:e1:0e:9f:2b:44:c4:7f:ca:83:2e:66:96:4d:e4:
42:c3:bb:e2:a5:1d:5b:a4:e5:4a:80:7e:04:ad:01:
39:fc:98:2a:38:aa:d6:cf:e3:be:18:01:a2:39:b8:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:53:EC:82:88:88:D9:BE:1D:C8:E3:50:33:A2:70:C5:A5:8B:98:15
X509v3 Authority Key Identifier:
keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:46:ac:8f:50:1e:28:fe:90:72:67:1f:6c:16:29:a5:bc:f9:
48:ec:e2:67:25:8c:77:53:2c:bc:92:db:13:d1:bf:03:8d:49:
e1:fa:43:9b:bd:bf:ba:4e:62:90:6d:06:08:f6:2e:7c:62:32:
e6:c8:46:fe:ab:fd:04:bf:70:2f:73:99:9c:c3:aa:fe:96:5e:
2c:8b:9e:1d:b7:94:e9:85:da:84:87:b7:4a:fd:b1:7f:6a:d7:
ac:3a:12:cb:89:ec:65:aa:87:ae:fe:30:a9:ec:75:e7:09:5e:
52:cd:1b:b7:6d:a6:a2:7c:6a:21:25:a9:75:fc:a7:4d:de:cc:
a2:52:b8:a9:91:eb:74:4e:b7:23:dc:7f:06:34:c8:01:9f:d6:
cc:3e:6e:63:e7:e2:3a:be:38:37:4e:a8:b1:17:43:7b:dd:16:
49:10:77:8d:ae:64:23:62:bf:cb:d1:5f:ae:53:35:5b:c0:2c:
93:05:93:81:64:95:e2:ec:b5:34:e7:98:56:a8:53:28:39:4c:
f8:00:33:df:b9:c0:27:d8:6f:fb:eb:d6:4f:5e:7e:cf:bc:3a:
81:32:68:dd:8d:c6:b2:0d:66:1e:80:57:55:a1:68:0d:a5:0f:
6e:ed:bb:b3:6b:95:10:2a:18:25:5a:37:c3:8f:fd:e7:45:9a:
24:25:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:42 2026 by rpki-client