
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json)
Hash identifier: VunW3Zi2rAcmO1rRsRC5LsJE366p/W7LiQTgnP8LlVg=
Subject key identifier: CE:79:00:B9:C0:5C:3F:AD:50:B0:F4:33:D1:54:B1:6E:32:FE:29:8F
Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C
Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
Certificate serial: 02A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
Manifest number: 029C
Signing time: Sun 19 Apr 2026 01:23:38 +0000
Manifest this update: Sun 19 Apr 2026 01:23:37 +0000
Manifest next update: Sun 26 Apr 2026 01:23:37 +0000
Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: hNUxICSyh+DxrTS776UL8eKwbzgyiuu+m9yLHuZdJd8=)
2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: OIapcLyZFM+hQRAVWMttZwkt/KgLVw6oa519ZpxWQ4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl
rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 01:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676 (0x2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
Validity
Not Before: Apr 19 01:23:37 2026 GMT
Not After : Apr 26 01:23:37 2026 GMT
Subject: CN=69e42e9a-b772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:d7:53:17:08:53:a7:c3:67:bb:95:56:26:
8c:d3:6c:39:f9:64:b0:4b:ee:fe:b3:a8:36:5a:2c:
bd:21:93:73:1c:a1:4b:46:ea:76:6a:20:ad:5e:c6:
12:6b:53:b7:77:14:c2:95:3c:81:75:52:15:b7:64:
22:de:03:53:d1:1b:3d:b3:9b:86:63:88:3c:c1:ce:
6b:2b:81:d8:94:0c:17:61:78:78:f6:94:d9:ce:83:
f4:f8:66:30:88:d8:99:96:ab:32:54:50:8e:4f:4a:
8d:65:c9:ef:1c:25:2c:f2:7b:90:9b:ba:25:95:f8:
1f:50:19:7a:eb:aa:72:a7:c3:43:0a:a4:53:9a:b2:
1a:7d:dd:40:18:76:5f:d0:74:83:fd:22:e1:7f:a7:
38:20:bb:bb:39:3e:f9:91:fb:dd:d1:ce:1b:ed:cf:
49:fa:eb:3d:e9:52:ba:36:76:fb:5e:b7:ff:73:c1:
60:2f:bb:52:18:06:98:70:40:98:9c:12:0f:1a:6b:
50:4f:13:df:95:36:7c:35:08:8f:56:ae:00:24:66:
ff:d0:b6:bf:7e:2a:e4:fe:06:fe:5e:77:9c:fb:dc:
32:61:73:53:4a:ac:04:4c:87:d2:34:e4:d2:c0:8d:
1d:2d:82:49:7d:20:bd:eb:4b:89:82:6f:f1:44:eb:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:79:00:B9:C0:5C:3F:AD:50:B0:F4:33:D1:54:B1:6E:32:FE:29:8F
X509v3 Authority Key Identifier:
keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:7e:13:13:4a:4f:79:e0:80:c1:f0:19:7a:7d:fa:7b:ab:95:
ef:77:0d:8b:a0:8a:66:2e:5c:c2:a3:2c:cc:08:0a:c6:54:56:
31:ae:29:93:38:42:2f:b4:ed:c8:4d:de:e6:6b:39:2f:f7:a5:
a7:13:af:b6:30:ab:e8:ba:97:ab:d0:3e:46:5e:ce:24:b8:f8:
a2:6b:80:75:de:be:83:40:15:17:66:e3:ff:3f:d6:6c:a1:c6:
44:cb:1f:c0:e9:a8:5f:fc:5f:96:65:69:d6:90:40:8f:6d:86:
24:cf:d0:9c:a5:6f:fd:bb:29:59:f7:bc:6b:fe:57:85:9f:71:
7e:32:1d:a4:c1:90:75:4c:8e:92:70:51:2f:81:d5:3f:f3:03:
1c:99:f2:32:a0:2c:e4:8d:ae:d4:70:70:21:18:20:89:ee:01:
2a:11:12:e5:d4:77:c6:17:63:76:44:27:e3:10:80:79:74:25:
1d:98:57:36:cf:b7:d0:cc:cb:dc:59:b0:77:8b:67:1e:5d:b9:
a6:40:ca:1e:6e:06:eb:43:cf:ec:7f:30:0b:22:a3:33:88:bf:
b9:00:6f:99:a1:f8:4a:ea:a5:53:d6:f6:bd:5d:4c:2e:9c:88:
72:22:3a:16:b0:3a:47:06:c3:42:e8:a7:4e:1d:0c:32:1c:46:
d5:5a:1a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:44 2026 by rpki-client