
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json)
Hash identifier: N0NNy7vG8s9JxQ3iEteyP88Lmsul3EMm7+f9SumSW2s=
Subject key identifier: 25:45:F0:F7:A5:D1:C5:1F:17:4E:7E:F5:7D:26:AD:E5:02:B6:44:08
Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C
Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
Certificate serial: 02F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
Manifest number: 02F0
Signing time: Sat 03 Oct 2026 01:28:53 +0000
Manifest this update: Sat 03 Oct 2026 01:28:53 +0000
Manifest next update: Sat 10 Oct 2026 01:28:53 +0000
Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: MOIPBFefEEu4CfUWIVgpfUhC8j8Ixx2eV9dMFztaM9k=)
2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: OIapcLyZFM+hQRAVWMttZwkt/KgLVw6oa519ZpxWQ4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl
rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760 (0x2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
Validity
Not Before: Oct 3 01:28:53 2026 GMT
Not After : Oct 10 01:28:53 2026 GMT
Subject: CN=6ac05a55-0697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:96:da:c5:79:cd:c2:a1:01:0a:70:27:ae:
13:b8:6c:d2:03:cf:95:f0:70:dc:bf:31:1a:bd:5a:
cb:b9:90:88:62:28:11:9a:e0:44:58:ae:e6:85:1f:
f9:08:03:34:64:6d:ba:f0:5d:73:bf:bf:cc:f7:af:
55:24:de:f7:ea:b2:26:ae:aa:fd:7c:47:40:a3:cd:
3e:a7:d8:79:bd:3c:d8:5b:7c:3f:0e:b1:5c:e3:c4:
4e:21:a9:36:80:93:7e:36:d5:ac:fb:bd:3b:28:f6:
0c:3c:94:06:00:8c:05:93:cc:e3:4e:cf:79:89:ce:
aa:5c:89:98:fe:1e:06:f0:7c:1e:0f:94:be:fd:31:
71:20:e6:58:e6:90:67:3e:5b:46:74:77:a3:02:c3:
5a:a7:22:22:a3:1d:62:40:4f:7f:32:53:5a:15:48:
a2:99:71:eb:45:a8:78:a5:73:6d:12:72:27:4d:b5:
5f:75:bd:60:b7:01:04:61:90:3c:1e:cc:e0:f1:2a:
ef:81:45:55:67:be:01:96:88:57:7a:b7:43:8c:3a:
31:e1:f4:35:12:78:fa:3e:f3:6c:79:c6:de:78:55:
93:e2:1e:9b:44:88:e3:92:2f:dc:70:67:67:d6:e9:
b0:2a:70:0b:41:64:4f:dd:7a:b6:7e:81:2f:fe:ec:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:45:F0:F7:A5:D1:C5:1F:17:4E:7E:F5:7D:26:AD:E5:02:B6:44:08
X509v3 Authority Key Identifier:
keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:f9:30:56:76:ae:94:62:13:92:a6:f9:c3:40:ab:6e:1d:22:
f7:8b:bf:a6:d6:78:ad:2f:5c:2f:b8:e3:50:13:f3:81:0f:6d:
a8:8b:72:48:42:ee:c4:49:64:1b:57:f1:43:07:54:a2:a9:96:
44:da:9f:55:a4:81:84:cf:5c:ce:a5:94:48:f1:d4:1c:5f:36:
40:27:5a:00:eb:cd:36:96:d8:7e:79:e2:bc:55:7c:7b:56:4b:
de:b2:c9:84:7c:c4:e2:0f:ac:93:09:d3:d1:79:b0:2c:e2:f0:
a0:c9:1f:55:c6:68:cb:fd:8e:cd:d8:02:e0:fe:c2:80:27:25:
de:2c:cb:af:8f:bf:29:65:12:73:4f:8b:14:b8:f7:a6:15:ab:
1d:6a:d7:03:f1:24:c3:a2:06:0f:14:69:2e:40:82:b7:6d:b3:
db:6b:df:47:0b:28:63:7d:79:1e:9a:a0:ed:d3:62:a9:74:f8:
32:8d:46:c8:d1:a9:af:b2:14:a7:b6:ca:d5:f6:53:b0:31:25:
6c:f4:39:30:7d:13:41:a8:54:36:70:e8:28:d6:01:57:fa:2c:
93:78:da:88:42:7b:33:77:eb:74:3f:68:34:90:74:1c:40:e3:
8e:6d:75:28:ea:2b:81:f4:fd:48:e9:08:b4:5d:99:38:4b:97:
bd:b6:53:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:05:52 2026 by rpki-client